Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft
File:                     EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft (raw, json)
Hash identifier:          LctQ12TxpBjhzlsukLtlHrOVC31VljK3DHpN1X6MecA=
Subject key identifier:   4C:1D:0F:87:97:5F:20:96:6A:11:4E:39:21:35:1A:A8:49:4D:0F:70
Authority key identifier: 12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4
Certificate issuer:       /CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4
Certificate serial:       019FA9ABDE84C545818C819720BE81DD96CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft
Manifest number:          1817
Signing time:             Tue 28 Jul 2026 17:00:40 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:40 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:40 +0000
Files and hashes:         1: EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl (hash: FSdvn0GZiauieQo3V7j3fDFE/pOx9F7tuxZICua6jtQ=)
                          2: uTl0JvlxYYPXSlWv5UjY4JUTXms.roa (hash: vAyl07+E7ZfATYQNzl4ukqmCla5aJ3MshRD6eW95zyg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:de:84:c5:45:81:8c:81:97:20:be:81:dd:96:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4
        Validity
            Not Before: Jul 28 17:00:40 2026 GMT
            Not After : Jul 29 17:00:40 2026 GMT
        Subject: CN=4c1d0f87975f20966a114e3921351aa8494d0f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:67:9b:6f:fb:e0:76:70:86:4a:8c:8f:d0:e2:
                    a3:15:34:9e:67:91:34:87:fc:a6:89:1f:47:0b:86:
                    fb:48:27:ea:a1:ff:9f:d9:45:7e:42:0a:2e:42:49:
                    55:6e:32:c7:8b:8b:e9:d1:8b:b8:e2:8f:9c:21:9e:
                    13:42:cc:20:f4:54:64:40:30:ad:94:e1:65:1f:49:
                    a8:ea:15:37:43:74:3d:49:73:47:96:09:ac:0a:d6:
                    14:f4:62:b0:aa:42:c3:ff:f4:08:bb:d9:fe:f5:33:
                    8d:de:0c:de:6a:c0:c5:78:05:90:3e:28:6c:00:3d:
                    22:c8:ba:6f:d7:59:ed:08:a2:16:d5:bd:8a:45:d1:
                    c7:c2:d2:83:2d:da:5c:e5:98:c6:ee:2f:49:82:4d:
                    57:ab:01:d5:04:a4:71:35:e5:0b:85:79:fc:13:bd:
                    b4:19:c3:3c:f2:4a:91:5d:43:8b:eb:a2:50:83:ed:
                    d3:26:ae:2c:7b:c8:96:22:59:21:c4:d9:6d:9a:5f:
                    44:4c:e1:58:18:95:02:e1:19:c8:db:77:d5:01:ab:
                    49:27:4b:d8:27:14:ed:fb:65:5f:59:1a:39:30:14:
                    cb:00:fa:10:56:2e:bd:d5:c9:af:b2:66:c1:aa:65:
                    71:dd:e3:be:e1:77:f2:bd:b5:f2:e9:cc:91:39:e5:
                    99:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1D:0F:87:97:5F:20:96:6A:11:4E:39:21:35:1A:A8:49:4D:0F:70
