Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          /BpgCayKk7DGUVtNo0soaIyhtQcLyU0Hu5xVNyzoqAI=
Subject key identifier:   CB:44:9E:51:47:5E:47:F7:6F:DF:D6:0C:8E:65:08:72:C3:A6:5D:DA
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       019CAA21FF29BB66EBE12AAF0B469003BAE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          07BB
Signing time:             Sun 01 Mar 2026 16:01:20 +0000
Manifest this update:     Sun 01 Mar 2026 16:01:20 +0000
Manifest next update:     Mon 02 Mar 2026 16:01:20 +0000
Files and hashes:         1: 6RGW9FHC1xpyf6wgXfv_Eu_s6uU.roa (hash: 6vhjvZr3Kb+sylEayrM6AVgYe9A0exMXL5Q6uA9ZfJU=)
                          2: 6W3PFSYqXuu3DVpLrOTVZguZ2N0.roa (hash: bgN/Wif1RDjqgtzhUIXOtx86/S164vOmljhvPEsaCa4=)
                          3: 79S97sh77TUY_ErUyiX3p8rKe3w.roa (hash: LEhB0OtYTizcbBHkerXjTJ1lt8uSH6AUULDTX50iSM0=)
                          4: 7WCK9V1amL7VfvRQvmwfuLID77I.roa (hash: dSLJNNz7Yonxdt/qjaMstXNcLqH1Gi7MhACN+SvlT3Y=)
                          5: 9YMsNSl9uqbLQlhpMDCKts3pRbc.roa (hash: WgiyYz+dNNGuW/Et9LEhQWTMq/N/0yU1nPwcWEo5s64=)
                          6: A0BdIUg-tIB8xYgoBPkgZQEJZFM.roa (hash: vAFPQ7/zBwmd5lfN1DQPlwlOlVHsgUGVyWdvSmPAIkg=)
                          7: CBS2cYZH0a1-EtTZe3IWAD6c-2g.roa (hash: aNpmaLz6DM8TbSPf9PeLDC2ZVCw6M60lBO00KmbqUys=)
                          8: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: LI2aAlG1YonwbXfUWYCly7aZF3Fn7xBiS4TVf+LVuj8=)
                          9: I_5lxzMWxk5Aopl0hXQj_WKgEyA.roa (hash: /gE5K6NhC2k5CWVY4m5yP/kklyPqncoXj/AGRLvfkHQ=)
                          10: KGz7A7bTE88v8gErdsKgHCUC2LI.roa (hash: +mLqNnbl4FhK35X4O0rVUkitsCTraJ0mv2xz6w3UBIQ=)
                          11: MbRan6OrTVgecR6FfgRRIDuxgPc.roa (hash: SlpR7LyUtBASFkbDWJJxH3uK9Z/DaHWNWAtgRxEYHi4=)
                          12: OESYnQ8L_1H2AfEG7VV509kAgPE.roa (hash: Jctl083IIiJh6niNEBCQQuzky5TCpmOUPtj0HXtKO5Q=)
                          13: QqeydQshq5wVgPFowaH8kSdulJE.roa (hash: yQTQIjYLygA4Mrk/w3xFYjqE+rMboxec1iCZjnDNzKc=)
                          14: R_cuxg4z9NiO0rwHOrSqofSaMMc.roa (hash: V1go2+jNZlz4sljszm+EGOwj91XAdgeWv3whnnNSU5k=)
                          15: TwHtCTFt01-DoJiRnIPLzu06kO0.roa (hash: DqST1n24LVvhbJfMGakXbLktGwWUU3tf5w7i5S+8aD4=)
                          16: dizEX_iSYkDBVGUBivY0AsRq6PU.roa (hash: NkNfYdAc55dCA+dXU/xichk+dhBdBm/+aZDwkRCWs98=)
