Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
File:                     EMTixWLflMzKm0ggghD9Fs-6kjU.mft (raw, json)
Hash identifier:          BHWqaxw6APHgJ+Bvg55MlmvqsI/Hj9Tkkmpu5a/ysx0=
Subject key identifier:   66:6E:83:9E:0B:87:C7:8C:9F:14:16:84:72:91:BE:73:B1:3E:C2:52
Authority key identifier: 10:C4:E2:C5:62:DF:94:CC:CA:9B:48:20:82:10:FD:16:CF:BA:92:35
Certificate issuer:       /CN=10c4e2c562df94ccca9b48208210fd16cfba9235
Certificate serial:       019D27044E9977F6D7C8D5AAE3A2C2FB5EED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
Manifest number:          1883
Signing time:             Wed 25 Mar 2026 22:01:26 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:26 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:26 +0000
Files and hashes:         1: EMTixWLflMzKm0ggghD9Fs-6kjU.crl (hash: QQXz/ApiOxgUsrEmsVKeVWZD2gIQs1etQjHplBCLS5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:4e:99:77:f6:d7:c8:d5:aa:e3:a2:c2:fb:5e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c4e2c562df94ccca9b48208210fd16cfba9235
        Validity
            Not Before: Mar 25 22:01:26 2026 GMT
            Not After : Mar 26 22:01:26 2026 GMT
        Subject: CN=666e839e0b87c78c9f1416847291be73b13ec252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:10:31:72:17:42:59:61:04:1c:2c:e1:62:c1:
                    79:a3:67:08:dc:2f:83:e0:94:b7:93:ba:29:5e:ec:
                    25:83:57:6c:c6:a0:f4:80:d7:71:aa:49:2a:89:1d:
                    b9:08:3a:1c:db:35:dd:57:4b:41:ea:60:7a:63:98:
                    52:9c:55:f6:e0:c3:71:50:bc:f7:a5:1f:01:d3:4f:
                    2f:15:1a:5b:8f:79:91:bf:05:fa:dc:86:d8:62:fe:
                    27:95:29:07:e7:71:bb:c0:5b:df:59:7b:e9:10:3f:
                    18:e2:71:bd:45:5e:89:59:fb:ce:0d:a5:e4:a3:fe:
                    32:f5:fd:0e:30:59:49:a8:4f:5c:cb:ae:93:5a:2c:
                    b5:53:93:11:87:d1:2f:82:6e:e4:36:ec:2d:51:af:
                    08:ea:b8:c3:52:47:ef:1b:2e:08:bb:6a:89:48:80:
                    31:4c:c7:5c:c8:30:b2:3d:25:c4:01:96:53:ec:f6:
                    02:a4:38:e5:ff:77:32:a5:1d:19:fb:99:d9:b9:3d:
                    f4:24:9a:b5:ea:8d:ca:a1:52:a7:95:05:fe:be:86:
                    56:db:ef:15:49:67:38:e4:3f:2f:cf:ed:ec:81:51:
                    0a:5d:a0:bf:ba:85:3a:6a:24:f6:7f:7a:cb:02:df:
                    f1:eb:3e:90:40:05:42:82:1c:2a:ef:5e:ed:3a:0e:
                    0f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6E:83:9E:0B:87:C7:8C:9F:14:16:84:72:91:BE:73:B1:3E:C2:52
            X509v3 Authority Key Identifier:
                keyid:10:C4:E2:C5:62:DF:94:CC:CA:9B:48:20:82:10:FD:16:CF:BA:92:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMTixWLflMzKm0ggghD9Fs-6kjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/830199-e782-4ca3-9a1c-6a5d0225820d/1/EMTixWLflMzKm0ggghD9Fs-6kjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:00:3e:0e:33:8d:4e:69:d4:21:b1:74:67:4d:39:32:9f:cb:
         ca:15:9b:39:db:e6:da:9e:ee:fe:2b:73:e3:b5:de:23:3b:60:
         e7:41:da:8d:39:98:c7:33:46:81:3b:36:5d:92:27:4c:c6:38:
         10:25:d8:50:6f:ab:e9:27:d1:57:44:ac:ca:f4:37:6b:cd:7f:
         b4:f4:74:dd:78:fd:68:89:42:4c:11:4e:52:b1:ce:e7:e6:15:
         9b:75:26:4a:3a:f2:39:8f:cc:66:4a:b5:6e:56:cc:51:0f:43:
         1f:c9:a5:2a:9c:68:b6:68:02:13:d6:54:49:81:49:87:a4:87:
         03:20:65:02:75:8c:17:79:36:41:77:0d:f3:62:10:85:ad:94:
         40:4c:36:51:69:48:cc:6d:9a:75:98:8e:89:97:af:a2:89:f2:
         b8:38:99:11:45:c1:a8:13:5f:fd:43:d7:39:5b:99:43:1d:f9:
         8d:41:b7:a8:59:c3:cc:1c:f7:ce:8c:9c:0f:b4:b3:cd:10:f3:
         97:41:68:a3:10:be:3b:2b:06:0b:08:89:34:6e:8b:90:2a:ff:
         87:a1:2e:bd:84:43:31:92:e1:19:d4:55:d3:d9:b0:e1:b9:8b:
         63:13:45:52:42:7e:99:77:4d:b6:ed:00:52:e7:05:cd:6f:9c:
         4d:c6:a2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:15 2026 by rpki-client