            X509v3 Authority Key Identifier:
                keyid:12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:0c:00:ff:f5:d9:d7:b5:b2:bc:ad:9d:d6:94:e8:95:97:dc:
         36:1b:e9:ba:e3:8b:e9:34:c4:11:12:46:ac:67:0b:36:4b:58:
         dd:cd:3f:d4:a0:52:de:eb:d9:2d:a5:87:1f:13:aa:81:81:95:
         5f:d3:38:0f:d4:9a:d5:0c:4d:51:6e:39:e7:44:da:a4:57:ae:
         24:51:d2:27:82:08:67:dd:c0:f2:7a:51:1d:b1:4e:a9:01:7b:
         ae:93:ba:42:30:ef:bc:7e:5e:3b:b1:ba:c8:f9:a1:f5:4a:3a:
         9d:d7:f5:b2:e5:2f:da:d1:31:77:1a:98:dc:2e:2b:66:2a:6a:
         95:1a:13:8b:3b:1c:8e:3c:74:23:02:d7:3b:8e:c2:e2:9e:09:
         33:24:18:e3:a9:b6:36:a5:6c:1d:73:61:d0:1c:98:6c:80:6c:
         dc:82:49:b1:6d:63:98:47:3c:71:4d:4d:bb:1c:7a:da:78:81:
         18:be:15:c8:d4:7a:d1:51:57:c5:4a:29:fc:2f:38:ba:d9:f3:
         1f:bd:ef:c1:e3:76:a9:d6:e0:ea:bc:98:52:bb:e7:17:c2:14:
         6c:f8:09:1e:bb:de:64:3a:d6:0b:0c:94:00:d2:9a:01:ad:87:
         62:19:86:f0:b7:e9:6a:09:e0:f0:13:4e:3a:1e:3d:57:72:c8:
         ee:2e:0a:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq96ExUWBjIGXIL6B3ZbPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjJmN2RhOGZlZTVkMmE3YmNkZDQwMTRhNzBhOTI3ZGI0
OTlmYTQwHhcNMjYwNzI4MTcwMDQwWhcNMjYwNzI5MTcwMDQwWjAzMTEwLwYDVQQD
Eyg0YzFkMGY4Nzk3NWYyMDk2NmExMTRlMzkyMTM1MWFhODQ5NGQwZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGebb/vgdnCGSoyP0OKjFTSeZ5E0
h/ymiR9HC4b7SCfqof+f2UV+QgouQklVbjLHi4vp0Yu44o+cIZ4TQswg9FRkQDCt
lOFlH0mo6hU3Q3Q9SXNHlgmsCtYU9GKwqkLD//QIu9n+9TON3gzeasDFeAWQPihs
AD0iyLpv11ntCKIW1b2KRdHHwtKDLdpc5ZjG7i9Jgk1XqwHVBKRxNeULhXn8E720
GcM88kqRXUOL66JQg+3TJq4se8iWIlkhxNltml9ETOFYGJUC4RnI23fVAatJJ0vY
JxTt+2VfWRo5MBTLAPoQVi691cmvsmbBqmVx3eO+4XfyvbXy6cyROeWZzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwdD4eXXyCWahFOOSE1GqhJTQ9wMB8GA1UdIwQY
MBaAFBJi99qP7l0qe83UAUpwqSfbSZ+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1MMzJvX3VYU3A3emRRQlNuQ3BKOXRKbjZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8zNWE4MDctYjI4ZC00NDJkLWJhYjAt
YTYxMGQ3NWMzMmUyLzEvRW1MMzJvX3VYU3A3emRRQlNuQ3BKOXRKbjZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8zNWE4MDctYjI4ZC00NDJkLWJhYjAtYTYxMGQ3NWMzMmUy
LzEvRW1MMzJvX3VYU3A3emRRQlNuQ3BKOXRKbjZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAwA//XZ
17WyvK2d1pTolZfcNhvpuuOL6TTEERJGrGcLNktY3c0/1KBS3uvZLaWHHxOqgYGV
X9M4D9Sa1QxNUW4550TapFeuJFHSJ4IIZ93A8npRHbFOqQF7rpO6QjDvvH5eO7G6
yPmh9Uo6ndf1suUv2tExdxqY3C4rZipqlRoTizscjjx0IwLXO47C4p4JMyQY46m2
NqVsHXNh0ByYbIBs3IJJsW1jmEc8cU1Nuxx62niBGL4VyNR60VFXxUop/C84utnz
H73vweN2qdbg6ryYUrvnF8IUbPgJHrveZDrWCwyUANKaAa2HYhmG8Lfpagng8BNO
Oh49V3LI7i4K5Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:36:20 2026 by rpki-client