Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft
File:                     EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json)
Hash identifier:          +u5OaqnpijpG8i6c10iNM2CADkGshnsJQGEK44HkdtQ=
Subject key identifier:   36:13:6A:7A:59:92:DD:45:BF:1B:70:F9:3C:1D:83:31:10:63:82:96
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Certificate issuer:       /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial:       0199FB461389956844CC823C836CA56B45C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft
Manifest number:          1703
Signing time:             Sun 19 Oct 2025 07:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:37 +0000
Files and hashes:         1: 7l56dlrFb9fMabU3WCspPVcuNz8.roa (hash: BNqxxuIlwtXbBXPbd4qhO3KGAaTZUr0l50Y4l+Brijw=)
                          2: AjGSJmDTUaTBrx_s-vikweMceXs.roa (hash: RfgMVVSxZ47znUU7lhyrOD6u13oZH6rQq2T8fu6bfxk=)
                          3: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: GEQyJ2gmJ4tvaFv9Dd2N3SrOYcikWVspyAY55Bg5Xlk=)
                          4: Ex2R8TC5ca7BapiGbOlEw7RTF7Y.roa (hash: Zmas/V+oKAZuTjJ6fOsrkdvL5jU6mJ35z5uKhHphtzs=)
                          5: INBpI5fntDWmHlDNjs-Yi7QsdAs.roa (hash: JDa7sruzPjtU5PzNmQsKwyK3VFod04arc7ncOSuHouE=)
                          6: KN3USh-JJW9-jhGDxiVWDhsPPA0.roa (hash: Xi9JL3Kg6iH7DV1CRgQBlVdsSYD/fpvtM7GyTmDdH4Q=)
                          7: PA9a7mmxzeJuoTmmqOPzfa0EJeU.roa (hash: cxrAyolBCBdgGmcgbRXCGM/uyRcD+ekmyS1D3d9CyCE=)
                          8: RuHKLSfWcgHGzOil4fAEzNXNsWY.roa (hash: Uc+hRokokGwptNiyfS8Yysvc/TqbHO5gZiF8l4C+938=)
                          9: SVDba3c5JwKNT_9O80xlrgywUPo.roa (hash: y8/CxIFfpyDYuv3uKMMuzQkteVC7KubD/FZFFVGPFkE=)
                          10: XAelOV_MbHen1Ypn-fcsfbxuz5Q.roa (hash: in8EeTTtSOWFvv18iCMa8aOKJrJKg1oqYKWnx05lArQ=)
                          11: b2ii9Ml7qpC36RUpZ8hKOXAe8yM.roa (hash: /Y0ueq9Pn525s9PDcY0SvkDIxOuDN0k+WvttGHuIvJE=)
                          12: fhkP1ORLZ5XxUVy4qC8BARs5rVI.roa (hash: 8dY2aE22Ya04xzDmrtlYb6ie5F49Q/sW7XRcYSjjGuo=)
                          13: gxlbepFDizY30e_VDf9e1RvjWgM.roa (hash: 6bnUAoZDd9UjKUbCDoEZob89bP3Q8i0Y7YskzssCFno=)
                          14: hCCCB7W_FSf63gC8Bfm1bg5kjwg.roa (hash: Qb0gULwh5NESSFA0xw+2Bgb6srlGKM9Q5/dKnTGFxCo=)
                          15: mO6JB2aj7dXFeeJ4zlvyyWMYGdc.roa (hash: rJPjlG3izedKQcz5so0Lx+1/nAUwrvkTxraBmn8xIZs=)
                          16: v7sddxJjq3qKaBWAdXKnkLLzrc0.roa (hash: lKZS60p/rxd0A+1EgTcJbGD6ikjsCu25yzGvAvr7Trs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:13:89:95:68:44:cc:82:3c:83:6c:a5:6b:45:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