                          17: es_0iYTgC8KGf6QVaGhwXVTE_MQ.roa (hash: w6H/ZpVUIMoSl/7OP/vOqQcfBns9Oiq1ViSqyP3gYPM=)
                          18: jZrRxArAkWsgIRXLzqXFJ2uzg1M.roa (hash: oQRjlCXEvb91V7QDXOTq59uWKq0mZjS4woUXREc+3oY=)
                          19: m610dYqPqVXc5d6IQHjpHxMDUxc.roa (hash: hsCwEpAHBEjFxhnKmMwXYFpcZTvB5BeuJTVur+XGJvU=)
                          20: oznJuafsTGfx9j9j8MwnyxajHW0.roa (hash: 18/YtfjRCiI3S6huzdUp+fE0IIQuW88lNLK/i9pNSN8=)
                          21: qyCWhbOhULfLzLZlBBISM6tI6z0.roa (hash: YuMDQ0jy8cgbhAO6dwPsIKGTqd+ofSih6mYOW6qX+1A=)
                          22: remQI3vXY-CwDxRRv5Pj5NwA140.roa (hash: LH+kG9be4lJ6veGuO7nsYdrnjEkQS1MlDMWHJ7NAdZg=)
                          23: u0aooYk6vpPtd7DAaqhA5TCwqL8.roa (hash: jrpZh1EcyK9ynVBjFBbvxMjSEhlJo0Ta8D6EcHF8U7U=)
                          24: vit3FI0YIMfjDCvKP-WGp2Vf7C8.roa (hash: 4CxQdDOXcl5lKbs0eX2DlAuxNnLP4vZ7ksKuT8r2+Oc=)
                          25: wT4zBHWAKZXvAcKkyIUr6uRAbbA.roa (hash: ib0iHP7uE5Y5OML0Ye43R9IPy5aU8jLszDsAo4o8MLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 09:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:ff:29:bb:66:eb:e1:2a:af:0b:46:90:03:ba:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Mar  1 16:01:20 2026 GMT
            Not After : Mar  2 16:01:20 2026 GMT
        Subject: CN=cb449e51475e47f76fdfd60c8e650872c3a65dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:45:db:f0:72:7d:05:b7:06:e2:81:5c:ad:
                    e3:ee:a7:50:9a:fa:94:ad:25:1c:cd:9e:5b:42:ee:
                    bd:91:39:f3:e9:5e:ba:48:4c:ed:62:72:f7:7f:a8:
                    ac:45:15:ec:01:04:7d:a1:64:8f:98:01:0c:ef:05:
                    5c:e9:18:4b:0c:7e:a0:3c:db:cc:f9:c5:20:d6:3a:
                    29:af:3e:66:87:77:60:60:8a:5e:c4:a9:5d:9c:6f:
                    f5:94:c4:15:8c:22:1c:53:a0:4c:62:dc:6d:6b:74:
                    f0:3e:be:dc:9e:0a:52:00:a4:ce:ed:5f:5c:68:25:
                    f4:86:dc:ce:e5:f0:be:24:30:3d:d5:01:7d:a7:e9:
                    f1:5e:aa:7d:51:b8:2b:4a:65:be:c4:fa:07:74:12:
                    86:0b:77:6d:38:42:ca:0d:fa:3f:54:03:6a:e6:a2:
                    27:1a:59:b2:a9:d6:df:94:aa:ef:75:50:9f:2e:dd:
                    a5:6a:bb:ef:2f:b6:62:37:13:0d:e5:2f:1b:b2:f4:
                    9c:6d:c0:12:10:f3:b8:f7:3c:87:2a:20:94:6d:6f:
                    66:71:74:a8:dc:4d:f5:d7:0f:30:50:4b:b1:d8:ab:
