Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File:                     ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier:          7GCrPiqRoLn+Txwhq/KAomqHYljmL/mNzk98nMjpncU=
Subject key identifier:   31:92:BE:0B:1D:34:A6:77:C6:81:EE:BE:63:68:0B:D1:6F:D6:68:55
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer:       /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial:       01A0C74619402BD612D3BC910B6563979ADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number:          0D06
Signing time:             Tue 22 Sep 2026 04:00:54 +0000
Manifest this update:     Tue 22 Sep 2026 04:00:54 +0000
Manifest next update:     Wed 23 Sep 2026 04:00:54 +0000
Files and hashes:         1: 185JWtL1nJVygOFr95-RQtms_58.roa (hash: KasP2muj3cS9GbttmeKweMSTbVCW9PhTnMbBxoVVNls=)
                          2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: CgolA0uhpC6wL03BQWykmUJP4zEd0I0QnMxhZc4CAqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:46:19:40:2b:d6:12:d3:bc:91:0b:65:63:97:9a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
        Validity
            Not Before: Sep 22 04:00:54 2026 GMT
            Not After : Sep 23 04:00:54 2026 GMT
        Subject: CN=3192be0b1d34a677c681eebe63680bd16fd66855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fe:74:76:14:80:94:65:c5:d1:31:a4:28:f8:
                    05:ce:f4:b5:83:a4:b1:e1:ee:89:65:0d:6a:c2:56:
                    a1:cf:5e:45:01:d5:21:3b:13:d0:89:a7:7b:5c:00:
                    6b:bf:ca:15:e3:b3:cf:f0:5e:8c:82:4a:8d:73:48:
                    27:c1:b2:de:19:eb:9c:7f:05:de:02:75:af:f9:45:
                    61:75:45:43:54:8d:02:ec:77:15:b2:a1:6c:be:85:
                    d1:61:fe:e3:5f:fe:5a:9b:e7:d7:b6:53:a6:aa:3e:
                    54:b1:14:fb:20:d7:e8:71:9f:0e:25:86:b5:1d:12:
                    74:c1:01:50:03:71:f8:71:fb:53:92:00:20:4e:d7:
                    5d:da:71:f6:bc:ff:47:d9:86:bf:c3:cb:12:e0:a9:
                    97:c2:05:bf:6e:fa:05:d0:a3:4a:e4:7f:2e:02:e2:
                    96:55:70:8a:5c:0b:7a:a1:54:a4:4b:b7:fe:95:fe:
                    bc:26:b9:28:27:f3:8b:05:d3:43:7c:23:8e:9e:6c:
                    36:55:e8:15:e5:42:f0:38:a7:7d:93:78:88:3a:97:
                    45:39:eb:c4:bd:84:e7:1e:92:6c:13:c9:82:53:a1:
                    60:2f:80:e3:6d:ef:2b:6b:a8:b4:5f:1f:b1:e1:45:
                    1c:d7:27:c0:22:76:27:d8:c5:60:58:66:ed:cb:46:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:92:BE:0B:1D:34:A6:77:C6:81:EE:BE:63:68:0B:D1:6F:D6:68:55
            X509v3 Authority Key Identifier:
                keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:5e:11:d3:97:c5:7e:ae:19:c5:52:ea:c0:57:91:b2:e1:d9:
         a8:20:17:ab:67:11:91:b2:af:26:91:74:83:9c:b8:6f:32:af:
         e3:f0:a1:fb:92:94:e3:ef:34:41:92:34:e5:fc:50:df:14:14:
         7f:9a:ec:7d:3b:61:50:e7:e1:20:a0:23:ac:21:0f:45:ee:ab:
         b8:a0:57:c2:e8:fa:10:05:a4:2f:71:df:c6:5b:b7:c1:78:b1:
         92:2c:1f:79:f3:95:5c:b5:20:64:5c:37:57:dc:6a:20:b2:33:
         a3:cb:c8:98:b3:ad:5f:7e:9f:da:e7:83:1b:e2:2c:b3:6d:bd:
         83:a0:b5:ee:ee:59:20:68:ff:91:d4:84:bd:e1:a0:33:e1:00:
         cb:7b:25:e9:99:e6:7c:cb:3f:65:8d:e1:1d:bf:ca:1e:1c:29:
         6d:f3:1b:00:c2:49:ad:4c:0a:9f:fe:31:bc:31:b6:89:ef:5e:
         b1:3a:5d:9b:a4:ad:fe:db:72:88:89:4b:d2:b6:0f:51:66:58:
         7e:6b:b8:34:82:78:c6:46:2c:75:29:fd:b7:38:2d:ee:b8:6b:
         84:9e:d3:39:f3:02:5d:73:f7:e4:6e:d6:a2:3b:d2:69:f5:4c:
         e4:54:ab:a9:0b:f3:f3:e4:ef:5c:da:1a:84:8d:8e:27:02:7d:
         9a:e4:8d:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRhlAK9YS07yRC2Vjl5rfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWIwOTcxMGFjZGI3MjA4NmQ2NThlOTBkOGYwMjVmYTZh
MTExYjEwHhcNMjYwOTIyMDQwMDU0WhcNMjYwOTIzMDQwMDU0WjAzMTEwLwYDVQQD
EygzMTkyYmUwYjFkMzRhNjc3YzY4MWVlYmU2MzY4MGJkMTZmZDY2ODU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf50dhSAlGXF0TGkKPgFzvS1g6Sx
4e6JZQ1qwlahz15FAdUhOxPQiad7XABrv8oV47PP8F6MgkqNc0gnwbLeGeucfwXe
AnWv+UVhdUVDVI0C7HcVsqFsvoXRYf7jX/5am+fXtlOmqj5UsRT7INfocZ8OJYa1
HRJ0wQFQA3H4cftTkgAgTtdd2nH2vP9H2Ya/w8sS4KmXwgW/bvoF0KNK5H8uAuKW
VXCKXAt6oVSkS7f+lf68JrkoJ/OLBdNDfCOOnmw2VegV5ULwOKd9k3iIOpdFOevE
vYTnHpJsE8mCU6FgL4Djbe8ra6i0Xx+x4UUc1yfAInYn2MVgWGbty0b9EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGSvgsdNKZ3xoHuvmNoC9Fv1mhVMB8GA1UdIwQY
MBaAFBEbCXEKzbcghtZY6Q2PAl+moRGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjkt
N2JmMDM1NmE2YmFiLzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjktN2JmMDM1NmE2YmFi
LzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaF4R05fF
fq4ZxVLqwFeRsuHZqCAXq2cRkbKvJpF0g5y4bzKv4/Ch+5KU4+80QZI05fxQ3xQU
f5rsfTthUOfhIKAjrCEPRe6ruKBXwuj6EAWkL3Hfxlu3wXixkiwfefOVXLUgZFw3
V9xqILIzo8vImLOtX36f2ueDG+Iss229g6C17u5ZIGj/kdSEveGgM+EAy3sl6Znm
fMs/ZY3hHb/KHhwpbfMbAMJJrUwKn/4xvDG2ie9esTpdm6St/ttyiIlL0rYPUWZY
fmu4NIJ4xkYsdSn9tzgt7rhrhJ7TOfMCXXP35G7WojvSafVM5FSrqQvz8+TvXNoa
hI2OJwJ9muSN5w==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:22:21 2026 by rpki-client