Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          47ZiYmUMrsgVuHwH5uUTdnSTexxyuCnthd1OB1YiWwQ=
Subject key identifier:   34:9B:A3:D4:66:5C:25:D4:A3:7D:13:12:6B:18:A4:73:99:40:7E:6F
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       019FA74FA15997724F77CD0733D5F9B370FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          0953
Signing time:             Tue 28 Jul 2026 06:00:41 +0000
Manifest this update:     Tue 28 Jul 2026 06:00:41 +0000
Manifest next update:     Wed 29 Jul 2026 06:00:41 +0000
Files and hashes:         1: 6RGW9FHC1xpyf6wgXfv_Eu_s6uU.roa (hash: 6vhjvZr3Kb+sylEayrM6AVgYe9A0exMXL5Q6uA9ZfJU=)
                          2: 79S97sh77TUY_ErUyiX3p8rKe3w.roa (hash: LEhB0OtYTizcbBHkerXjTJ1lt8uSH6AUULDTX50iSM0=)
                          3: 7WCK9V1amL7VfvRQvmwfuLID77I.roa (hash: dSLJNNz7Yonxdt/qjaMstXNcLqH1Gi7MhACN+SvlT3Y=)
                          4: 8dN_y6FCHmSwh9zyOdGKc-Xa3Xc.roa (hash: AzOTxMcQLVwli/cilDsxwDkXYXmhghgIjsMcqtIyLUc=)
                          5: 9YMsNSl9uqbLQlhpMDCKts3pRbc.roa (hash: WgiyYz+dNNGuW/Et9LEhQWTMq/N/0yU1nPwcWEo5s64=)
                          6: A0BdIUg-tIB8xYgoBPkgZQEJZFM.roa (hash: vAFPQ7/zBwmd5lfN1DQPlwlOlVHsgUGVyWdvSmPAIkg=)
                          7: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: G5Y80rBItdWwq/X8kLrYhcG0nWydpvjcWKhSMzmQxp8=)
                          8: I_5lxzMWxk5Aopl0hXQj_WKgEyA.roa (hash: /gE5K6NhC2k5CWVY4m5yP/kklyPqncoXj/AGRLvfkHQ=)
                          9: KGz7A7bTE88v8gErdsKgHCUC2LI.roa (hash: +mLqNnbl4FhK35X4O0rVUkitsCTraJ0mv2xz6w3UBIQ=)
                          10: MbRan6OrTVgecR6FfgRRIDuxgPc.roa (hash: SlpR7LyUtBASFkbDWJJxH3uK9Z/DaHWNWAtgRxEYHi4=)
                          11: OESYnQ8L_1H2AfEG7VV509kAgPE.roa (hash: Jctl083IIiJh6niNEBCQQuzky5TCpmOUPtj0HXtKO5Q=)
                          12: QqeydQshq5wVgPFowaH8kSdulJE.roa (hash: yQTQIjYLygA4Mrk/w3xFYjqE+rMboxec1iCZjnDNzKc=)
                          13: R_cuxg4z9NiO0rwHOrSqofSaMMc.roa (hash: V1go2+jNZlz4sljszm+EGOwj91XAdgeWv3whnnNSU5k=)
                          14: TwHtCTFt01-DoJiRnIPLzu06kO0.roa (hash: DqST1n24LVvhbJfMGakXbLktGwWUU3tf5w7i5S+8aD4=)
                          15: UZKdyiYuEJgK1CXf4lhc7ZkfKPU.roa (hash: 2bdOr/wIOcULD+99fYfl0oPnDBufy+6gGb+f1589cJ0=)
                          16: YaXl0EyGIRJtUwVXEpmTyj4RbIM.roa (hash: UARP9ccmGAz/IxujWESaJ+gM6YXvbQBi7CqndR5OWns=)
                          17: Zi0NjMEtFw5voPHGZoxrA-l2oWA.roa (hash: rEeauSC/jqbljS/hWUZuNo4LDWDnXsLsoGbI9r4RZdo=)
                          18: clZodLAFWFzf94TZLnuJ0a-wAJo.asa (hash: VVttTdxIL6mPE72qJiimWHq833VONqQxL8m8fNbx8sY=)
                          19: dizEX_iSYkDBVGUBivY0AsRq6PU.roa (hash: NkNfYdAc55dCA+dXU/xichk+dhBdBm/+aZDwkRCWs98=)
                          20: es_0iYTgC8KGf6QVaGhwXVTE_MQ.roa (hash: w6H/ZpVUIMoSl/7OP/vOqQcfBns9Oiq1ViSqyP3gYPM=)
                          21: l3-NhbJzA_XVE-TmzzNypY-VV5c.roa (hash: ZUBG94tef4wB8hBuRGaTGpnWf6HCKUPgbpaFu4tpF7Q=)
                          22: lakZTlHlef4ahy1QkuLluXAniGU.roa (hash: UmkeThGihGm0QDSjkaY2uV8rXNRfz2AB7rrYZbO/0W8=)
