Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
File:                     Em_8AJbGk7vEIO64zO80vHtTh0M.mft (raw, json)
Hash identifier:          /B94G8+DZDvQUuOH/CQFpyE4FBUK1LfaxAPpXECXoqo=
Subject key identifier:   8A:80:87:4E:B6:EE:CC:65:21:E4:6E:FE:B8:DA:C2:C9:B0:65:36:2C
Authority key identifier: 12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43
Certificate issuer:       /CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
Certificate serial:       019E1D90A25C42A51C95957F63627E2B56E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
Manifest number:          129C
Signing time:             Tue 12 May 2026 19:01:18 +0000
Manifest this update:     Tue 12 May 2026 19:01:18 +0000
Manifest next update:     Wed 13 May 2026 19:01:18 +0000
Files and hashes:         1: Em_8AJbGk7vEIO64zO80vHtTh0M.crl (hash: opdtbYsApczt5NNtSqj0ejTWlc28BMq3qgwZVvjfOOE=)
                          2: oPW1SGwP91H4COCpUVzVXa2p0W0.roa (hash: sJ80Hmwvt2BZ4Ckn8z2EQlXDh6xgPaM8/fsDXZd71pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:a2:5c:42:a5:1c:95:95:7f:63:62:7e:2b:56:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126ffc0096c693bbc420eeb8ccef34bc7b538743
        Validity
            Not Before: May 12 19:01:18 2026 GMT
            Not After : May 13 19:01:18 2026 GMT
        Subject: CN=8a80874eb6eecc6521e46efeb8dac2c9b065362c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:01:53:64:78:4a:7e:ca:d6:17:d4:b7:36:39:
                    77:5c:b5:c1:f3:97:80:bc:20:8c:44:bc:70:ed:37:
                    27:78:e9:58:b0:36:52:b7:cd:e3:15:bd:24:1a:6f:
                    39:59:55:5d:17:c4:8b:18:83:05:ae:0e:a8:76:98:
                    fb:24:d1:29:a7:e3:c9:6c:e7:58:ac:4d:1c:72:33:
                    c7:01:a4:14:f8:49:de:bb:d6:dc:87:6a:fe:d9:83:
                    86:26:fe:b7:38:ac:f5:ba:b5:c6:fb:80:2c:90:48:
                    77:51:c3:8c:c0:ce:e5:26:0c:27:55:82:b4:55:7a:
                    41:78:f0:8f:8e:d4:2d:fe:4a:86:8e:30:48:6d:31:
                    e5:86:44:3d:dd:51:52:72:42:e5:78:29:24:a3:a6:
                    a9:40:a8:74:43:77:ed:41:11:3b:3b:f8:15:2d:4c:
                    0a:2c:4a:22:e0:fc:35:df:9b:dd:cd:6a:d0:8d:1c:
                    f4:b5:4d:1e:b9:4c:0b:d3:ca:fb:31:a1:17:63:a1:
                    97:41:6d:ec:9d:fe:5f:ae:f9:9d:76:36:33:f0:1a:
                    d8:de:fd:ed:54:e6:dc:06:69:e1:7e:31:f1:26:13:
                    ff:44:f5:81:6a:35:18:d2:c7:06:42:9f:7b:a1:96:
                    b3:6f:ed:c8:d4:83:27:17:98:22:9d:ff:9c:b0:8e:
                    4f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:80:87:4E:B6:EE:CC:65:21:E4:6E:FE:B8:DA:C2:C9:B0:65:36:2C
            X509v3 Authority Key Identifier:
                keyid:12:6F:FC:00:96:C6:93:BB:C4:20:EE:B8:CC:EF:34:BC:7B:53:87:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Em_8AJbGk7vEIO64zO80vHtTh0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/61687c-1182-4b08-948e-1c86c57e2e9f/1/Em_8AJbGk7vEIO64zO80vHtTh0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:00:70:94:ee:d0:8d:d3:d5:a1:05:ee:4e:58:39:67:f3:77:
         05:1f:22:3a:6d:61:3a:fa:49:6f:68:a1:85:19:bb:52:67:7b:
         a2:f3:6f:c0:3e:32:39:b7:86:92:12:ea:cf:f9:9e:06:a2:37:
         29:c4:f5:e4:f9:fd:eb:36:4f:d3:63:a1:3b:fd:72:3f:39:3d:
         a2:d3:d8:19:3c:a7:09:ba:f6:ab:aa:a4:41:aa:87:91:6b:af:
         0c:44:ab:4b:16:c1:8f:b1:82:17:17:e8:35:0d:cd:df:60:2e:
         77:9a:df:5a:b6:e5:c9:df:d4:c9:da:ed:4f:61:ac:72:55:e9:
         5a:6a:f4:c9:a7:4f:14:cc:7b:c3:4b:3c:ad:83:72:20:64:28:
         9a:24:d3:cb:ba:64:a1:2c:46:f9:86:c2:c4:c6:b3:62:d4:f6:
         cd:d7:bf:92:8f:db:98:41:65:1c:e3:1e:66:23:3d:fe:5f:76:
         20:69:a8:be:6f:2a:a1:5c:8a:b1:92:78:bb:11:e1:38:0c:bd:
         83:fa:75:f6:96:33:2c:dd:6c:7f:27:1a:e3:e0:28:8b:26:44:
         2f:15:24:fa:ec:45:a4:2b:d1:1e:f4:90:95:b1:c1:a8:c3:dd:
         c7:68:8b:4b:db:af:28:4e:a4:fa:9f:58:e3:8d:40:de:43:c8:
         03:ee:8c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:13:58 2026 by rpki-client