Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
File:                     EMTixWLflMzKm0ggghD9Fs-6kjU.mft (raw, json)
Hash identifier:          nNgw9mjf7uPiyGI898T5OvgQRd4wiWcdm+JLxdDNdMM=
Subject key identifier:   A6:27:DD:10:05:A9:38:F3:3C:56:88:A0:72:75:B3:40:E4:8C:30:25
Authority key identifier: 10:C4:E2:C5:62:DF:94:CC:CA:9B:48:20:82:10:FD:16:CF:BA:92:35
Certificate issuer:       /CN=10c4e2c562df94ccca9b48208210fd16cfba9235
Certificate serial:       019CAD5A3EC6041D28C1844346CB91B0A004
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
Manifest number:          1844
Signing time:             Mon 02 Mar 2026 07:01:38 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:38 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:38 +0000
Files and hashes:         1: EMTixWLflMzKm0ggghD9Fs-6kjU.crl (hash: QuuaLrTmM3H8QazJWtCFbresfX2eviLrVSLFp+pf7po=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:3e:c6:04:1d:28:c1:84:43:46:cb:91:b0:a0:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c4e2c562df94ccca9b48208210fd16cfba9235
        Validity
            Not Before: Mar  2 07:01:38 2026 GMT
            Not After : Mar  3 07:01:38 2026 GMT
        Subject: CN=a627dd1005a938f33c5688a07275b340e48c3025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:85:8f:74:0a:05:2f:f0:19:25:15:a7:f6:1c:
                    05:2f:83:a3:ce:1e:c2:a4:8b:48:ee:16:be:9e:fd:
                    69:83:69:c4:7f:c3:3b:98:7b:b3:05:7e:ac:09:33:
                    cb:19:59:70:5c:bc:17:a5:f9:79:72:e8:ff:5b:6c:
                    ce:6c:e1:2a:23:1a:42:a6:21:02:66:51:a5:99:03:
                    30:0e:05:7e:74:ec:b2:92:17:bb:13:8d:f4:8c:67:
                    5e:3a:18:59:7c:83:03:2f:51:e7:e4:15:3a:ff:82:
                    3e:6e:7d:6d:06:b1:e4:02:51:20:db:d4:2c:1f:de:
                    1f:9f:54:2b:4a:87:a1:28:e0:e4:63:60:37:4b:29:
                    95:7b:f8:d7:5f:d3:09:3b:b2:67:59:5e:3b:94:ba:
                    3a:88:1d:ea:e8:5b:36:e8:4b:d9:96:15:83:3c:5a:
                    8b:41:5c:27:d4:db:bd:c9:e5:34:6f:d8:b4:d2:8b:
                    03:bd:8f:84:34:ff:5e:ce:87:ec:21:55:f3:0b:3b:
                    d0:05:39:88:22:cf:22:79:be:da:be:a6:fc:55:da:
                    ca:b3:89:a7:52:a7:08:b2:fa:4f:e5:ed:b1:dc:ce:
                    f1:a5:ca:b1:44:6b:1f:df:b5:e8:d0:9c:03:6d:14:
                    fa:cb:af:f8:fe:a3:70:44:d0:28:7c:44:2e:1e:2e:
                    31:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:27:DD:10:05:A9:38:F3:3C:56:88:A0:72:75:B3:40:E4:8C:30:25
            X509v3 Authority Key Identifier:
                keyid:10:C4:E2:C5:62:DF:94:CC:CA:9B:48:20:82:10:FD:16:CF:BA:92:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c5:4f:20:31:dc:c7:2f:17:32:a7:7b:85:60:45:db:6a:a7:
         4c:f1:84:d1:51:9f:5e:ca:dd:59:11:23:48:33:ca:02:5b:4b:
         61:a9:fd:7d:76:80:59:f7:1a:67:7a:13:4f:65:a1:48:8b:78:
         3f:7e:0a:70:b6:55:5a:3a:42:1b:b4:76:88:1e:63:e6:ef:68:
         d9:e3:97:82:8a:d3:22:3c:16:3c:9d:80:56:ae:8d:38:65:28:
         94:4e:46:ae:52:4f:f3:49:25:73:66:46:3d:c9:d2:a7:9d:f3:
         4e:0d:8d:3b:07:75:24:c8:cb:1b:0a:fd:00:57:76:54:db:8b:
         7f:d3:88:0b:db:23:4b:1d:06:f4:d4:ab:0a:f5:83:5a:ad:06:
         67:9a:e8:86:7d:d2:e0:3d:b0:55:b5:13:45:35:10:ab:18:a7:
         91:39:b9:4a:23:36:30:1f:e4:ed:24:ed:0f:c9:4e:03:53:5c:
         30:ae:0e:a9:b9:0a:5d:a9:a7:ef:dd:6d:35:9c:d2:da:22:50:
         49:f2:c0:c8:05:79:5b:b6:cd:15:e5:1d:0c:60:eb:16:de:9c:
         1c:5a:e4:e0:19:d0:d6:76:cb:5e:92:25:3b:36:25:97:a9:b7:
         5d:17:af:45:71:ee:a4:06:4c:a9:e0:50:bb:fa:a5:3c:72:cf:
         85:bf:4e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:36 2026 by rpki-client