Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File:                     eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier:          8DRLn1xB/jYCgN+oCTvuN8YUPmdfGgK9z8J7Gn1dJEM=
Subject key identifier:   E0:C0:CD:73:64:44:90:2A:81:2E:A2:F1:52:E0:76:CF:E3:A5:CD:CE
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer:       /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial:       019E1EA316FA2D7C2A868F523B73A461327D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number:          0DB1
Signing time:             Wed 13 May 2026 00:01:05 +0000
Manifest this update:     Wed 13 May 2026 00:01:05 +0000
Manifest next update:     Thu 14 May 2026 00:01:05 +0000
Files and hashes:         1: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: I0hRJm+gdcrwZwxkFinxJ5UEzj3Sy31BA3rKU6rMuoE=)
                          2: qbIaJec-toVL64n7z-uuxLGTIAQ.roa (hash: T1ieQtaDmRsidOYkDXdJkWB5IsW3s99F+xa0mkqLysM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 00:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:16:fa:2d:7c:2a:86:8f:52:3b:73:a4:61:32:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
        Validity
            Not Before: May 13 00:01:05 2026 GMT
            Not After : May 14 00:01:05 2026 GMT
        Subject: CN=e0c0cd736444902a812ea2f152e076cfe3a5cdce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bd:be:15:29:4a:9a:ba:94:9b:08:da:e6:58:
                    e6:ff:8b:4d:0f:74:d4:8a:24:ba:3f:2a:9c:6b:32:
                    48:25:e4:38:0b:6e:91:c2:fe:77:de:c2:23:6c:1e:
                    f1:f0:d8:a8:d4:36:d8:98:86:88:cc:ce:7b:7b:b9:
                    a6:3a:a5:d7:80:a6:af:1d:39:b0:18:a3:d3:65:2e:
                    c6:ca:f7:0d:9b:ca:35:fc:72:a6:45:45:ca:e6:33:
                    ce:a5:f9:45:1d:4d:b9:d8:51:7f:18:30:d0:b8:3b:
                    a0:04:90:e3:6c:43:32:57:e6:c1:b2:a4:21:bb:01:
                    7b:ae:9d:15:d4:0f:02:1d:68:7f:79:d2:da:61:73:
                    32:08:9f:3a:68:2c:86:6d:43:67:6b:bb:a2:0d:fe:
                    49:c6:da:0d:08:a6:a9:82:dd:77:d3:34:20:95:7f:
                    0c:d9:8d:dd:c7:0f:df:d1:52:fa:c7:b0:dd:bb:0c:
                    8e:e9:79:0c:fb:1f:2b:c7:74:48:f2:4b:c4:e9:65:
                    52:07:04:1b:4e:01:7d:f7:ab:1a:82:3c:aa:da:64:
                    8b:d4:f1:aa:30:18:3b:01:12:24:6a:4f:e0:55:55:
                    54:cc:d8:02:4d:d7:fe:cc:80:47:08:0e:e7:d6:66:
                    a3:d3:1e:5d:4e:c9:0d:4b:8d:2e:54:b4:c8:b1:66:
                    26:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C0:CD:73:64:44:90:2A:81:2E:A2:F1:52:E0:76:CF:E3:A5:CD:CE
            X509v3 Authority Key Identifier:
                keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:c3:bc:2b:5e:ee:96:49:01:bb:1f:c2:bc:0d:93:af:b6:69:
         a8:6d:fa:e7:5e:83:51:07:7c:56:6e:2d:13:e4:25:5d:49:07:
         ba:9e:95:07:f4:85:8b:45:dd:9d:7f:cd:79:ae:cd:29:55:36:
         11:3b:b9:13:2d:a0:6b:e6:ba:12:7d:c7:11:68:26:88:78:ad:
         59:49:14:1a:0a:d5:97:38:54:df:47:35:f8:14:0d:0c:3d:f6:
         af:9e:27:9a:81:0f:f3:4c:5a:f8:21:04:47:7e:e5:56:22:20:
         bf:f3:08:b2:d4:b4:a6:ba:2a:6b:d4:e5:a6:94:de:b9:23:2d:
         7b:6f:69:2d:bb:1e:95:12:0a:2e:03:4f:61:f8:cf:c5:b6:99:
         0b:3a:9c:ac:12:a6:9d:97:ad:7f:21:66:a8:e8:20:4c:32:6b:
         4c:94:90:dc:97:47:3e:b5:bb:d2:56:f8:e0:79:87:58:94:ae:
         12:c4:f2:a3:30:59:2d:61:15:57:ea:90:80:7b:6c:59:a0:11:
         4f:dd:40:ae:a7:9d:7b:d4:32:cf:fd:57:88:22:e6:71:5d:48:
         bd:f1:6a:4f:8f:1b:64:a9:52:7e:cd:29:98:8e:26:09:f5:cc:
         dd:fa:33:6c:06:84:f7:92:2c:2c:2b:ea:f4:99:a0:e7:87:77:
         c5:df:7e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:42:30 2026 by rpki-client