Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
File:                     EMg25c4r_rgh831kpJwWGFX-LFI.mft (raw, json)
Hash identifier:          T8y7hiOtzoyKo54zsDK63tKlzaQSbZG10hPdrVcbV6Q=
Subject key identifier:   09:7D:48:DA:0A:30:65:CE:73:65:FC:E5:8D:D2:A9:86:0D:5D:5B:25
Authority key identifier: 10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52
Certificate issuer:       /CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
Certificate serial:       019EBF912200272C6A225757F7EEA251E19C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
Manifest number:          093E
Signing time:             Sat 13 Jun 2026 06:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:20 +0000
Files and hashes:         1: EMg25c4r_rgh831kpJwWGFX-LFI.crl (hash: rNaUxkJt0DRT27BOit4rnPJg1N4IsWVoW0NT+4S3fZg=)
                          2: gu3gbqmYc42MBrN2tTrBxhokk-w.roa (hash: TMIVSIIzGJ/WU4Qk37G7HBf3N3RPvDoJEdio74aPoFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:22:00:27:2c:6a:22:57:57:f7:ee:a2:51:e1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c836e5ce2bfeb821f37d64a49c161855fe2c52
        Validity
            Not Before: Jun 13 06:00:20 2026 GMT
            Not After : Jun 14 06:00:20 2026 GMT
        Subject: CN=097d48da0a3065ce7365fce58dd2a9860d5d5b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:82:6a:79:e9:20:fe:ef:e1:08:98:3c:52:95:
                    e4:ec:c4:c8:d9:81:f1:62:43:1a:e5:f6:25:83:e9:
                    a5:50:8c:04:8e:8b:60:d4:65:0a:24:0b:9b:c4:47:
                    41:7b:a5:8e:9b:e1:42:f8:c0:b2:73:48:8d:1b:79:
                    b2:d5:1a:dd:36:e0:bf:23:96:f8:3c:af:74:77:91:
                    3f:99:e4:7a:63:23:38:37:10:03:b1:65:fd:45:a9:
                    76:0e:4b:00:11:23:ae:b6:06:17:d4:60:c8:15:69:
                    33:26:62:be:2e:10:be:ee:40:c2:e5:16:a2:71:99:
                    da:45:92:45:e4:8c:60:bd:b9:f5:6c:29:b3:22:dd:
                    e5:87:90:73:fa:76:a5:e1:a4:06:0d:bb:11:fc:a8:
                    91:ac:ee:48:61:63:67:3f:45:2b:27:c5:98:fe:99:
                    96:68:f9:53:81:2f:ec:b4:26:a4:70:7d:a0:fd:7f:
                    45:d4:1f:b6:e3:a6:ba:9b:c9:96:7b:15:0c:17:cc:
                    fe:13:1c:38:43:04:09:bf:d4:fe:0f:a6:b8:d0:bd:
                    e7:c9:6f:9e:8e:40:22:b9:f8:18:1e:e6:55:da:e5:
                    e5:38:74:34:e2:c0:eb:d4:48:e0:24:ac:da:4e:a0:
                    f6:f5:2e:02:de:83:20:73:51:89:c3:cb:af:4f:b6:
                    1f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7D:48:DA:0A:30:65:CE:73:65:FC:E5:8D:D2:A9:86:0D:5D:5B:25
            X509v3 Authority Key Identifier:
