Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
File:                     EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft (raw, json)
Hash identifier:          uN09rKXfvEzamIr0JgbJ/vLUnFtzyBeGaLnwTSJ0FlU=
Subject key identifier:   4C:EA:5E:A1:BB:4F:C3:AA:F1:21:5C:BB:0A:C5:6A:05:55:0B:B9:CD
Authority key identifier: 10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8
Certificate issuer:       /CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
Certificate serial:       019A4F98C546E4AE915CB17573E8D330885E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
Manifest number:          141C
Signing time:             Tue 04 Nov 2025 16:00:03 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:03 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:03 +0000
Files and hashes:         1: 5xCjSbVj0eQI-CbUmHCn2zV_TYM.roa (hash: oYg7Hd7YagslknVGleyR1QDuiaGvaAsro+gwXQIpa8k=)
                          2: EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl (hash: Nu+wEbsYSo/jUsMWu5OLolKlglef1fBvnsDeh0Q1OKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:98:c5:46:e4:ae:91:5c:b1:75:73:e8:d3:30:88:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c094ad0fc7bf160aa1c1ad0c538e9bf80e59f8
        Validity
            Not Before: Nov  4 16:00:03 2025 GMT
            Not After : Nov  5 16:00:03 2025 GMT
        Subject: CN=4cea5ea1bb4fc3aaf1215cbb0ac56a05550bb9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:b7:b8:18:0a:73:12:f9:63:ee:52:ed:ce:
                    aa:02:24:18:92:e9:ce:69:16:a6:cb:30:a4:7c:db:
                    99:a5:b5:61:87:71:d5:9a:15:f1:50:73:95:48:c5:
                    9b:1f:46:c6:55:3c:c5:f2:6d:2d:bd:61:c8:2d:a9:
                    4a:34:fd:67:af:59:72:f7:c3:2c:27:4f:d2:b4:40:
                    a7:15:7d:59:b3:33:dc:81:9c:64:0a:76:3a:56:76:
                    a1:d0:0c:25:4f:9f:83:a9:99:94:77:86:e0:d1:43:
                    92:c8:09:99:fe:79:5c:17:56:96:4f:56:39:10:f4:
                    61:b9:cd:5b:7b:a7:68:a8:d9:2e:3f:92:4d:6a:4f:
                    32:03:e2:e4:07:c7:d5:a3:ab:74:ae:52:19:a5:02:
                    d3:11:45:6c:e1:01:37:bf:cd:4d:fe:62:8d:0f:27:
                    d9:c0:f1:ed:49:5d:e1:17:53:30:28:4e:7d:58:7c:
                    0e:9d:3b:b0:b5:0d:20:17:be:03:ca:a3:71:80:d2:
                    0c:7c:7b:0e:1a:ad:5b:a3:af:59:80:d2:c5:bd:25:
                    74:16:35:6a:76:d1:f6:83:35:b2:28:7c:95:44:fb:
                    b9:90:3c:99:d2:cc:83:ce:8c:ba:5a:cd:48:a6:d2:
                    6a:e4:c6:a0:6d:58:05:c7:52:52:32:af:4b:ba:1e:
                    7c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EA:5E:A1:BB:4F:C3:AA:F1:21:5C:BB:0A:C5:6A:05:55:0B:B9:CD
            X509v3 Authority Key Identifier:
                keyid:10:C0:94:AD:0F:C7:BF:16:0A:A1:C1:AD:0C:53:8E:9B:F8:0E:59:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMCUrQ_HvxYKocGtDFOOm_gOWfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7fe0e7-8db1-4057-b5ff-65045f7d8ea5/1/EMCUrQ_HvxYKocGtDFOOm_gOWfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:bd:c4:94:80:5b:e4:e8:ad:7e:29:63:e6:db:87:b8:81:82:
         0c:43:a7:8e:d0:9e:32:aa:12:4e:9d:b7:0c:bd:11:ac:65:c0:
         b4:fc:67:56:3a:73:3f:57:7f:9e:63:30:e5:2e:65:ca:df:fb:
         be:3c:c7:07:fd:10:ed:70:06:60:b1:49:31:7c:47:d9:65:7e:
         2e:7e:b2:60:c9:d8:f2:0b:08:37:e9:4a:61:22:ad:53:90:89:
         5e:f5:44:04:02:cf:05:b4:0d:0f:69:91:53:5b:d6:d6:ec:26:
         58:4d:c7:16:d8:a5:23:9d:b4:0a:eb:e8:13:df:b4:3c:c3:37:
         5b:12:89:9c:b3:4c:85:5e:37:ca:e5:de:5c:b4:f0:98:20:39:
         4f:8a:28:d8:55:86:39:9f:0c:7a:47:69:e5:0a:1d:34:00:93:
         e4:05:a2:3f:e0:9d:c9:bc:8c:d2:e2:e7:50:93:0a:b8:20:42:
         a8:10:fa:de:8a:75:40:cc:42:53:37:6c:e2:49:7b:f8:02:03:
         62:c9:da:53:87:19:37:d6:75:03:e9:13:eb:15:79:45:71:ec:
         0b:f9:51:cc:d0:a3:04:c4:cb:5c:00:5c:0f:f1:b4:31:fe:18:
         7a:ac:3d:96:df:ef:b7:47:06:01:7d:d2:49:36:24:f9:e8:ca:
         48:30:1c:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmMVG5K6RXLF1c+jTMIheMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYzA5NGFkMGZjN2JmMTYwYWExYzFhZDBjNTM4ZTliZjgw
ZTU5ZjgwHhcNMjUxMTA0MTYwMDAzWhcNMjUxMTA1MTYwMDAzWjAzMTEwLwYDVQQD
Eyg0Y2VhNWVhMWJiNGZjM2FhZjEyMTVjYmIwYWM1NmEwNTU1MGJiOWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucO3uBgKcxL5Y+5S7c6qAiQYkunO
aRamyzCkfNuZpbVhh3HVmhXxUHOVSMWbH0bGVTzF8m0tvWHILalKNP1nr1ly98Ms
J0/StECnFX1ZszPcgZxkCnY6Vnah0AwlT5+DqZmUd4bg0UOSyAmZ/nlcF1aWT1Y5
EPRhuc1be6doqNkuP5JNak8yA+LkB8fVo6t0rlIZpQLTEUVs4QE3v81N/mKNDyfZ
wPHtSV3hF1MwKE59WHwOnTuwtQ0gF74DyqNxgNIMfHsOGq1bo69ZgNLFvSV0FjVq
dtH2gzWyKHyVRPu5kDyZ0syDzoy6Ws1IptJq5MagbVgFx1JSMq9Luh58VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzqXqG7T8Oq8SFcuwrFagVVC7nNMB8GA1UdIwQY
MBaAFBDAlK0Px78WCqHBrQxTjpv4Dln4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU1DVXJRX0h2eFlLb2NHdERGT09tX2dPV2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy83ZmUwZTctOGRiMS00MDU3LWI1ZmYt
NjUwNDVmN2Q4ZWE1LzEvRU1DVXJRX0h2eFlLb2NHdERGT09tX2dPV2ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy83ZmUwZTctOGRiMS00MDU3LWI1ZmYtNjUwNDVmN2Q4ZWE1
LzEvRU1DVXJRX0h2eFlLb2NHdERGT09tX2dPV2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADb3ElIBb
5Oitfilj5tuHuIGCDEOnjtCeMqoSTp23DL0RrGXAtPxnVjpzP1d/nmMw5S5lyt/7
vjzHB/0Q7XAGYLFJMXxH2WV+Ln6yYMnY8gsIN+lKYSKtU5CJXvVEBALPBbQND2mR
U1vW1uwmWE3HFtilI520CuvoE9+0PMM3WxKJnLNMhV43yuXeXLTwmCA5T4oo2FWG
OZ8Mekdp5QodNACT5AWiP+CdybyM0uLnUJMKuCBCqBD63op1QMxCUzds4kl7+AID
YsnaU4cZN9Z1A+kT6xV5RXHsC/lRzNCjBMTLXABcD/G0Mf4Yeqw9lt/vt0cGAX3S
STYk+ejKSDAcLA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:48 2025 by rpki-client