Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft
File:                     emc1t6VToWgMEa3T5Iw2NbU5eco.mft (raw, json)
Hash identifier:          pRlqINT4H1Oz7nZ6uVcu/0j8TIkMBx8zFqlHqd9YGQw=
Subject key identifier:   EF:4E:34:7F:0D:11:14:12:13:52:02:0C:39:D5:FF:4E:59:5D:EA:73
Authority key identifier: 7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA
Certificate issuer:       /CN=7a6735b7a553a1680c11add3e48c3635b53979ca
Certificate serial:       019D97E1B3FA768477001552792F8B33E5BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft
Manifest number:          18CB
Signing time:             Thu 16 Apr 2026 20:00:44 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:44 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:44 +0000
Files and hashes:         1: XcfrqwVkAecmKG1ymoxc8TU7gig.roa (hash: oUgtmg6950LaRLY6EKaoiD6KJRJQ+cPDjzmJU5AJKho=)
                          2: emc1t6VToWgMEa3T5Iw2NbU5eco.crl (hash: SksOvejtrKDUo0mrsKb7Py7Bt+tP+Gl8wVtFgtK2Gxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:b3:fa:76:84:77:00:15:52:79:2f:8b:33:e5:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a6735b7a553a1680c11add3e48c3635b53979ca
        Validity
            Not Before: Apr 16 20:00:44 2026 GMT
            Not After : Apr 17 20:00:44 2026 GMT
        Subject: CN=ef4e347f0d1114121352020c39d5ff4e595dea73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:a5:14:58:aa:f2:71:16:89:1a:ce:44:58:
                    b3:c8:9a:fc:9d:2c:f2:66:4f:c0:ae:45:e1:29:9f:
                    5d:da:67:c8:01:58:5e:ed:61:d4:9e:01:b2:91:a2:
                    f4:15:20:c4:a2:7f:c4:e5:93:71:5b:86:1a:e7:f8:
                    eb:9b:bb:74:bd:50:96:c5:56:40:67:e5:7b:c0:c7:
                    be:10:31:75:23:0d:91:42:fa:49:73:9a:03:d6:6b:
                    c0:1c:28:ec:4a:d3:31:bb:95:89:2e:a8:b1:aa:95:
                    53:8c:e7:0a:08:85:de:24:18:74:7d:31:66:36:6d:
                    c7:7c:0f:b6:84:07:45:89:44:f5:0a:40:b3:98:a1:
                    1d:32:45:ae:7f:e1:e8:7c:ad:a3:7c:61:4a:57:de:
                    60:85:ef:df:cf:9a:e9:db:15:1f:f7:ee:3d:25:40:
                    64:cc:b2:05:25:c0:e5:c1:e4:b9:0f:19:87:2b:b4:
                    21:a6:0a:bf:ad:fd:d8:78:8c:21:8b:33:f4:1a:b5:
                    bc:bc:63:37:09:8c:e3:6b:2a:c6:15:a1:1e:21:6c:
                    b9:4d:00:bf:60:36:96:db:02:d7:17:72:a7:95:a9:
                    61:71:6f:43:ad:17:c2:f6:53:9f:a6:41:55:70:8e:
                    2c:ec:83:8b:97:8f:41:00:c1:a9:22:64:a4:e7:07:
                    b8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4E:34:7F:0D:11:14:12:13:52:02:0C:39:D5:FF:4E:59:5D:EA:73
            X509v3 Authority Key Identifier:
                keyid:7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:ec:ba:2b:57:b9:44:b0:8c:cc:6a:55:b4:3d:60:aa:16:73:
         eb:2b:73:49:38:ba:0e:a6:01:f8:2d:85:7e:99:d5:c7:ce:d0:
         b4:d3:9f:98:a4:b7:65:36:ee:28:bc:a2:6a:00:3c:71:b0:b5:
         e1:b4:bb:fb:6d:bd:57:f2:dd:99:3f:50:d6:a3:50:ac:d1:90:
         96:ab:d9:0d:20:82:13:f7:7f:37:08:ac:86:3e:c8:5e:07:58:
         a6:a5:77:ce:b3:e9:66:67:65:c5:95:c1:8f:9b:c7:41:8b:da:
         80:90:eb:1a:8d:57:fd:d6:d8:61:30:ed:6f:42:a0:67:13:1b:
         e6:6c:8d:68:38:b2:c8:73:f6:dd:b3:f8:e8:ac:d9:c5:07:2c:
         88:26:ed:7b:5e:0d:24:db:a2:de:a8:69:f9:dc:81:ee:c0:59:
         1e:b1:05:54:c6:9e:57:d8:08:c9:61:8b:94:6c:8d:77:5c:ca:
         e5:c2:54:3a:14:3c:f5:3f:46:d7:84:b7:13:07:71:40:9a:e7:
         2b:3d:46:7e:6a:f8:70:de:22:f6:5a:ea:e3:69:e6:a4:de:c6:
         f1:e5:45:c5:fd:ba:80:78:33:df:48:4b:1e:d6:79:2c:6e:15:
         e5:7d:47:f7:06:00:54:cc:2a:49:0e:af:09:a3:0c:8d:d6:fe:
         d1:07:ba:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:53:42 2026 by rpki-client