                keyid:10:C8:36:E5:CE:2B:FE:B8:21:F3:7D:64:A4:9C:16:18:55:FE:2C:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMg25c4r_rgh831kpJwWGFX-LFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75cd45-60b5-4c4b-b8b8-9f3c09bb741c/1/EMg25c4r_rgh831kpJwWGFX-LFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:4c:78:f7:05:e3:04:84:45:d1:15:8d:ef:14:fe:26:cf:d5:
         73:18:0f:a5:dd:f5:db:0d:cf:cd:07:c1:ad:8b:bb:52:87:36:
         c0:65:ee:24:c5:69:f8:0c:ee:68:66:b4:40:90:65:a2:ee:76:
         cf:94:dd:bd:de:cb:d6:7d:c4:9a:03:ee:ee:39:f7:dc:5d:05:
         0a:b1:2f:d5:b8:e3:18:3d:c7:ca:9a:11:b5:9b:e9:8c:91:58:
         b3:f4:88:9d:b0:db:34:d6:90:50:ba:f7:0d:32:ed:0d:e6:ee:
         58:2f:70:3e:65:07:16:e9:13:ad:d5:17:c8:19:93:ff:44:f0:
         cb:5f:e6:b8:e9:2f:01:e5:f0:9b:55:4a:08:5c:e0:6d:e7:cb:
         9c:d5:89:58:68:29:fc:90:86:f1:f4:2e:0b:1d:44:8a:5a:58:
         30:dc:da:8d:01:1c:ea:e1:51:1a:e6:ad:a8:c5:b5:f6:99:87:
         f6:6e:8c:dc:89:9f:08:c0:15:fd:0f:86:bf:83:1d:9c:63:8f:
         51:0b:57:59:4e:56:dd:e5:8b:ae:58:cd:a5:e6:6a:2c:ad:80:
         e4:35:5e:3f:5d:77:af:d5:a0:9e:05:6b:c6:ae:cb:97:23:27:
         e3:fb:13:ae:85:d4:6b:6f:88:2f:a2:38:80:e5:23:8a:05:50:
         67:40:c2:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/kSIAJyxqIldX9+6iUeGcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYzgzNmU1Y2UyYmZlYjgyMWYzN2Q2NGE0OWMxNjE4NTVm
ZTJjNTIwHhcNMjYwNjEzMDYwMDIwWhcNMjYwNjE0MDYwMDIwWjAzMTEwLwYDVQQD
EygwOTdkNDhkYTBhMzA2NWNlNzM2NWZjZTU4ZGQyYTk4NjBkNWQ1YjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IJqeekg/u/hCJg8UpXk7MTI2YHx
YkMa5fYlg+mlUIwEjotg1GUKJAubxEdBe6WOm+FC+MCyc0iNG3my1RrdNuC/I5b4
PK90d5E/meR6YyM4NxADsWX9Ral2DksAESOutgYX1GDIFWkzJmK+LhC+7kDC5Rai
cZnaRZJF5Ixgvbn1bCmzIt3lh5Bz+nal4aQGDbsR/KiRrO5IYWNnP0UrJ8WY/pmW
aPlTgS/stCakcH2g/X9F1B+246a6m8mWexUMF8z+Exw4QwQJv9T+D6a40L3nyW+e
jkAiufgYHuZV2uXlOHQ04sDr1EjgJKzaTqD29S4C3oMgc1GJw8uvT7YfWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAl9SNoKMGXOc2X85Y3SqYYNXVslMB8GA1UdIwQY
MBaAFBDINuXOK/64IfN9ZKScFhhV/ixSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4Yjgt
OWYzYzA5YmI3NDFjLzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi83NWNkNDUtNjBiNS00YzRiLWI4YjgtOWYzYzA5YmI3NDFj
LzEvRU1nMjVjNHJfcmdoODMxa3BKd1dHRlgtTEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtUx49wXj
BIRF0RWN7xT+Js/VcxgPpd312w3PzQfBrYu7Uoc2wGXuJMVp+AzuaGa0QJBlou52
z5Tdvd7L1n3EmgPu7jn33F0FCrEv1bjjGD3HypoRtZvpjJFYs/SInbDbNNaQULr3
DTLtDebuWC9wPmUHFukTrdUXyBmT/0Twy1/muOkvAeXwm1VKCFzgbefLnNWJWGgp
/JCG8fQuCx1EilpYMNzajQEc6uFRGuatqMW19pmH9m6M3ImfCMAV/Q+Gv4MdnGOP
UQtXWU5W3eWLrljNpeZqLK2A5DVeP113r9WgngVrxq7LlyMn4/sTroXUa2+IL6I4
gOUjigVQZ0DCIQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:39:26 2026 by rpki-client