Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File:                     eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier:          UcfRrimLizlO7Q7jL3gMD7lZcaDxWsUs6f8h26Cb4/s=
Subject key identifier:   5E:9C:F9:6D:0B:64:42:82:2F:A1:84:85:F2:EF:E8:F1:11:AD:AD:84
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer:       /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial:       019FAA887A074FB0E636B1D0E2AA5B6431A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number:          0E7E
Signing time:             Tue 28 Jul 2026 21:01:38 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:38 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:38 +0000
Files and hashes:         1: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: cXOHf5/dfq6jvqa/Zfe022mxrD9OSFyKI6lcnkYD8E0=)
                          2: qbIaJec-toVL64n7z-uuxLGTIAQ.roa (hash: T1ieQtaDmRsidOYkDXdJkWB5IsW3s99F+xa0mkqLysM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:7a:07:4f:b0:e6:36:b1:d0:e2:aa:5b:64:31:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
        Validity
            Not Before: Jul 28 21:01:38 2026 GMT
            Not After : Jul 29 21:01:38 2026 GMT
        Subject: CN=5e9cf96d0b6442822fa18485f2efe8f111adad84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bb:4f:1a:83:c0:47:9a:66:e9:36:ca:da:4e:
                    c9:48:0d:fe:da:9b:41:c9:fe:01:66:21:c6:db:4b:
                    ea:c1:5f:0f:f7:16:47:cb:7f:2c:ea:92:61:6e:6e:
                    99:60:e6:af:c5:4e:00:ef:e2:9e:db:98:17:72:0b:
                    fb:a2:19:b9:17:fc:1c:5b:56:80:8f:81:f7:96:63:
                    20:d3:c7:90:93:4b:5a:71:cf:11:86:2e:76:7d:5d:
                    f0:a0:59:5e:2a:b8:64:6b:de:f3:ef:6d:cc:4d:1d:
                    44:3d:ba:3f:48:6f:b0:6e:3b:0e:a0:59:08:33:92:
                    e0:af:fe:7c:80:30:8e:20:bf:fc:7b:cf:6e:b0:e3:
                    83:02:a8:9d:ed:63:92:7e:e3:f4:c6:9d:f5:49:09:
                    87:de:bc:55:88:dc:42:04:58:29:dc:df:c9:b8:40:
                    7c:4a:bc:aa:48:23:34:7b:f5:2e:c1:a6:88:1d:7f:
                    b2:e1:8d:20:dc:a7:3f:21:5a:f9:91:e9:a1:a8:fe:
                    d8:35:01:91:2d:36:40:d0:ad:fd:79:69:3c:78:1c:
                    f1:d7:45:34:64:c6:55:ae:d8:16:ef:e0:7e:ac:ec:
                    6a:78:01:2b:da:d0:a8:dd:aa:97:72:5d:24:79:d6:
                    48:cd:78:9a:0a:01:2e:d5:82:ed:ed:21:1e:82:d1:
                    f5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9C:F9:6D:0B:64:42:82:2F:A1:84:85:F2:EF:E8:F1:11:AD:AD:84
            X509v3 Authority Key Identifier:
                keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:49:a9:c1:53:13:49:62:6c:d8:9b:6b:fa:eb:9f:2a:26:06:
         1c:22:e3:ba:46:cb:7a:e0:17:2d:91:5f:1a:f4:1a:ee:c0:9d:
         49:e1:e7:2e:ee:2f:8e:7b:1b:30:68:83:89:58:2d:b8:d6:a1:
         ce:3f:ae:f6:8e:b8:21:5d:42:bc:cd:52:83:e3:ce:f1:a9:aa:
         e8:6c:0f:d5:b0:c7:e3:5f:8f:e9:a3:8e:9d:86:dc:03:9b:db:
         97:00:6a:45:0d:ac:03:76:f2:8a:76:0f:6e:3e:93:80:5d:8c:
         90:9e:56:e2:a0:a0:fe:e2:29:9e:c2:94:f7:27:ef:70:0a:03:
         ca:dc:67:55:9a:aa:07:4a:95:12:e5:b1:cb:48:f7:de:c4:43:
         f9:ae:c0:4a:5f:9f:3e:45:a1:ed:07:eb:5b:1d:18:62:70:ac:
         85:4a:8e:e1:12:a9:81:91:83:08:6d:00:10:f8:b7:9d:52:88:
         5c:8b:d5:3a:ba:e7:96:0c:66:9f:fa:38:4e:e0:83:54:06:ae:
         2b:00:dd:ed:9f:23:d2:92:6f:15:92:16:18:2c:35:4b:ad:2c:
         5b:c5:fc:6c:19:cf:b0:33:2a:e9:13:da:f7:4e:06:8a:99:f4:
         02:1f:cb:53:f2:f1:ab:16:3b:ec:8a:d6:0d:34:72:49:a6:ae:
         9b:c7:bc:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiHoHT7DmNrHQ4qpbZDGjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Y2I0OTc1YjkzYjQ1OTM1NzYwNDgzMzg1NjRlYTNlYjA5
ZGM4ZTIwHhcNMjYwNzI4MjEwMTM4WhcNMjYwNzI5MjEwMTM4WjAzMTEwLwYDVQQD
Eyg1ZTljZjk2ZDBiNjQ0MjgyMmZhMTg0ODVmMmVmZThmMTExYWRhZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrtPGoPAR5pm6TbK2k7JSA3+2ptB
yf4BZiHG20vqwV8P9xZHy38s6pJhbm6ZYOavxU4A7+Ke25gXcgv7ohm5F/wcW1aA
j4H3lmMg08eQk0tacc8Rhi52fV3woFleKrhka97z723MTR1EPbo/SG+wbjsOoFkI
M5Lgr/58gDCOIL/8e89usOODAqid7WOSfuP0xp31SQmH3rxViNxCBFgp3N/JuEB8
SryqSCM0e/UuwaaIHX+y4Y0g3Kc/IVr5kemhqP7YNQGRLTZA0K39eWk8eBzx10U0
ZMZVrtgW7+B+rOxqeAEr2tCo3aqXcl0kedZIzXiaCgEu1YLt7SEegtH1DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6c+W0LZEKCL6GEhfLv6PERra2EMB8GA1UdIwQY
MBaAFHjLSXW5O0WTV2BIM4Vk6j6wncjiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU10SmRiazdSWk5YWUVnemhXVHFQckNkeU9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy85ZDFiNDQtMWRlYy00NWVlLTkyZGUt
ZmE3OTg4YjcxNGJjLzEvZU10SmRiazdSWk5YWUVnemhXVHFQckNkeU9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy85ZDFiNDQtMWRlYy00NWVlLTkyZGUtZmE3OTg4YjcxNGJj
LzEvZU10SmRiazdSWk5YWUVnemhXVHFQckNkeU9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUmpwVMT
SWJs2Jtr+uufKiYGHCLjukbLeuAXLZFfGvQa7sCdSeHnLu4vjnsbMGiDiVgtuNah
zj+u9o64IV1CvM1Sg+PO8amq6GwP1bDH41+P6aOOnYbcA5vblwBqRQ2sA3byinYP
bj6TgF2MkJ5W4qCg/uIpnsKU9yfvcAoDytxnVZqqB0qVEuWxy0j33sRD+a7ASl+f
PkWh7QfrWx0YYnCshUqO4RKpgZGDCG0AEPi3nVKIXIvVOrrnlgxmn/o4TuCDVAau
KwDd7Z8j0pJvFZIWGCw1S60sW8X8bBnPsDMq6RPa904Gipn0Ah/LU/LxqxY77IrW
DTRySaaum8e8KQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:41:25 2026 by rpki-client