Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
File:                     EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft (raw, json)
Hash identifier:          WEuBvFfoLfrXc8iCZ0p3kadt/OXyGyjlrO89BMqs34w=
Subject key identifier:   44:C9:31:9B:FB:80:C7:93:27:53:C3:06:70:A2:00:64:6B:D4:A8:54
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Certificate issuer:       /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial:       019DA30AD9B83F227EAD2A7FA074272DBA61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
Manifest number:          0FAF
Signing time:             Sun 19 Apr 2026 00:01:30 +0000
Manifest this update:     Sun 19 Apr 2026 00:01:30 +0000
Manifest next update:     Mon 20 Apr 2026 00:01:30 +0000
Files and hashes:         1: 00wZvtvNZQs4uAA915GadjEGBvg.roa (hash: 5K/ug2ekLcwiuUDWDLSSG2UzC7SzInoAiv/KlObpbv8=)
                          2: 7AEQejaf4ar8QzePBU1rEkR-Wyo.roa (hash: /mA72LTouIcC5DplrlI38tIsNw+vs1skW2C/I5sSpBw=)
                          3: EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl (hash: 0psdUX9j/IgikyRyYib+FwjgMlAcmvAaq6+N2iHqF94=)
                          4: MJP1d4e-dGP316pN4YKGXwBEB6A.roa (hash: 7LX7W8xSif8sjS3tismw58R9gQWQatJHTsKvQpRfAW8=)
                          5: WeB5kEbbCBZpop-fX4ON5gv82l8.roa (hash: lzVL6PB9mdFbq/OglmNYGRSYPmiN/i9hvgSO4OhUNo0=)
                          6: bP8QNxBQn0Bs2-Xfh-xasmS6LHk.roa (hash: q+uzlbwPJbxOafdkuBf0forZDV06McFldCHvCFhOu8A=)
                          7: pFreL0ELwqUCEO8jgvaVDhmpTaE.roa (hash: j6gPD8Urcnyljz4W/n0fYekDNBzyuam4N75FRs+GRu4=)
                          8: q448fa7_znU_mFgRxcDcgN4477g.roa (hash: B5NQG+C4rJ08vWE97izdeALjZxDvsgfYoMhiTTd/XKk=)
                          9: rdpjVEDei7xeZFN28ZYbPl20GyI.roa (hash: T3H8QzztcCCMvYzNKiDtuOviwtvx2+/XKBlvRE/lf5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:0a:d9:b8:3f:22:7e:ad:2a:7f:a0:74:27:2d:ba:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
        Validity
            Not Before: Apr 19 00:01:30 2026 GMT
            Not After : Apr 20 00:01:30 2026 GMT
        Subject: CN=44c9319bfb80c7932753c30670a200646bd4a854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:91:fa:29:9d:e5:31:be:af:51:cf:21:9a:9f:
                    88:24:af:e2:3f:5d:28:62:15:0c:83:38:bb:a3:36:
                    95:2f:6e:f2:f1:23:a3:19:f6:d1:39:66:b8:a3:9d:
                    f7:d6:e3:94:74:0f:c0:a3:68:81:da:f7:19:d9:d8:
                    45:92:05:06:e5:47:16:04:15:5c:eb:55:a6:d8:75:
                    31:9a:0d:1b:d3:24:66:59:a1:53:ea:65:11:bd:6d:
                    fd:ce:d9:04:c0:b6:af:20:a4:87:31:3f:32:ef:3f:
                    87:4d:6e:24:85:0a:28:eb:7c:e0:37:40:f7:34:86:
                    98:e8:b9:d1:11:52:56:5f:a0:37:b2:82:a4:81:a0:
                    39:bf:7c:66:66:0a:1a:94:58:8c:35:f1:45:59:e8:
                    20:46:b3:0b:9c:29:fc:3b:e5:a2:fe:92:e7:43:75:
                    d3:dd:cc:94:59:80:57:15:a1:93:c1:2a:1d:ee:35:
                    17:f1:ac:bf:6d:c7:39:71:e8:8a:eb:02:df:f5:97:
                    18:bf:bc:38:ff:6f:a7:dc:bb:b2:b9:90:c1:91:cc:
                    25:15:32:8c:50:1b:de:7e:65:c2:b1:ea:66:0b:94:
                    ae:2e:5f:3f:36:0b:1b:94:c9:05:ba:55:e2:d4:bf:
                    ee:2d:3e:54:4c:7c:36:15:74:51:23:5c:8a:a4:b0:
                    08:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C9:31:9B:FB:80:C7:93:27:53:C3:06:70:A2:00:64:6B:D4:A8:54
            X509v3 Authority Key Identifier:
                keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:61:1e:aa:dc:2d:74:00:10:62:ee:d2:4f:d7:76:00:94:d0:
         e3:e3:29:ee:ef:8c:43:52:bf:14:69:56:e6:c1:71:81:5d:08:
         1d:f7:bf:f2:ce:f6:33:b5:8f:be:bf:37:8a:02:6e:a6:59:6a:
         be:2f:7b:2c:88:0b:32:6b:98:d5:62:68:43:fd:00:43:73:20:
         06:90:d0:3a:26:4a:f6:30:f9:02:29:cb:44:46:61:87:9e:99:
         4a:cd:15:f0:9d:a2:c4:71:86:44:5c:f5:34:8e:3f:7d:65:16:
         0f:72:42:50:7d:32:df:4f:ec:cf:32:62:47:f0:82:68:80:84:
         ca:66:ee:87:33:0c:af:c0:f6:f4:d4:36:e1:55:13:f7:8a:ca:
         14:e1:18:63:cb:c9:ec:29:1d:19:7e:23:25:d5:37:6c:f7:67:
         86:58:79:f3:5d:19:0b:12:f9:4f:11:20:66:88:e7:76:9b:ca:
         9a:3d:59:19:77:54:77:08:87:cd:32:33:5e:54:b3:ef:ef:ff:
         47:6b:5f:ef:1c:3e:e1:6c:2d:2e:1c:cf:24:a9:5f:3d:4e:53:
         8a:33:93:b7:a0:bd:32:22:32:83:40:38:c9:3a:58:c5:a2:8a:
         66:d0:a8:6f:b6:da:e9:95:7d:b7:e8:0a:65:fa:9d:9c:ba:da:
         98:d8:d3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:13 2026 by rpki-client