Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
File:                     egm3YjoIVFfYx2tJTs2ITY_vpNE.mft (raw, json)
Hash identifier:          szBV6pjcI0P+IX/44qElLXute/BzPmgndsyQEPnHq/o=
Subject key identifier:   CF:CE:FD:4B:A6:36:32:71:4F:AE:4E:D3:DA:AB:2A:5D:8D:32:91:29
Authority key identifier: 7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1
Certificate issuer:       /CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1
Certificate serial:       019D29973F76AA2B61EE909C43A857F0F05E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
Manifest number:          01DC
Signing time:             Thu 26 Mar 2026 10:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:11 +0000
Files and hashes:         1: 3v1fDqNftzfSsbjae5v8U-0Yix0.roa (hash: nSifXf8r+ikjFXrJx3sG9Ogaxxz2ug4esGN19vdxBUs=)
                          2: 7WKrJrhvhGi9RYRIgcoWd2xmbkc.roa (hash: GeJ8x38uiqGaYg3LXRMD8PkKkjHNwyyZii4Sa8DdSEs=)
                          3: A2iR7wBI4WsWOWxk0yIEXCMnkKY.roa (hash: pmcJfdZ5WR1prZx2M0Vbhr4nYAqdO1+A5gfYqn4i1XE=)
                          4: egm3YjoIVFfYx2tJTs2ITY_vpNE.crl (hash: Z1QK8vb9UWPVNaNvblguhvEISguF+JdF7KM4SeGkR9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:3f:76:aa:2b:61:ee:90:9c:43:a8:57:f0:f0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a09b7623a085457d8c76b494ecd884d8fefa4d1
        Validity
            Not Before: Mar 26 10:01:11 2026 GMT
            Not After : Mar 27 10:01:11 2026 GMT
        Subject: CN=cfcefd4ba63632714fae4ed3daab2a5d8d329129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fd:37:12:5a:71:bd:49:98:bc:95:26:57:11:
                    ad:3b:e2:1c:74:ec:47:ba:8b:b4:3b:83:61:69:e6:
                    98:43:72:3d:1e:9e:39:04:be:41:52:65:a3:e8:d3:
                    66:2d:ac:86:c2:2c:bc:3f:2d:75:f1:98:25:6c:4c:
                    d9:87:87:e2:4e:7d:1d:1b:0b:4f:88:80:45:ae:54:
                    ed:7f:66:ff:f1:82:73:c9:fd:03:27:db:80:66:b0:
                    4f:a6:c2:80:ec:52:bf:77:24:f7:64:a0:3d:ab:a3:
                    54:a8:35:42:63:fb:4b:bd:4d:15:16:e2:83:96:0a:
                    25:eb:c9:8a:b1:46:ae:b8:a1:52:0e:26:d3:03:9e:
                    24:3f:68:57:01:77:13:31:c5:85:b2:8a:05:cf:f0:
                    67:c4:49:58:96:9d:20:f4:35:2a:db:03:03:e5:4b:
                    d2:d7:b5:bc:c4:0c:b2:39:e6:ba:3d:da:7e:66:f8:
                    50:a9:44:ed:42:0d:3f:11:dc:3d:57:12:15:58:40:
                    41:13:82:ca:fc:14:db:26:25:47:fc:ed:4b:e6:e5:
                    77:7e:34:18:25:c0:4c:d2:78:ad:61:70:0b:9f:d6:
                    7c:5c:f5:80:a7:ae:26:c9:e8:03:e4:b5:76:5a:ca:
                    b3:4f:2b:b1:3d:af:4a:e3:a8:b4:26:8c:61:65:02:
                    7f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CE:FD:4B:A6:36:32:71:4F:AE:4E:D3:DA:AB:2A:5D:8D:32:91:29
            X509v3 Authority Key Identifier:
                keyid:7A:09:B7:62:3A:08:54:57:D8:C7:6B:49:4E:CD:88:4D:8F:EF:A4:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egm3YjoIVFfYx2tJTs2ITY_vpNE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d07035-6192-45ef-88ad-e89e41c5b106/1/egm3YjoIVFfYx2tJTs2ITY_vpNE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:6b:e6:cf:b5:ce:08:6e:67:e8:67:a0:09:91:b1:87:ee:21:
         00:7d:2b:2e:49:fc:d5:90:f3:6a:9e:e0:52:32:8d:c1:3f:cd:
         57:41:1f:64:df:5c:0a:a5:62:97:8e:34:05:d0:2b:d1:9d:05:
         2e:cf:fa:ea:7e:43:1e:0f:06:2f:b3:0e:63:40:17:cb:ff:9d:
         34:08:2e:51:9a:f9:03:9f:93:77:c9:e7:c7:3b:6c:d9:b9:f8:
         86:cb:42:09:63:d4:b7:26:5d:39:38:a2:d8:b8:03:b8:a4:64:
         8d:57:4c:44:9f:0a:40:7d:d3:ce:11:dd:14:32:b6:ac:c9:a0:
         4c:3b:70:c2:d9:8f:4a:2d:42:b1:15:7d:3e:02:df:22:3d:f7:
         d2:55:56:b9:99:29:b1:ec:52:da:6f:e7:36:26:24:0e:5b:6b:
         5d:e2:e7:0d:eb:8d:00:14:99:ad:73:46:86:59:a7:84:3e:51:
         71:24:fc:9e:64:92:d7:62:b9:9d:4d:14:ff:7c:c9:a3:9d:e6:
         c9:ff:60:bb:7a:b9:e2:09:13:46:02:a3:02:a9:01:0f:b8:dc:
         c6:e6:d0:45:61:7d:a0:b1:20:ef:35:91:4b:ea:a4:62:b6:84:
         95:73:10:aa:f1:66:cf:22:ab:38:7d:b4:1e:fb:3f:d8:6f:d5:
         51:b4:6f:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plz92qith7pCcQ6hX8PBeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMDliNzYyM2EwODU0NTdkOGM3NmI0OTRlY2Q4ODRkOGZl
ZmE0ZDEwHhcNMjYwMzI2MTAwMTExWhcNMjYwMzI3MTAwMTExWjAzMTEwLwYDVQQD
EyhjZmNlZmQ0YmE2MzYzMjcxNGZhZTRlZDNkYWFiMmE1ZDhkMzI5MTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP03ElpxvUmYvJUmVxGtO+IcdOxH
uou0O4NhaeaYQ3I9Hp45BL5BUmWj6NNmLayGwiy8Py118ZglbEzZh4fiTn0dGwtP
iIBFrlTtf2b/8YJzyf0DJ9uAZrBPpsKA7FK/dyT3ZKA9q6NUqDVCY/tLvU0VFuKD
lgol68mKsUauuKFSDibTA54kP2hXAXcTMcWFsooFz/BnxElYlp0g9DUq2wMD5UvS
17W8xAyyOea6Pdp+ZvhQqUTtQg0/Edw9VxIVWEBBE4LK/BTbJiVH/O1L5uV3fjQY
JcBM0nitYXALn9Z8XPWAp64myegD5LV2WsqzTyuxPa9K46i0JoxhZQJ/7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/O/UumNjJxT65O09qrKl2NMpEpMB8GA1UdIwQY
MBaAFHoJt2I6CFRX2MdrSU7NiE2P76TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWdtM1lqb0lWRmZZeDJ0SlRzMklUWV92cE5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kMDcwMzUtNjE5Mi00NWVmLTg4YWQt
ZTg5ZTQxYzViMTA2LzEvZWdtM1lqb0lWRmZZeDJ0SlRzMklUWV92cE5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9kMDcwMzUtNjE5Mi00NWVmLTg4YWQtZTg5ZTQxYzViMTA2
LzEvZWdtM1lqb0lWRmZZeDJ0SlRzMklUWV92cE5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2vmz7XO
CG5n6GegCZGxh+4hAH0rLkn81ZDzap7gUjKNwT/NV0EfZN9cCqVil440BdAr0Z0F
Ls/66n5DHg8GL7MOY0AXy/+dNAguUZr5A5+Td8nnxzts2bn4hstCCWPUtyZdOTii
2LgDuKRkjVdMRJ8KQH3TzhHdFDK2rMmgTDtwwtmPSi1CsRV9PgLfIj330lVWuZkp
sexS2m/nNiYkDltrXeLnDeuNABSZrXNGhlmnhD5RcST8nmSS12K5nU0U/3zJo53m
yf9gu3q54gkTRgKjAqkBD7jcxubQRWF9oLEg7zWRS+qkYraElXMQqvFmzyKrOH20
Hvs/2G/VUbRv8w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:28:22 2026 by rpki-client