Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
File:                     Emcb67isPjC118PSU3NXo7JUbVs.mft (raw, json)
Hash identifier:          nPPfpsdsBjYiy/Muy0iWhxC+m8ta9iJeEVq4QNxLsWQ=
Subject key identifier:   E6:13:3C:08:A4:ED:75:26:25:F2:19:40:47:D3:A1:25:46:57:12:9C
Authority key identifier: 12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B
Certificate issuer:       /CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
Certificate serial:       019F9580B0B7FFE5C24B8387EA440D866A4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
Manifest number:          0904
Signing time:             Fri 24 Jul 2026 19:01:06 +0000
Manifest this update:     Fri 24 Jul 2026 19:01:06 +0000
Manifest next update:     Sat 25 Jul 2026 19:01:06 +0000
Files and hashes:         1: Emcb67isPjC118PSU3NXo7JUbVs.crl (hash: 0TQzlYyovIDNCvStuAyyns8c7jXGowN3U/gil8PgMQw=)
                          2: IbMGTXyTOTdiq2NpG4tVLW4bQtQ.roa (hash: j1uMtZdT3V+8GANHlpcXgXLtn7udaUVnpZ9J8VG0PMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:80:b0:b7:ff:e5:c2:4b:83:87:ea:44:0d:86:6a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12671bebb8ac3e30b5d7c3d2537357a3b2546d5b
        Validity
            Not Before: Jul 24 19:01:06 2026 GMT
            Not After : Jul 25 19:01:06 2026 GMT
        Subject: CN=e6133c08a4ed752625f2194047d3a1254657129c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:6e:b1:f4:69:6a:bb:0e:a8:0f:b2:03:bd:
                    41:4a:ce:d8:7e:6b:a1:8e:5f:99:02:3f:e6:9f:00:
                    3b:07:01:57:ea:b7:98:22:2f:68:89:9e:a6:e8:a6:
                    18:a3:4c:cb:46:33:76:df:4d:4e:eb:0a:57:60:f2:
                    e9:58:03:b5:3b:ef:8b:1d:3d:dc:b7:30:e3:9e:6f:
                    93:5c:9b:db:9a:d0:3b:cc:5c:11:76:44:30:e8:0b:
                    f0:76:3b:33:24:6f:68:ab:2c:25:f5:5e:77:7f:5f:
                    c4:f1:70:c6:d3:5d:e4:04:bf:86:ea:b4:2e:e2:98:
                    2a:86:32:b7:19:f2:46:d8:72:2f:37:a6:b1:02:fb:
                    7b:68:c3:a9:6f:f6:0b:a1:f5:a2:26:34:61:d3:cf:
                    06:2e:b4:82:20:39:3c:e0:73:50:50:aa:ae:7d:ae:
                    08:61:4a:8f:43:03:26:3f:a7:e4:29:8f:88:c9:40:
                    ce:31:93:ab:69:1b:6c:11:0f:3e:35:17:06:39:d3:
                    5d:05:16:12:3c:d9:7d:04:01:f5:4a:68:0b:cc:9c:
                    cd:d1:55:1e:6c:ad:c8:3b:63:75:6e:d1:bd:f0:bb:
                    fe:de:aa:b9:e1:7f:65:af:c0:04:d6:76:c9:ca:47:
                    86:9c:71:42:93:4b:1d:b3:01:85:7b:c5:2c:7c:3e:
                    9b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:13:3C:08:A4:ED:75:26:25:F2:19:40:47:D3:A1:25:46:57:12:9C
            X509v3 Authority Key Identifier:
                keyid:12:67:1B:EB:B8:AC:3E:30:B5:D7:C3:D2:53:73:57:A3:B2:54:6D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Emcb67isPjC118PSU3NXo7JUbVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6a467-bc95-405c-84ec-d4286978a80a/1/Emcb67isPjC118PSU3NXo7JUbVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:31:bf:0a:1e:d3:68:d5:07:a8:c0:63:d8:80:dd:64:19:0b:
         8f:df:26:4a:5d:4f:9a:f5:8a:ed:60:80:0a:f8:e7:0c:a2:b8:
         07:02:30:85:b5:09:f9:2c:20:25:8d:77:ba:7b:da:ec:a5:e7:
         9c:ee:53:08:ff:5d:96:e3:f4:2a:0e:a1:4d:e5:69:a1:70:43:
         38:36:9f:2b:9b:2d:55:9f:ee:76:21:e4:9e:b2:bb:b6:68:51:
         d1:dd:ef:c0:50:0a:7a:3b:96:e9:18:71:6e:05:fb:fb:a6:16:
         a4:77:37:5a:54:ea:ea:e6:46:af:42:bc:5c:95:57:6f:63:e9:
         cc:60:81:49:17:fb:45:ed:58:45:a1:3f:93:f8:fd:ac:2e:f3:
         3b:55:8c:65:b2:2c:43:a8:90:13:2a:f8:bb:2a:83:08:86:df:
         08:3b:83:fb:26:59:fe:72:ee:de:64:4a:bf:8d:13:3a:25:47:
         ea:28:68:19:ee:06:e9:50:e8:07:e2:07:37:7b:a4:81:6d:de:
         d1:b4:39:c1:09:20:71:8b:cc:99:2d:dd:83:96:07:10:56:84:
         7a:60:f6:59:42:ab:cf:4a:05:f4:fc:3c:74:88:d7:b3:bb:2d:
         27:57:26:22:0c:89:ba:27:3a:86:88:f8:26:40:18:42:f2:af:
         be:a1:13:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VgLC3/+XCS4OH6kQNhmpOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjcxYmViYjhhYzNlMzBiNWQ3YzNkMjUzNzM1N2EzYjI1
NDZkNWIwHhcNMjYwNzI0MTkwMTA2WhcNMjYwNzI1MTkwMTA2WjAzMTEwLwYDVQQD
EyhlNjEzM2MwOGE0ZWQ3NTI2MjVmMjE5NDA0N2QzYTEyNTQ2NTcxMjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR1usfRparsOqA+yA71BSs7Yfmuh
jl+ZAj/mnwA7BwFX6reYIi9oiZ6m6KYYo0zLRjN2301O6wpXYPLpWAO1O++LHT3c
tzDjnm+TXJvbmtA7zFwRdkQw6AvwdjszJG9oqywl9V53f1/E8XDG013kBL+G6rQu
4pgqhjK3GfJG2HIvN6axAvt7aMOpb/YLofWiJjRh088GLrSCIDk84HNQUKqufa4I
YUqPQwMmP6fkKY+IyUDOMZOraRtsEQ8+NRcGOdNdBRYSPNl9BAH1SmgLzJzN0VUe
bK3IO2N1btG98Lv+3qq54X9lr8AE1nbJykeGnHFCk0sdswGFe8UsfD6bxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYTPAik7XUmJfIZQEfToSVGVxKcMB8GA1UdIwQY
MBaAFBJnG+u4rD4wtdfD0lNzV6OyVG1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNmE0NjctYmM5NS00MDVjLTg0ZWMt
ZDQyODY5NzhhODBhLzEvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNmE0NjctYmM5NS00MDVjLTg0ZWMtZDQyODY5NzhhODBh
LzEvRW1jYjY3aXNQakMxMThQU1UzTlhvN0pVYlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTG/Ch7T
aNUHqMBj2IDdZBkLj98mSl1PmvWK7WCACvjnDKK4BwIwhbUJ+SwgJY13unva7KXn
nO5TCP9dluP0Kg6hTeVpoXBDODafK5stVZ/udiHknrK7tmhR0d3vwFAKejuW6Rhx
bgX7+6YWpHc3WlTq6uZGr0K8XJVXb2PpzGCBSRf7Re1YRaE/k/j9rC7zO1WMZbIs
Q6iQEyr4uyqDCIbfCDuD+yZZ/nLu3mRKv40TOiVH6ihoGe4G6VDoB+IHN3ukgW3e
0bQ5wQkgcYvMmS3dg5YHEFaEemD2WUKrz0oF9Pw8dIjXs7stJ1cmIgyJuic6hoj4
JkAYQvKvvqETZw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:25:32 2026 by rpki-client