Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
File:                     EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft (raw, json)
Hash identifier:          8TBfQGCj36ZFvYCvUz+9LGUEu9/27r+SMJhgPCX9ACU=
Subject key identifier:   19:2A:76:9B:1D:FA:91:FA:47:15:23:A5:B8:86:98:E3:BF:A0:EF:9D
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Certificate issuer:       /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial:       0197B6A23CC64F6CF9C80F756EFEC07D7B49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
Manifest number:          0C9C
Signing time:             Sat 28 Jun 2025 13:02:55 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:55 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:55 +0000
Files and hashes:         1: EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl (hash: JzwUSMgS1dLhdmZ2QYbw0E8KATVpRkB7vmbMef63cn4=)
                          2: OMC8JBvCYl7bQ9ngInMd0aMZ-oE.roa (hash: 4qqAXlUiD4s2s0wNKmpYnzZpaP7ycT4Hqs2PhA8Ebd4=)
                          3: bMZAGJiSL37RYjG0omxqUzfw6RQ.roa (hash: GC8GdghFTzQFHElrcSiH/7+b0UQBvz9Pyt1qThrmjO4=)
                          4: cA-3PBWL1bUwOarNEMZiyyIevMU.roa (hash: cnw/uPeaFuZ+fncW2i8jJnwO4+wUVJ2d2gj1ViPSrJQ=)
                          5: mOheAjZvIR3dWuAdDZpcmihTHzQ.roa (hash: zDN/FrzOeeK98CYXtLxiPly6YpcVp+cmbxmn8fxsrMs=)
                          6: p1DQi1u18C75Ohux7URg7YfrGs8.roa (hash: INt16ax1DFlOoo29QJUQDnOPGS2CLSORfkcRk285y/0=)
                          7: xEHBG-sDPVKJ9XXxM6Z9mKuo0U0.roa (hash: G3jD6yODhofSNU3PUJZMmjQCNj42WLMnZ0Laof6Aj28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:3c:c6:4f:6c:f9:c8:0f:75:6e:fe:c0:7d:7b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
        Validity
            Not Before: Jun 28 13:02:55 2025 GMT
            Not After : Jun 29 13:02:55 2025 GMT
        Subject: CN=192a769b1dfa91fa471523a5b88698e3bfa0ef9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:87:32:5a:f3:c1:c4:e9:7d:64:eb:63:a9:79:
                    fc:a5:ad:8d:06:99:2d:3c:9a:fb:ed:c1:f9:83:f8:
                    a9:50:d3:5f:96:bd:57:38:1a:3b:9a:c9:64:6f:39:
                    c2:a2:22:76:d0:af:4a:55:31:40:32:0a:6c:2b:67:
                    b1:3d:47:5a:b4:3c:dd:0a:8b:ac:22:06:70:c9:78:
                    d1:fb:ff:c6:7f:2d:57:88:fe:67:34:9c:cc:1b:fd:
                    60:96:f8:df:41:0f:50:9d:51:76:b9:ba:94:3a:a6:
                    74:b2:ef:2c:cf:90:f8:3c:b4:2b:b5:94:c4:0a:8b:
                    ad:68:93:6d:66:c4:45:91:9e:1c:54:88:fd:e0:00:
                    65:c5:46:13:d8:ce:cb:b9:d4:dd:a2:a0:9d:43:fa:
                    0e:e8:42:df:b5:91:6e:2e:12:ce:e2:a7:15:ce:47:
                    56:c6:a4:01:d6:df:06:32:c0:3b:51:aa:f0:97:64:
                    28:0a:f0:f7:d0:b9:76:d0:74:8d:db:f3:18:be:d0:
                    62:32:99:0d:e4:c2:d4:bb:c1:6b:38:43:04:29:1b:
                    69:87:0d:a5:fc:2a:66:42:11:3a:52:bb:d0:07:78:
                    48:ff:1e:4b:51:42:ce:79:f2:8f:b8:55:6b:e9:34:
                    38:e1:ba:f6:8c:53:e2:e4:b1:d1:40:11:ea:97:8a:
                    d5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2A:76:9B:1D:FA:91:FA:47:15:23:A5:B8:86:98:E3:BF:A0:EF:9D
            X509v3 Authority Key Identifier:
                keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:aa:99:2c:e3:8a:24:68:88:84:27:5e:e9:3b:e2:b0:92:07:
         fc:8e:9f:86:f7:21:a7:0b:ab:5e:43:0a:e7:65:33:f1:fb:3d:
         b7:3f:c6:f2:b6:57:58:78:fb:7b:89:35:2d:dd:ff:2d:96:83:
         02:06:d7:25:d5:7c:c5:8c:9f:af:7e:6d:48:28:48:a5:6a:32:
         43:5c:1d:e5:ec:4c:bd:30:c9:00:83:b6:a3:4c:f3:54:be:9b:
         4d:16:85:de:d6:a5:ec:0e:24:af:e6:bc:a2:f7:bc:7b:bf:76:
         de:25:b0:37:61:86:27:20:e1:97:48:18:52:5b:3b:b8:cb:68:
         6e:5f:38:b8:61:57:72:6a:3e:55:fa:bd:13:19:82:02:28:34:
         d5:af:a0:e4:0e:6c:94:72:13:0a:c8:27:86:b7:26:ae:44:fd:
         04:ac:64:68:53:cf:79:71:9e:d4:8e:66:86:77:be:20:58:0e:
         0c:4b:65:96:2f:eb:23:1d:b9:f9:ed:bf:a3:fb:02:f5:00:ee:
         70:da:ec:20:d4:4b:c4:34:ff:6e:8c:33:5c:40:40:c7:3f:3d:
         d1:3f:76:ec:09:ee:51:1a:48:91:89:87:14:dc:ce:1c:9d:9c:
         61:98:dd:a8:09:76:f2:b6:a2:8a:28:15:a9:60:3a:b9:6c:ae:
         d7:12:54:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ojzGT2z5yA91bv7AfXtJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjk0ZjY5NDVhMjFkMDhkMzAxOTJjZmMxYTZiNzgwZGU3
MjhlM2IwHhcNMjUwNjI4MTMwMjU1WhcNMjUwNjI5MTMwMjU1WjAzMTEwLwYDVQQD
EygxOTJhNzY5YjFkZmE5MWZhNDcxNTIzYTViODg2OThlM2JmYTBlZjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmocyWvPBxOl9ZOtjqXn8pa2NBpkt
PJr77cH5g/ipUNNflr1XOBo7mslkbznCoiJ20K9KVTFAMgpsK2exPUdatDzdCous
IgZwyXjR+//Gfy1XiP5nNJzMG/1glvjfQQ9QnVF2ubqUOqZ0su8sz5D4PLQrtZTE
CoutaJNtZsRFkZ4cVIj94ABlxUYT2M7LudTdoqCdQ/oO6ELftZFuLhLO4qcVzkdW
xqQB1t8GMsA7Uarwl2QoCvD30Ll20HSN2/MYvtBiMpkN5MLUu8FrOEMEKRtphw2l
/CpmQhE6UrvQB3hI/x5LUULOefKPuFVr6TQ44br2jFPi5LHRQBHql4rVGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkqdpsd+pH6RxUjpbiGmOO/oO+dMB8GA1UdIwQY
MBaAFBJpT2lFoh0I0wGSz8Gmt4Deco47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDkt
NjU5OGI0Y2ViMDY5LzEvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDktNjU5OGI0Y2ViMDY5
LzEvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdaqZLOOK
JGiIhCde6TvisJIH/I6fhvchpwurXkMK52Uz8fs9tz/G8rZXWHj7e4k1Ld3/LZaD
AgbXJdV8xYyfr35tSChIpWoyQ1wd5exMvTDJAIO2o0zzVL6bTRaF3tal7A4kr+a8
ove8e7923iWwN2GGJyDhl0gYUls7uMtobl84uGFXcmo+Vfq9ExmCAig01a+g5A5s
lHITCsgnhrcmrkT9BKxkaFPPeXGe1I5mhne+IFgODEtlli/rIx25+e2/o/sC9QDu
cNrsINRLxDT/bowzXEBAxz890T927AnuURpIkYmHFNzOHJ2cYZjdqAl28raiiigV
qWA6uWyu1xJUeg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:32 2025 by rpki-client