Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File:                     Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier:          e83RRAGXyoE948zAvlpVQgiB6BOxUtrAHJP0HKbT8Xk=
Subject key identifier:   05:05:D7:FF:95:BD:C2:69:3E:15:9A:8B:C0:E5:8A:AF:B6:D4:E7:CE
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer:       /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial:       019EBF912D93F4E686CF8DCB70A0B4DBF292
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number:          164B
Signing time:             Sat 13 Jun 2026 06:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:23 +0000
Files and hashes:         1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: gFUuJI4bciSmQ1Irphe85ximcYNDtXP+8wPM3jqMSIE=)
                          2: K3mAv4ENjdFvUb1ySwEcIqWxG_8.roa (hash: TrWxwfXOHY5NB4elTvUPByLYubX+YUC3/aQn4/n7h2A=)
                          3: UNr1JSsPVlDmc77n-IlJ4J8D-J0.roa (hash: cNdO2qWipe5XDjbIGYIIO5If+75z//dCQTdfnQ/FOsg=)
                          4: jHQC9ewMgHDq31w-y2B2QE0UeQ0.roa (hash: lbUdkuZKAp7sLgTfOG04La55MW6JLwB4IkggCwLUq1g=)
                          5: vv3CReJV7LkCDD7lq-2ePD1bHSw.roa (hash: vcOUmLLDOnBolotJp01JH8ANPyx16KLiqHkliISm6TA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:2d:93:f4:e6:86:cf:8d:cb:70:a0:b4:db:f2:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
        Validity
            Not Before: Jun 13 06:00:23 2026 GMT
            Not After : Jun 14 06:00:23 2026 GMT
        Subject: CN=0505d7ff95bdc2693e159a8bc0e58aafb6d4e7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c5:e4:02:82:ea:5c:64:be:2f:9d:3f:e5:34:
                    8f:5d:0d:c3:2e:dd:58:41:fa:ae:21:3b:52:a9:42:
                    21:d1:1c:a7:b3:5b:ad:70:e5:b6:80:74:2a:59:8e:
                    2e:3b:9d:17:35:cc:e8:6d:62:f7:a2:c5:d8:e2:91:
                    30:2e:a1:ed:de:c3:6e:42:4f:c9:0a:2c:1a:78:41:
                    2d:08:f3:c3:9e:41:27:31:4e:20:d0:78:23:43:c0:
                    4f:cf:a5:b0:05:f9:97:74:28:ae:c2:45:a4:47:5b:
                    82:69:6c:0a:da:c7:ce:54:d9:3d:2b:52:8e:ed:97:
                    48:7a:d8:37:6a:9c:97:a6:e2:78:e6:33:57:20:8a:
                    c8:ef:4f:7d:1b:2b:bb:79:35:02:e1:6e:1d:af:03:
                    0c:09:25:b9:1f:86:b2:59:de:b9:8d:6f:0d:5b:af:
                    54:e7:32:fd:a2:c9:6b:a3:2f:20:fb:4b:43:a9:49:
                    86:8c:2b:83:a5:58:29:04:39:9d:38:03:8e:cc:ce:
                    73:59:73:05:e2:3a:f0:f4:2a:57:7d:12:43:b4:77:
                    25:ff:c4:82:f5:71:f5:1d:94:a3:da:b4:2c:ae:7e:
                    25:cc:66:80:c1:0e:84:91:0e:eb:81:57:8e:7f:04:
                    09:fd:43:d0:9b:bf:a9:98:0a:27:a6:f0:20:65:de:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:05:D7:FF:95:BD:C2:69:3E:15:9A:8B:C0:E5:8A:AF:B6:D4:E7:CE
            X509v3 Authority Key Identifier:
                keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c1:61:05:03:30:63:9d:62:3c:09:40:50:a7:49:31:23:1f:
         9e:1a:6b:2f:ce:87:be:b0:d3:fa:0f:91:61:75:8e:ee:a6:2f:
         f9:23:d5:39:df:6a:db:e6:5c:9d:ca:52:7c:bc:0b:0a:06:87:
         ac:ad:14:8e:04:78:7c:8d:08:6a:dd:4f:3f:db:2b:66:1b:cd:
         64:2b:4f:5b:ef:c3:ca:60:bb:ab:a1:d5:d1:42:c6:4c:a6:55:
         b4:49:c8:7c:eb:ef:66:35:40:34:1e:d7:b5:53:59:d3:68:bf:
         41:ab:11:c6:27:3d:6f:bc:5f:fa:4b:9a:53:ed:a2:5c:3d:50:
         d9:ae:08:4f:60:c9:d9:d0:76:6d:1d:50:0e:f6:fe:00:0c:0f:
         cf:c3:fe:cb:14:e8:46:e4:aa:44:ee:25:80:55:cc:4c:78:3e:
         fc:2e:d0:42:97:c7:96:9e:71:c1:87:3e:e7:e4:a4:85:d9:6b:
         fb:c4:55:19:36:78:6d:97:3d:6a:21:57:24:49:ee:1e:02:f0:
         d7:c3:88:e9:80:ab:06:de:e2:11:32:a7:31:c7:9d:7c:4a:51:
         b5:4f:da:fa:e0:2c:c5:eb:fd:3c:82:ee:0f:13:3b:bd:e4:bb:
         13:3a:47:57:9d:f3:8f:ea:6d:e1:af:8b:78:d8:e0:18:e8:07:
         46:b2:53:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:33:13 2026 by rpki-client