Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
File:                     EMjta5UtlCnjU08U2TJlmQ8cp84.mft (raw, json)
Hash identifier:          3bW1Zrj2ejEcjgxR5M28ElExpteJyVL0zwSC4+6QG6I=
Subject key identifier:   8C:0B:88:A5:C6:6C:E6:30:B2:92:D1:57:C9:04:0A:E0:60:46:42:EA
Authority key identifier: 10:C8:ED:6B:95:2D:94:29:E3:53:4F:14:D9:32:65:99:0F:1C:A7:CE
Certificate issuer:       /CN=10c8ed6b952d9429e3534f14d93265990f1ca7ce
Certificate serial:       019E1EA3B56C1DC0DC93CA18B70CC06055A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
Manifest number:          011E
Signing time:             Wed 13 May 2026 00:01:45 +0000
Manifest this update:     Wed 13 May 2026 00:01:45 +0000
Manifest next update:     Thu 14 May 2026 00:01:45 +0000
Files and hashes:         1: 83u4srH8ACpTsU951VXyIZw_p80.roa (hash: q/HJzvlHBUwM+2hxkEl4HK2p/wjtVm5tBQqZRN97Q3I=)
                          2: EMjta5UtlCnjU08U2TJlmQ8cp84.crl (hash: RnYwrdf36l1aUia+2hWEGAk4/izQzWGuo9GnX35KPVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:b5:6c:1d:c0:dc:93:ca:18:b7:0c:c0:60:55:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c8ed6b952d9429e3534f14d93265990f1ca7ce
        Validity
            Not Before: May 13 00:01:45 2026 GMT
            Not After : May 14 00:01:45 2026 GMT
        Subject: CN=8c0b88a5c66ce630b292d157c9040ae0604642ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e2:51:29:52:76:3c:09:2e:db:4a:d6:83:c8:
                    a1:c1:b6:5b:40:32:6f:31:c8:a8:7e:8c:fc:3b:56:
                    d0:c7:fb:11:92:34:02:22:45:5f:b5:a2:5b:3f:c8:
                    67:76:1c:d1:fc:45:02:e6:48:34:56:e8:5c:19:db:
                    89:4d:d1:ad:08:c7:e1:22:3f:12:c2:07:d9:cf:47:
                    60:74:e9:3e:97:b7:85:a9:b1:e7:ee:5c:b8:85:3f:
                    bc:38:2e:cd:41:8d:87:6d:f7:6a:cc:8b:05:c1:0a:
                    83:41:6f:8f:4d:ad:8e:ae:51:80:5a:48:8b:f9:40:
                    40:33:f5:5e:2a:30:c4:b8:f3:09:67:e2:a6:c7:1d:
                    8e:21:6f:f4:1c:70:1e:f7:c7:c5:47:7d:d0:56:2e:
                    86:2a:ea:06:dc:cc:4f:b0:9d:0c:cf:d5:99:11:fd:
                    e5:1a:62:7b:2c:b4:c0:c0:b9:82:92:e3:7c:36:fb:
                    fe:37:cb:4e:45:67:87:8f:a4:fa:b1:68:2f:80:5a:
                    91:7c:0d:b8:f1:9d:42:38:93:30:c4:e3:9b:3f:c7:
                    f2:2c:0e:31:ce:6c:2a:11:f0:e3:1c:c9:c7:90:7d:
                    92:f9:c6:31:8c:c3:09:52:05:b9:1d:27:8e:2a:fb:
                    5b:16:f8:2a:8f:3d:26:ff:76:aa:8f:62:59:67:54:
                    08:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0B:88:A5:C6:6C:E6:30:B2:92:D1:57:C9:04:0A:E0:60:46:42:EA
            X509v3 Authority Key Identifier:
                keyid:10:C8:ED:6B:95:2D:94:29:E3:53:4F:14:D9:32:65:99:0F:1C:A7:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EMjta5UtlCnjU08U2TJlmQ8cp84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/90a110-9948-43b3-a3cc-8d897d8a9f9c/1/EMjta5UtlCnjU08U2TJlmQ8cp84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:24:f9:be:fe:1d:e3:ce:b3:e9:a8:ff:da:23:30:35:65:a4:
         0d:78:a9:da:dc:8a:8e:a0:46:40:69:fa:bf:6d:6d:48:85:4a:
         6c:6c:3b:41:40:ea:d1:20:9c:af:44:52:95:ef:78:52:55:85:
         7c:24:50:a9:f8:27:f7:65:6f:b2:8e:94:98:cf:a2:55:21:3c:
         e7:6d:c1:77:83:72:4a:29:e6:a7:cf:8b:40:28:0e:e6:d9:77:
         26:cc:3f:2f:f3:0b:ee:5a:ed:1d:ef:fa:27:cd:b5:4f:8e:92:
         d1:9e:2c:83:0c:b2:3a:d9:fe:74:54:ce:96:c7:3f:20:20:73:
         09:ab:e6:e9:f3:3c:a4:b2:b8:f3:c4:15:ea:a4:44:1f:b6:aa:
         2c:4d:69:8f:a7:1f:c7:2b:29:ab:1f:f3:92:79:20:a1:4d:ce:
         7e:97:27:fd:ed:3e:c9:98:6f:55:a6:4c:09:03:46:86:43:b2:
         16:06:c3:78:8c:94:a4:24:b3:6f:0c:7a:99:b2:04:43:13:35:
         a3:3d:46:74:2d:5a:f7:24:27:d5:be:f9:80:e6:97:8f:e2:b7:
         65:9b:2c:e5:97:b5:79:fc:05:cc:ea:fe:8f:63:6e:04:64:32:
         9f:9f:91:e4:45:2b:fa:3c:ed:b2:68:da:6b:b2:67:9d:e8:10:
         55:38:82:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:55 2026 by rpki-client