Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          jXz/6WwInGv/561rYQIyoB1hl7Xtj6L8jYG9m+TLAgg=
Subject key identifier:   68:4A:59:CE:09:97:04:CE:61:F4:A4:1C:D5:AE:B0:17:53:1B:9D:19
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       019EBEB5B8F69F2B90DD43315AD9E6910991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          08D4
Signing time:             Sat 13 Jun 2026 02:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 02:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 02:00:40 +0000
Files and hashes:         1: 6RGW9FHC1xpyf6wgXfv_Eu_s6uU.roa (hash: 6vhjvZr3Kb+sylEayrM6AVgYe9A0exMXL5Q6uA9ZfJU=)
                          2: 79S97sh77TUY_ErUyiX3p8rKe3w.roa (hash: LEhB0OtYTizcbBHkerXjTJ1lt8uSH6AUULDTX50iSM0=)
                          3: 7WCK9V1amL7VfvRQvmwfuLID77I.roa (hash: dSLJNNz7Yonxdt/qjaMstXNcLqH1Gi7MhACN+SvlT3Y=)
                          4: 9YMsNSl9uqbLQlhpMDCKts3pRbc.roa (hash: WgiyYz+dNNGuW/Et9LEhQWTMq/N/0yU1nPwcWEo5s64=)
                          5: A0BdIUg-tIB8xYgoBPkgZQEJZFM.roa (hash: vAFPQ7/zBwmd5lfN1DQPlwlOlVHsgUGVyWdvSmPAIkg=)
                          6: CBS2cYZH0a1-EtTZe3IWAD6c-2g.roa (hash: aNpmaLz6DM8TbSPf9PeLDC2ZVCw6M60lBO00KmbqUys=)
                          7: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: MyX6wdHevAtVuq2Y4gbHTU8eQM3aBWGqVLVI0Vw3+aM=)
                          8: I_5lxzMWxk5Aopl0hXQj_WKgEyA.roa (hash: /gE5K6NhC2k5CWVY4m5yP/kklyPqncoXj/AGRLvfkHQ=)
                          9: KGz7A7bTE88v8gErdsKgHCUC2LI.roa (hash: +mLqNnbl4FhK35X4O0rVUkitsCTraJ0mv2xz6w3UBIQ=)
                          10: MbRan6OrTVgecR6FfgRRIDuxgPc.roa (hash: SlpR7LyUtBASFkbDWJJxH3uK9Z/DaHWNWAtgRxEYHi4=)
                          11: O3jp2k_xm9NQA8S4p0Mt-DTuuQQ.roa (hash: ddh6hceXd0gXCdLmApUTcn8W+XZEh8JEADaun9I3j7c=)
                          12: OESYnQ8L_1H2AfEG7VV509kAgPE.roa (hash: Jctl083IIiJh6niNEBCQQuzky5TCpmOUPtj0HXtKO5Q=)
                          13: QqeydQshq5wVgPFowaH8kSdulJE.roa (hash: yQTQIjYLygA4Mrk/w3xFYjqE+rMboxec1iCZjnDNzKc=)
                          14: R_cuxg4z9NiO0rwHOrSqofSaMMc.roa (hash: V1go2+jNZlz4sljszm+EGOwj91XAdgeWv3whnnNSU5k=)
                          15: TwHtCTFt01-DoJiRnIPLzu06kO0.roa (hash: DqST1n24LVvhbJfMGakXbLktGwWUU3tf5w7i5S+8aD4=)
                          16: W6jn-ALYoP-t7X7NgHuP9jq7CL0.roa (hash: 7J3TT/aBCBiCDlu/v4GnhDzbGN6I9+a7vTFrwNjsAPw=)
                          17: Zi0NjMEtFw5voPHGZoxrA-l2oWA.roa (hash: rEeauSC/jqbljS/hWUZuNo4LDWDnXsLsoGbI9r4RZdo=)
                          18: dizEX_iSYkDBVGUBivY0AsRq6PU.roa (hash: NkNfYdAc55dCA+dXU/xichk+dhBdBm/+aZDwkRCWs98=)
                          19: es_0iYTgC8KGf6QVaGhwXVTE_MQ.roa (hash: w6H/ZpVUIMoSl/7OP/vOqQcfBns9Oiq1ViSqyP3gYPM=)
                          20: l3-NhbJzA_XVE-TmzzNypY-VV5c.roa (hash: ZUBG94tef4wB8hBuRGaTGpnWf6HCKUPgbpaFu4tpF7Q=)
                          21: m610dYqPqVXc5d6IQHjpHxMDUxc.roa (hash: hsCwEpAHBEjFxhnKmMwXYFpcZTvB5BeuJTVur+XGJvU=)