                    33:ad:06:ab:24:09:4d:af:b1:98:12:89:a8:b1:11:
                    e9:04:eb:29:bf:19:d5:4e:ec:1f:1d:12:bc:51:48:
                    fb:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:44:9E:51:47:5E:47:F7:6F:DF:D6:0C:8E:65:08:72:C3:A6:5D:DA
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:cb:08:27:65:b0:ab:63:29:e2:56:5c:16:67:17:d8:99:96:
         98:45:e4:f9:c9:2c:c2:72:69:47:4c:94:a0:d5:1a:85:38:c5:
         67:ca:2c:7b:ef:bc:f9:16:3f:44:7d:b0:77:97:05:0d:ac:a3:
         8e:8b:86:80:01:7c:fa:49:bc:61:46:41:db:93:d7:2f:f1:9b:
         ed:e4:36:e5:57:c5:34:6c:41:4b:35:5c:ea:1b:b2:28:d6:c6:
         65:f7:c4:41:d5:87:37:f8:58:f5:ee:71:ae:f1:1d:5a:e3:86:
         61:34:32:8b:0f:e3:94:52:b3:c7:ce:8f:97:6a:c0:92:c0:69:
         99:38:d9:d8:73:48:59:83:0a:2a:da:c6:e5:ab:85:48:bf:6c:
         ba:9d:01:8c:9c:36:0b:3b:ac:33:8b:0f:d7:7e:8d:e8:52:12:
         af:58:b0:44:1f:ab:27:e9:8b:40:77:9d:78:cd:be:6f:73:87:
         b0:a3:67:56:49:e9:7e:17:65:f9:d0:b1:d8:36:35:c5:be:bc:
         9f:2d:30:c2:82:93:40:ac:d7:a9:00:b7:b4:fa:a9:ef:8d:5c:
         9a:3d:83:0d:de:de:60:39:76:9d:de:73:91:96:85:92:70:d8:
         e7:c7:70:b2:8b:e5:dc:bd:35:52:8c:ee:25:2a:fc:be:fb:73:
         1d:40:72:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIf8pu2br4SqvC0aQA7rkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjYwMzAxMTYwMTIwWhcNMjYwMzAyMTYwMTIwWjAzMTEwLwYDVQQD
EyhjYjQ0OWU1MTQ3NWU0N2Y3NmZkZmQ2MGM4ZTY1MDg3MmMzYTY1ZGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkJF2/ByfQW3BuKBXK3j7qdQmvqU
rSUczZ5bQu69kTnz6V66SEztYnL3f6isRRXsAQR9oWSPmAEM7wVc6RhLDH6gPNvM
+cUg1joprz5mh3dgYIpexKldnG/1lMQVjCIcU6BMYtxta3TwPr7cngpSAKTO7V9c
aCX0htzO5fC+JDA91QF9p+nxXqp9UbgrSmW+xPoHdBKGC3dtOELKDfo/VANq5qIn
GlmyqdbflKrvdVCfLt2larvvL7ZiNxMN5S8bsvScbcASEPO49zyHKiCUbW9mcXSo
3E311w8wUEux2KszrQarJAlNr7GYEomosRHpBOspvxnVTuwfHRK8UUj7iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtEnlFHXkf3b9/WDI5lCHLDpl3aMB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8sIJ2Ww
q2Mp4lZcFmcX2JmWmEXk+ckswnJpR0yUoNUahTjFZ8ose++8+RY/RH2wd5cFDayj
jouGgAF8+km8YUZB25PXL/Gb7eQ25VfFNGxBSzVc6huyKNbGZffEQdWHN/hY9e5x
rvEdWuOGYTQyiw/jlFKzx86Pl2rAksBpmTjZ2HNIWYMKKtrG5auFSL9sup0BjJw2
CzusM4sP136N6FISr1iwRB+rJ+mLQHedeM2+b3OHsKNnVknpfhdl+dCx2DY1xb68
ny0wwoKTQKzXqQC3tPqp741cmj2DDd7eYDl2nd5zkZaFknDY58dwsovl3L01Uozu
JSr8vvtzHUByMQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:54 2026 by rpki-client