Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
File:                     eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft (raw, json)
Hash identifier:          1SHVG0KR1H5wrmhdkhP5g+jBswImAMIdffJroXZevd0=
Subject key identifier:   5B:A3:F2:C0:AF:C3:D5:FA:F9:51:81:E9:A2:4E:02:9D:BF:C7:2C:BB
Authority key identifier: 78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2
Certificate issuer:       /CN=78cb4975b93b4593576048338564ea3eb09dc8e2
Certificate serial:       019F935BE904BFE66D01004B42E5A6CEE224
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
Manifest number:          0E72
Signing time:             Fri 24 Jul 2026 09:01:41 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:41 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:41 +0000
Files and hashes:         1: eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl (hash: OBL/QDkbatRtOroVU53CggddCA1jwTqjxtPOPzprUg8=)
                          2: qbIaJec-toVL64n7z-uuxLGTIAQ.roa (hash: T1ieQtaDmRsidOYkDXdJkWB5IsW3s99F+xa0mkqLysM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:e9:04:bf:e6:6d:01:00:4b:42:e5:a6:ce:e2:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78cb4975b93b4593576048338564ea3eb09dc8e2
        Validity
            Not Before: Jul 24 09:01:41 2026 GMT
            Not After : Jul 25 09:01:41 2026 GMT
        Subject: CN=5ba3f2c0afc3d5faf95181e9a24e029dbfc72cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:45:ae:d4:a1:e0:13:8c:f6:9e:b6:60:9a:6d:
                    d9:13:8b:aa:50:35:fc:40:0b:90:5d:c5:db:6a:24:
                    d0:4a:41:bb:09:77:40:33:04:39:ab:12:7e:5e:60:
                    34:db:e0:8c:92:ef:71:8e:18:42:6a:a3:02:50:69:
                    10:b2:68:6d:9c:73:5b:b6:f3:18:db:ac:aa:93:e7:
                    14:c3:99:81:cb:66:cc:be:d4:0a:44:cf:b8:ae:41:
                    67:34:ec:3f:2c:51:c6:86:13:7c:56:b1:ef:f5:21:
                    73:cc:1a:1b:29:42:fd:52:48:a5:9e:a7:95:46:9b:
                    48:41:50:ff:eb:ee:3a:66:e1:e5:03:25:92:c5:05:
                    5f:5d:75:43:9a:21:43:ce:fc:70:72:b3:c1:ef:a1:
                    fb:8f:9e:02:19:7b:13:fa:81:04:e3:da:ab:87:96:
                    69:4a:3e:94:9f:bc:80:f7:4a:77:3b:ce:7e:a9:90:
                    c5:ba:a6:51:85:1d:41:ea:aa:0e:bf:76:34:a8:5f:
                    bf:ea:22:12:d8:c1:1e:f2:f9:bf:6e:cd:9d:9f:67:
                    a0:61:c7:ce:fd:80:0a:38:51:c3:75:94:cb:03:c3:
                    26:c3:3d:0f:34:00:8a:6d:ee:80:51:fd:40:b9:12:
                    15:6c:75:a8:fd:11:f4:9b:ff:2d:9c:21:53:19:56:
                    33:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A3:F2:C0:AF:C3:D5:FA:F9:51:81:E9:A2:4E:02:9D:BF:C7:2C:BB
            X509v3 Authority Key Identifier:
                keyid:78:CB:49:75:B9:3B:45:93:57:60:48:33:85:64:EA:3E:B0:9D:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMtJdbk7RZNXYEgzhWTqPrCdyOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9d1b44-1dec-45ee-92de-fa7988b714bc/1/eMtJdbk7RZNXYEgzhWTqPrCdyOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:52:96:f6:f9:f3:5f:8c:8d:56:ba:9e:fc:d9:77:99:77:df:
         fb:f0:79:e3:63:c4:f9:f6:17:ee:c4:cc:1d:2a:a6:42:36:70:
         e8:a6:39:43:38:d3:79:59:66:f6:1d:2f:69:c1:68:8c:c5:1e:
         d5:38:2f:8a:2f:d6:2f:c6:65:62:e2:4c:6e:94:ff:71:99:11:
         21:a8:1b:65:87:ad:0f:47:c6:b8:e3:00:b3:f8:b3:07:36:b0:
         7e:18:ba:a2:e6:08:69:94:54:53:ad:67:20:c8:c7:11:0c:08:
         21:8f:21:7c:c1:b5:97:d0:9d:0a:72:97:9b:dd:4a:b9:1e:36:
         38:3c:8c:ac:05:c1:cc:4f:1f:6d:0b:3f:e1:a2:6c:40:16:7a:
         66:5a:ab:33:3a:42:ff:e1:7a:25:30:54:f1:5e:94:e9:a6:3b:
         7c:f6:05:33:4d:e7:1f:45:ca:3a:c3:6a:42:50:ef:b7:3c:fa:
         60:68:b1:0d:95:22:b8:d2:c9:f1:29:96:34:54:41:f7:03:c1:
         f7:1b:b1:8a:63:c3:3d:fd:f8:2f:c3:8a:6e:c3:04:3a:57:34:
         dd:61:bc:05:e7:b1:b8:ce:ac:c8:ec:7b:b4:57:55:7c:4d:cb:
         cd:d6:e7:71:76:eb:41:9d:54:13:e9:44:0b:7a:fa:36:7b:1d:
         51:0e:bd:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:02 2026 by rpki-client