                          22: oyriMRmPhdyYjCxDT9NIxMvWuOY.roa (hash: kOnKfKDkwxJm6mDlHj9TPtVRno5s/MEcPMb+lTHzVSY=)
                          23: remQI3vXY-CwDxRRv5Pj5NwA140.roa (hash: LH+kG9be4lJ6veGuO7nsYdrnjEkQS1MlDMWHJ7NAdZg=)
                          24: u0aooYk6vpPtd7DAaqhA5TCwqL8.roa (hash: jrpZh1EcyK9ynVBjFBbvxMjSEhlJo0Ta8D6EcHF8U7U=)
                          25: vit3FI0YIMfjDCvKP-WGp2Vf7C8.roa (hash: 4CxQdDOXcl5lKbs0eX2DlAuxNnLP4vZ7ksKuT8r2+Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:b5:b8:f6:9f:2b:90:dd:43:31:5a:d9:e6:91:09:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Jun 13 02:00:40 2026 GMT
            Not After : Jun 14 02:00:40 2026 GMT
        Subject: CN=684a59ce099704ce61f4a41cd5aeb017531b9d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3f:d6:fa:38:b6:d2:d9:b0:b5:2a:86:58:f8:
                    58:73:d3:f5:5a:12:13:26:bc:7b:61:71:d1:aa:1a:
                    0c:dc:f5:59:a5:cf:19:7d:5f:10:25:6c:b4:eb:f0:
                    49:42:8f:cd:ce:b6:24:e4:6f:d1:39:c8:a9:53:47:
                    a1:bf:cf:36:48:89:65:40:62:5c:4c:fd:03:0b:a3:
                    27:07:1e:06:89:26:c6:65:d4:65:54:66:db:dd:3e:
                    b0:b6:a0:3e:48:03:8b:4a:38:ff:d6:a1:c9:87:d9:
                    a6:3c:ee:6d:7c:68:71:e5:2f:d7:a2:ab:75:f7:1f:
                    9e:96:99:2f:e9:24:2d:c1:64:e3:8a:11:1a:0e:9e:
                    25:cd:a2:67:b0:58:fa:8b:6d:1b:f0:67:3e:d3:bb:
                    bd:91:fd:7e:2c:aa:dd:21:8f:25:89:ae:20:d8:d0:
                    df:06:88:45:36:c1:84:24:97:bc:6e:ee:02:38:8c:
                    d7:7d:ea:e6:a2:d9:3a:63:ee:4e:7b:f7:61:4f:28:
                    fb:75:a9:93:eb:53:a5:10:f4:0a:47:bb:00:b0:e2:
                    a4:fe:08:21:dc:67:73:0a:51:12:45:a9:5a:04:7d:
                    33:91:94:fd:1e:31:54:af:30:de:74:65:c5:d5:bf:
                    a7:a0:e3:4a:a6:a1:19:22:d4:6b:d9:c7:60:12:db:
                    42:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4A:59:CE:09:97:04:CE:61:F4:A4:1C:D5:AE:B0:17:53:1B:9D:19
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e3:65:e2:ab:80:ff:05:6f:ed:8f:88:df:bf:c8:86:8c:2e:
         1d:37:6c:9f:d0:18:19:d9:f8:d2:dc:08:a6:17:21:a5:98:9b:
         62:70:b9:45:75:c3:59:a2:49:ab:e5:4d:25:a4:0c:3f:0b:32:
         a7:7c:5b:3c:7e:39:46:26:22:9d:b2:00:b6:e7:d0:03:71:79:
         e8:3d:3d:c8:00:54:d9:bd:6f:27:60:15:3e:a8:84:58:24:79:
         fa:4e:e9:af:2b:19:2e:e3:f5:6f:03:a4:92:6c:bd:a3:12:2b:
         49:bf:4d:62:6d:78:70:0f:f7:cc:f6:aa:b4:06:34:78:de:88:
         22:31:f3:0e:85:67:1a:0c:e3:84:8e:d9:59:8b:c5:2a:e3:c2:
         cd:e8:7f:fc:05:ec:f1:af:1c:c5:ee:69:22:06:ea:4e:11:2b:
         29:98:b8:f0:9f:6b:38:a6:93:bf:c0:74:67:f3:33:b8:4f:85:
         ef:d9:66:de:45:01:c1:31:49:09:15:66:3a:e2:2b:0b:9c:f8:
         a9:58:19:cf:11:f2:07:d8:7b:8a:bd:b7:64:cd:e5:b8:ff:d4:
         77:9b:37:a3:b5:7a:30:1d:cb:c9:f2:25:aa:22:84:47:83:26:
         c9:a8:15:5a:0e:1b:96:20:c7:9a:73:af:71:8a:30:d5:5e:d9:
         79:39:c2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:12:53 2026 by rpki-client