Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          OIBF374v17Z1DJqDp2cKWYINcbCyvn0WifQBxMhmcI8=
Subject key identifier:   6F:D9:B5:10:99:20:CC:D1:82:07:0D:12:EB:95:4D:A5:3D:B7:E9:27
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       019FA93E192D479ABB5B36B114E6B2D4CF97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          0954
Signing time:             Tue 28 Jul 2026 15:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:46 +0000
Files and hashes:         1: 6RGW9FHC1xpyf6wgXfv_Eu_s6uU.roa (hash: 6vhjvZr3Kb+sylEayrM6AVgYe9A0exMXL5Q6uA9ZfJU=)
                          2: 79S97sh77TUY_ErUyiX3p8rKe3w.roa (hash: LEhB0OtYTizcbBHkerXjTJ1lt8uSH6AUULDTX50iSM0=)
                          3: 7WCK9V1amL7VfvRQvmwfuLID77I.roa (hash: dSLJNNz7Yonxdt/qjaMstXNcLqH1Gi7MhACN+SvlT3Y=)
                          4: 8dN_y6FCHmSwh9zyOdGKc-Xa3Xc.roa (hash: AzOTxMcQLVwli/cilDsxwDkXYXmhghgIjsMcqtIyLUc=)
                          5: 9YMsNSl9uqbLQlhpMDCKts3pRbc.roa (hash: WgiyYz+dNNGuW/Et9LEhQWTMq/N/0yU1nPwcWEo5s64=)
                          6: A0BdIUg-tIB8xYgoBPkgZQEJZFM.roa (hash: vAFPQ7/zBwmd5lfN1DQPlwlOlVHsgUGVyWdvSmPAIkg=)
                          7: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: Tpr72yMB2DzJJhs7oq7sRVzwyUly8myfDwVDBymmYG4=)
                          8: I_5lxzMWxk5Aopl0hXQj_WKgEyA.roa (hash: /gE5K6NhC2k5CWVY4m5yP/kklyPqncoXj/AGRLvfkHQ=)
                          9: KGz7A7bTE88v8gErdsKgHCUC2LI.roa (hash: +mLqNnbl4FhK35X4O0rVUkitsCTraJ0mv2xz6w3UBIQ=)
                          10: MbRan6OrTVgecR6FfgRRIDuxgPc.roa (hash: SlpR7LyUtBASFkbDWJJxH3uK9Z/DaHWNWAtgRxEYHi4=)
                          11: OESYnQ8L_1H2AfEG7VV509kAgPE.roa (hash: Jctl083IIiJh6niNEBCQQuzky5TCpmOUPtj0HXtKO5Q=)
                          12: QqeydQshq5wVgPFowaH8kSdulJE.roa (hash: yQTQIjYLygA4Mrk/w3xFYjqE+rMboxec1iCZjnDNzKc=)
                          13: R_cuxg4z9NiO0rwHOrSqofSaMMc.roa (hash: V1go2+jNZlz4sljszm+EGOwj91XAdgeWv3whnnNSU5k=)
                          14: TwHtCTFt01-DoJiRnIPLzu06kO0.roa (hash: DqST1n24LVvhbJfMGakXbLktGwWUU3tf5w7i5S+8aD4=)
                          15: UZKdyiYuEJgK1CXf4lhc7ZkfKPU.roa (hash: 2bdOr/wIOcULD+99fYfl0oPnDBufy+6gGb+f1589cJ0=)
                          16: YaXl0EyGIRJtUwVXEpmTyj4RbIM.roa (hash: UARP9ccmGAz/IxujWESaJ+gM6YXvbQBi7CqndR5OWns=)
                          17: Zi0NjMEtFw5voPHGZoxrA-l2oWA.roa (hash: rEeauSC/jqbljS/hWUZuNo4LDWDnXsLsoGbI9r4RZdo=)
                          18: clZodLAFWFzf94TZLnuJ0a-wAJo.asa (hash: VVttTdxIL6mPE72qJiimWHq833VONqQxL8m8fNbx8sY=)
                          19: dizEX_iSYkDBVGUBivY0AsRq6PU.roa (hash: NkNfYdAc55dCA+dXU/xichk+dhBdBm/+aZDwkRCWs98=)
                          20: es_0iYTgC8KGf6QVaGhwXVTE_MQ.roa (hash: w6H/ZpVUIMoSl/7OP/vOqQcfBns9Oiq1ViSqyP3gYPM=)
                          21: l3-NhbJzA_XVE-TmzzNypY-VV5c.roa (hash: ZUBG94tef4wB8hBuRGaTGpnWf6HCKUPgbpaFu4tpF7Q=)
                          22: lakZTlHlef4ahy1QkuLluXAniGU.roa (hash: UmkeThGihGm0QDSjkaY2uV8rXNRfz2AB7rrYZbO/0W8=)
                          23: m610dYqPqVXc5d6IQHjpHxMDUxc.roa (hash: hsCwEpAHBEjFxhnKmMwXYFpcZTvB5BeuJTVur+XGJvU=)