        Validity
            Not Before: Oct 19 07:01:37 2025 GMT
            Not After : Oct 20 07:01:37 2025 GMT
        Subject: CN=36136a7a5992dd45bf1b70f93c1d833110638296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ee:b9:9e:36:c5:cf:6d:1e:e6:9d:ed:e8:1c:
                    d0:2d:35:2b:9f:7f:1a:83:d1:de:14:4a:a5:48:03:
                    04:26:3c:bd:ff:28:e8:7b:86:ee:5f:78:87:af:97:
                    91:d2:57:4b:7f:7e:96:b6:0a:93:87:32:62:37:81:
                    5c:10:7c:f4:73:0e:99:7b:7b:ce:2e:7b:aa:41:79:
                    d7:7e:14:56:0c:87:50:9b:38:4d:f7:cf:81:f2:aa:
                    30:b0:37:52:87:25:4c:c4:c4:8e:a5:39:0a:d8:ff:
                    e8:87:c6:e9:1e:1d:39:f8:1e:8b:2f:8d:ea:b0:1b:
                    d8:ae:5b:d9:63:fd:e2:09:d4:f9:7c:ec:af:b1:f4:
                    00:5b:85:c4:83:40:a6:0c:00:28:13:79:1d:35:09:
                    37:e2:ec:bc:ac:2c:f7:dd:28:58:7b:dc:de:3e:bd:
                    03:26:4e:25:15:bf:26:85:01:77:c4:35:3c:32:27:
                    1d:33:95:74:4e:3b:72:36:41:08:4d:79:43:76:53:
                    a8:da:b7:a1:45:ac:2f:09:ec:e5:15:94:a1:2e:ef:
                    ad:24:ca:14:dc:ce:b4:d2:f4:cd:3b:a9:ba:53:8f:
                    a7:7d:8b:f8:98:cc:b0:8e:43:cc:e9:ad:12:ed:af:
                    c4:6d:5f:da:2e:f2:f3:53:4a:3d:81:dc:22:e2:04:
                    0d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:13:6A:7A:59:92:DD:45:BF:1B:70:F9:3C:1D:83:31:10:63:82:96
            X509v3 Authority Key Identifier:
                keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:53:13:8e:6d:61:32:ae:e0:af:70:ba:37:6d:ec:f4:c7:e8:
         53:df:88:df:4f:89:4c:2c:90:14:f0:3b:bd:8e:ab:91:a3:68:
         8d:a3:23:91:b8:f8:84:9a:40:d7:61:b4:d7:96:82:4e:07:ce:
         14:2e:a3:c2:75:3c:b0:aa:80:3d:d0:3b:1e:71:cd:16:ac:1c:
         ac:d9:c3:5f:2d:fe:dc:d2:fb:2f:74:f9:55:4a:a3:b7:ad:e1:
         b0:38:79:74:31:99:d6:fe:3c:44:65:bb:b1:2a:12:01:bf:42:
         78:0d:b0:b7:a1:f5:b3:83:fd:99:85:65:78:cb:83:3b:cd:dc:
         a0:85:cd:6e:48:90:eb:4c:40:10:72:41:5d:7a:57:47:4e:48:
         5b:fc:01:a5:66:36:09:f4:e4:fb:95:fc:48:4c:e1:0a:d4:65:
         f7:af:75:ab:95:ac:89:0c:b9:f7:f3:b1:a3:be:80:b2:fb:bf:
         4d:87:cd:7e:36:17:54:cd:62:e8:14:bc:2c:bc:04:d8:12:89:
         e1:25:ee:df:63:18:c0:c3:ba:8b:2b:70:c5:eb:b7:39:e8:8f:
         33:02:2d:0c:f1:ca:71:b0:d2:7a:b0:25:e9:6c:e0:b2:c8:af:
         9c:09:dc:0a:2c:a0:bd:77:14:b0:9d:d8:37:96:11:18:fc:9d:
         e3:00:7b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:54 2025 by rpki-client