                          23: m610dYqPqVXc5d6IQHjpHxMDUxc.roa (hash: hsCwEpAHBEjFxhnKmMwXYFpcZTvB5BeuJTVur+XGJvU=)
                          24: neYIYJF2wg6OgH6kUj7IKfFilY8.roa (hash: ry5xgcA92qzlZuKehBUAKzpu87W5MD4AyXHq3MrCGuk=)
                          25: remQI3vXY-CwDxRRv5Pj5NwA140.roa (hash: LH+kG9be4lJ6veGuO7nsYdrnjEkQS1MlDMWHJ7NAdZg=)
                          26: u0aooYk6vpPtd7DAaqhA5TCwqL8.roa (hash: jrpZh1EcyK9ynVBjFBbvxMjSEhlJo0Ta8D6EcHF8U7U=)
                          27: vit3FI0YIMfjDCvKP-WGp2Vf7C8.roa (hash: 4CxQdDOXcl5lKbs0eX2DlAuxNnLP4vZ7ksKuT8r2+Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:4f:a1:59:97:72:4f:77:cd:07:33:d5:f9:b3:70:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Jul 28 06:00:41 2026 GMT
            Not After : Jul 29 06:00:41 2026 GMT
        Subject: CN=349ba3d4665c25d4a37d13126b18a47399407e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:62:a0:c0:3e:63:c0:f2:fa:07:0a:35:c6:
                    d3:46:56:5b:f8:9a:99:7c:94:80:89:61:f5:d1:a9:
                    9a:ab:13:35:07:4b:51:e2:74:44:8c:4f:dd:70:aa:
                    67:0c:56:c8:9d:47:f7:08:10:5b:f3:b1:bb:8d:27:
                    cc:a7:0a:d3:1a:0e:ad:63:b9:2e:3b:5d:a7:a1:52:
                    ad:5f:d8:2e:5c:59:ab:25:dd:62:1b:aa:d1:ed:c1:
                    a1:17:32:67:8d:d5:ce:2a:9b:48:7b:ce:b9:d1:f2:
                    36:7d:7b:79:65:64:0f:65:f0:b1:4d:4b:0f:70:ba:
                    65:61:b9:92:7a:dc:9a:f2:69:62:ea:72:15:bd:ec:
                    37:d4:5f:2c:38:e9:c0:45:9b:db:21:f4:54:e0:2f:
                    d4:01:f5:43:b9:56:ab:f1:fa:1b:80:3b:18:f7:b9:
                    47:62:bb:eb:52:3e:b9:98:aa:06:8d:70:ef:b9:60:
                    4c:eb:b3:de:cc:20:26:9c:d3:fb:15:8c:7c:83:2a:
                    cf:34:eb:65:24:38:25:11:8e:c6:f7:f8:d8:76:17:
                    48:86:47:b6:9e:6e:80:f1:d1:f2:d5:33:43:b8:3b:
                    82:b2:16:a3:ae:a6:f1:0f:64:95:83:45:55:7f:8b:
                    38:8c:89:98:e3:48:0e:61:ba:78:32:d5:22:47:6a:
                    56:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9B:A3:D4:66:5C:25:D4:A3:7D:13:12:6B:18:A4:73:99:40:7E:6F
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:fe:12:ed:b7:dd:d0:ac:33:47:d1:4e:ff:be:7c:0b:ff:4e:
         97:f6:49:41:4c:b5:4d:ed:63:a0:af:6a:1b:d8:90:81:ff:80:
         cb:5c:8a:8b:6a:ae:ae:45:31:44:8f:96:bc:4b:8c:a3:b1:79:
         8b:57:fd:9e:da:08:ee:f7:a5:54:2e:67:11:a4:ad:30:e6:76:
         a3:81:d9:d6:e0:c1:b6:18:8c:97:5e:e2:ac:e7:8f:82:ea:12:
         ea:bb:d1:33:be:be:ab:89:37:c6:47:1a:e5:ad:54:35:cb:fb:
         7b:a8:9a:77:41:1d:13:d3:fd:56:5d:0b:6d:58:53:dc:d7:d4:
         c8:ee:cb:a4:30:08:fc:44:d4:ef:fe:f4:79:ab:63:46:1e:55:
         18:1e:0a:b1:87:02:93:eb:ab:a8:6d:4d:3e:61:11:2f:67:56:
         b0:1e:2a:a5:cf:28:77:73:92:f1:1e:f2:c3:9d:cc:0b:37:98:
         39:5f:f0:7d:c9:00:7d:87:d1:15:ff:ec:ee:5e:e4:9b:3b:35:
         97:42:45:90:8b:d1:96:ad:65:7f:6e:18:2f:b4:0b:ae:93:bf:
         ba:91:c9:65:df:78:bb:ac:3b:a3:de:60:32:66:d1:bc:f8:11:
         3a:d3:96:5f:93:24:86:f2:f0:28:51:93:e1:ea:28:0d:b2:37:
         70:54:6f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:48:54 2026 by rpki-client