                          24: neYIYJF2wg6OgH6kUj7IKfFilY8.roa (hash: ry5xgcA92qzlZuKehBUAKzpu87W5MD4AyXHq3MrCGuk=)
                          25: remQI3vXY-CwDxRRv5Pj5NwA140.roa (hash: LH+kG9be4lJ6veGuO7nsYdrnjEkQS1MlDMWHJ7NAdZg=)
                          26: u0aooYk6vpPtd7DAaqhA5TCwqL8.roa (hash: jrpZh1EcyK9ynVBjFBbvxMjSEhlJo0Ta8D6EcHF8U7U=)
                          27: vit3FI0YIMfjDCvKP-WGp2Vf7C8.roa (hash: 4CxQdDOXcl5lKbs0eX2DlAuxNnLP4vZ7ksKuT8r2+Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:19:2d:47:9a:bb:5b:36:b1:14:e6:b2:d4:cf:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Jul 28 15:00:46 2026 GMT
            Not After : Jul 29 15:00:46 2026 GMT
        Subject: CN=6fd9b5109920ccd182070d12eb954da53db7e927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:39:39:51:79:10:c6:76:35:24:6b:30:5a:
                    03:00:93:df:32:e2:de:d0:50:13:9c:ea:f9:6f:58:
                    91:d5:3a:a3:fe:67:19:db:96:09:e2:d9:fb:05:cd:
                    bb:15:d1:74:73:d6:59:55:02:17:df:57:ac:f9:e1:
                    5f:ff:1b:92:f8:75:de:aa:1a:29:78:73:d4:bd:8e:
                    09:d0:18:d5:0d:7e:74:c2:77:b3:9f:7b:5e:0e:2d:
                    4c:9c:a1:55:bb:14:33:21:b5:d1:3a:77:57:e2:e6:
                    21:b4:ac:97:23:be:2e:2c:5b:ab:f6:d7:b9:16:d5:
                    78:7d:9f:20:53:69:5c:21:22:63:52:16:b6:71:2f:
                    bd:af:93:4e:dc:2a:f3:50:5d:fe:f8:d5:4a:d4:2d:
                    bb:3b:76:2e:c8:32:33:b7:d6:18:28:ce:73:3a:24:
                    23:d7:0f:64:f8:cd:2f:02:34:1c:31:9f:4c:7b:80:
                    78:d3:41:88:85:74:78:c6:d3:6f:06:1a:f8:20:76:
                    95:4a:ce:8b:d9:16:20:64:97:07:02:0e:7e:a0:31:
                    65:58:28:07:12:52:f9:42:b3:79:da:7a:2b:7e:6c:
                    5b:ad:a2:af:f4:a7:44:bc:33:89:0a:e9:91:82:0f:
                    ff:18:ff:d7:bd:b7:4d:f8:a7:86:06:57:f4:86:b7:
                    75:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D9:B5:10:99:20:CC:D1:82:07:0D:12:EB:95:4D:A5:3D:B7:E9:27
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5d:df:1e:9a:07:14:59:c6:ea:c6:b4:03:79:dd:a7:82:0e:
         55:78:8e:64:21:40:66:dc:47:0e:d6:6b:9c:a4:cb:59:ff:99:
         d8:df:9d:71:d3:87:d2:65:bf:df:a3:4f:7d:cb:c8:db:bc:81:
         7c:20:f4:3a:ee:fe:32:f7:c4:ea:47:4d:76:5a:80:21:15:b6:
         2c:9b:78:08:5a:94:59:56:a8:f0:9c:4f:59:d1:b0:42:df:0f:
         bb:51:92:21:c3:5a:90:7d:84:5e:f0:ec:45:74:e0:57:28:01:
         4a:e5:72:fd:3e:9d:51:34:46:70:3a:98:a1:4e:1e:55:aa:b4:
         5b:fc:a4:43:b7:c9:40:a3:43:3d:aa:64:43:9c:cd:bf:e5:59:
         60:7d:be:57:91:c2:0c:c9:c6:bc:e0:e8:f0:d0:ba:d0:f0:92:
         02:0c:69:8c:07:ef:bd:aa:7f:79:35:c3:e7:34:f4:ab:87:f0:
         08:f0:7d:be:50:ec:6d:65:7d:b3:99:24:bc:5b:99:0b:77:72:
         e8:d0:14:29:67:65:be:8c:53:f9:4c:54:16:a1:b5:18:16:30:
         bb:ca:35:70:e6:ab:80:76:8c:b9:04:e1:b5:1f:c1:8b:a8:14:
         58:2f:ef:dc:3d:9c:2d:88:3d:51:ac:47:b7:bf:c9:36:c3:50:
         6c:fd:47:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:32 2026 by rpki-client