Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File:                     ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier:          JPC82QnBGlMKKpdPnOxK2yO2junjsJddFKgzfyoFP7I=
Subject key identifier:   C9:53:2E:B5:32:F6:5C:3D:24:84:DA:31:9F:DE:74:F5:4A:A5:6C:FE
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer:       /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial:       019D9A3E3318D20E2B9E8CC58BDD987E893A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number:          0B61
Signing time:             Fri 17 Apr 2026 07:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:00 +0000
Files and hashes:         1: 185JWtL1nJVygOFr95-RQtms_58.roa (hash: KasP2muj3cS9GbttmeKweMSTbVCW9PhTnMbBxoVVNls=)
                          2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: 1A2ovJJfEX+5oeG1490pB31qZoQiiAx1wzAhKZdH8BA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:33:18:d2:0e:2b:9e:8c:c5:8b:dd:98:7e:89:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
        Validity
            Not Before: Apr 17 07:01:00 2026 GMT
            Not After : Apr 18 07:01:00 2026 GMT
        Subject: CN=c9532eb532f65c3d2484da319fde74f54aa56cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5b:dc:3e:44:93:7f:f5:cd:e8:81:27:51:82:
                    2a:9a:d5:66:32:84:43:bf:ee:78:19:14:80:51:e9:
                    3f:d5:fd:88:88:0e:23:f4:38:c7:c0:c0:35:87:2e:
                    37:c3:f0:df:6b:58:82:7e:aa:be:b1:eb:bd:bd:b9:
                    a0:ed:4a:bb:19:f7:6f:64:4d:94:79:7f:e1:34:84:
                    c2:22:85:00:14:cf:61:27:04:c0:14:aa:8a:2b:d0:
                    b0:4c:d4:df:eb:91:64:44:42:dd:06:7a:e5:72:d6:
                    c5:6b:6f:7d:c8:9c:db:c5:fd:06:c2:62:37:95:f8:
                    78:8b:af:46:5b:43:87:53:15:5b:7f:c7:0e:29:a7:
                    05:a1:b1:70:62:59:84:f2:40:fd:ac:66:e3:5f:f4:
                    08:6e:d2:4e:63:5d:8c:54:0d:75:7b:42:8b:ed:1a:
                    70:47:7a:72:62:92:91:43:33:5e:f4:87:75:4e:bc:
                    a2:0e:ea:57:51:99:2a:78:44:68:cf:a7:d5:6e:cf:
                    05:7e:c1:13:5f:14:bc:37:37:29:5e:4e:10:f3:b8:
                    27:e2:73:99:28:1e:ef:90:97:47:a6:a6:58:0d:6a:
                    f2:3b:e5:4a:dd:80:51:54:ce:fa:7f:c1:98:72:a4:
                    26:b2:5b:19:db:42:30:fa:e6:c0:52:60:1f:1b:06:
                    5a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:53:2E:B5:32:F6:5C:3D:24:84:DA:31:9F:DE:74:F5:4A:A5:6C:FE
            X509v3 Authority Key Identifier:
                keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:64:7f:05:3a:e1:42:dc:ee:76:4d:66:e0:63:2c:84:08:45:
         c2:0b:35:3d:8a:93:03:b6:dd:be:09:e8:44:4d:96:ca:f9:02:
         d3:da:72:c3:73:d2:16:56:7d:d1:6a:36:d0:d4:24:f9:49:5e:
         32:60:a4:e9:19:d8:2f:b3:6d:00:67:7e:56:7c:c1:4c:a2:4c:
         62:e4:17:82:67:da:d3:f0:28:a5:7a:1f:f1:00:4f:5f:e0:17:
         8c:de:05:a9:6c:96:a7:15:c1:08:71:09:d4:a5:34:c8:86:90:
         56:5c:fd:e7:d7:32:8e:f9:53:73:e1:28:8c:53:e1:52:ef:86:
         80:ea:4d:df:9e:8a:78:ad:2b:7b:9b:17:93:d4:a0:79:cc:32:
         88:21:01:56:a7:e4:18:69:be:ce:51:15:af:8f:b2:42:ec:a1:
         de:c6:6b:d8:61:18:59:4d:ae:20:d4:66:ef:62:35:12:0f:37:
         b5:19:64:c6:1f:77:e7:33:37:e4:51:31:d9:19:b4:ad:f4:2e:
         b7:ab:62:d7:bc:bb:09:03:d9:f6:0d:22:41:3d:3b:46:5b:d1:
         15:40:64:99:81:47:95:b7:ad:a1:39:51:cc:16:f6:ef:f8:3e:
         85:e4:95:8c:aa:c5:0a:29:1a:7e:51:50:b1:6a:57:01:2d:87:
         de:92:75:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPjMY0g4rnozFi92Yfok6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMWIwOTcxMGFjZGI3MjA4NmQ2NThlOTBkOGYwMjVmYTZh
MTExYjEwHhcNMjYwNDE3MDcwMTAwWhcNMjYwNDE4MDcwMTAwWjAzMTEwLwYDVQQD
EyhjOTUzMmViNTMyZjY1YzNkMjQ4NGRhMzE5ZmRlNzRmNTRhYTU2Y2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FvcPkSTf/XN6IEnUYIqmtVmMoRD
v+54GRSAUek/1f2IiA4j9DjHwMA1hy43w/Dfa1iCfqq+seu9vbmg7Uq7GfdvZE2U
eX/hNITCIoUAFM9hJwTAFKqKK9CwTNTf65FkRELdBnrlctbFa299yJzbxf0GwmI3
lfh4i69GW0OHUxVbf8cOKacFobFwYlmE8kD9rGbjX/QIbtJOY12MVA11e0KL7Rpw
R3pyYpKRQzNe9Id1TryiDupXUZkqeERoz6fVbs8FfsETXxS8NzcpXk4Q87gn4nOZ
KB7vkJdHpqZYDWryO+VK3YBRVM76f8GYcqQmslsZ20Iw+ubAUmAfGwZahQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMlTLrUy9lw9JITaMZ/edPVKpWz+MB8GA1UdIwQY
MBaAFBEbCXEKzbcghtZY6Q2PAl+moRGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjkt
N2JmMDM1NmE2YmFiLzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8xY2QxMzQtNGQwMy00ZmNkLWIyMjktN2JmMDM1NmE2YmFi
LzEvRVJzSmNRck50eUNHMWxqcERZOENYNmFoRWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2R/BTrh
Qtzudk1m4GMshAhFwgs1PYqTA7bdvgnoRE2WyvkC09pyw3PSFlZ90Wo20NQk+Ule
MmCk6RnYL7NtAGd+VnzBTKJMYuQXgmfa0/AopXof8QBPX+AXjN4FqWyWpxXBCHEJ
1KU0yIaQVlz959cyjvlTc+EojFPhUu+GgOpN356KeK0re5sXk9SgecwyiCEBVqfk
GGm+zlEVr4+yQuyh3sZr2GEYWU2uINRm72I1Eg83tRlkxh935zM35FEx2Rm0rfQu
t6ti17y7CQPZ9g0iQT07RlvRFUBkmYFHlbetoTlRzBb27/g+heSVjKrFCikaflFQ
sWpXAS2H3pJ1Mg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:53 2026 by rpki-client