Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File:                     eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier:          +CmRg7VZQc0tLBl9OCEWXeGqoxOvClsfCkezhLGdIOI=
Subject key identifier:   07:26:7D:DC:27:6F:9F:CE:EB:D7:9A:C8:3E:C0:0D:7F:55:16:71:4F
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer:       /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial:       01A0D5DDF85B0FCF1B9B91C92FB2F6EBC760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number:          0F19
Signing time:             Fri 25 Sep 2026 00:01:29 +0000
Manifest this update:     Fri 25 Sep 2026 00:01:29 +0000
Manifest next update:     Sat 26 Sep 2026 00:01:29 +0000
Files and hashes:         1: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: PhEySCiCIdm3arsOuSDimvjUHf6hohqYQBwIpQG99/0=)
                          2: qbIaJec-toVL64n7z-uuxLGTIAQ.roa (hash: T1ieQtaDmRsidOYkDXdJkWB5IsW3s99F+xa0mkqLysM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:dd:f8:5b:0f:cf:1b:9b:91:c9:2f:b2:f6:eb:c7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
        Validity
            Not Before: Sep 25 00:01:29 2026 GMT
            Not After : Sep 26 00:01:29 2026 GMT
        Subject: CN=07267ddc276f9fceebd79ac83ec00d7f5516714f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:34:b8:22:33:2a:06:30:15:30:db:f6:52:
                    53:83:57:f2:3c:ef:d2:ae:2a:ee:23:39:2a:80:8d:
                    62:7f:63:57:0c:97:bf:81:cc:e0:15:e6:fd:a8:6d:
                    36:8a:f0:4c:19:37:a7:4d:26:d3:4f:97:1a:e7:d5:
                    24:07:67:35:5f:90:8a:f3:91:f7:0b:94:c9:88:28:
                    d7:36:6a:a7:17:36:ba:45:b4:a4:d7:a0:b8:e6:cb:
                    03:b4:76:d4:a1:18:7f:73:9a:a7:10:54:97:63:ee:
                    0e:bf:9c:d1:c4:24:4a:c8:41:db:91:2d:bc:77:f5:
                    13:64:91:3b:94:80:91:1a:af:5f:39:a1:03:6a:3e:
                    b2:02:68:aa:12:aa:06:27:f8:c6:12:e5:55:b2:30:
                    64:44:a0:0e:a6:d3:ef:82:66:63:4f:ae:ce:70:93:
                    fd:09:90:b3:ab:0e:53:87:23:96:a7:96:be:3f:f0:
                    69:ed:9c:e2:c0:2a:d7:32:fe:cd:0d:5d:a3:27:83:
                    98:87:52:fa:2d:ed:d9:cc:11:9b:d1:f8:5d:52:8c:
                    55:25:8c:13:41:50:c5:94:cc:83:44:0b:64:2a:b8:
                    1f:75:9e:1a:e9:dd:19:1d:4e:f6:61:6e:b0:3c:bc:
                    a7:b1:8d:29:d2:17:cb:b2:26:05:39:2f:55:e9:59:
                    0e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:26:7D:DC:27:6F:9F:CE:EB:D7:9A:C8:3E:C0:0D:7F:55:16:71:4F
            X509v3 Authority Key Identifier:
                keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ba:e5:e2:2d:16:8e:ad:25:ae:9b:3c:d9:0c:77:17:27:7f:
         d6:88:1f:fe:78:03:0a:42:63:e5:cd:11:b4:9e:3a:34:bb:10:
         b5:55:5c:80:cc:2e:a7:63:09:45:18:53:9a:ac:24:ac:db:ac:
         5f:ef:25:19:64:0f:ea:01:a9:63:65:cc:9c:29:df:a0:18:b3:
         9b:83:0d:66:82:36:6a:3d:b0:ff:85:a9:ec:af:ad:f9:eb:cc:
         33:e0:c8:18:f4:45:c6:c2:c1:45:05:b7:48:eb:d8:74:ba:95:
         74:f6:ce:6e:26:11:84:16:81:9b:be:f3:ac:50:73:27:e7:0c:
         ad:54:88:23:a9:0f:3c:d8:31:eb:17:6d:e0:d0:c8:0c:07:bc:
         c6:ba:49:56:84:c9:79:41:09:11:ae:00:6a:68:b4:99:8d:ca:
         b4:fe:fb:0e:3a:47:22:ce:aa:93:f5:83:ed:90:2d:51:b2:c9:
         8d:b9:59:d2:04:59:d0:73:dc:c9:6b:f4:7c:88:f3:55:2d:56:
         a0:a3:a4:2c:db:ed:c6:0b:94:3a:e4:84:0a:f9:f2:57:20:a6:
         50:fb:11:29:ec:71:ac:45:6e:9b:05:da:e7:17:4f:ad:03:60:
         63:af:90:c3:a4:0b:ee:d5:d0:c3:a7:9f:1b:a4:85:7b:f0:ed:
         88:0a:9a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:44:33 2026 by rpki-client