Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
File:                     eRP4wTuoKQ9g2mO6iek1snWJOts.mft (raw, json)
Hash identifier:          Yc6pJzz+DBpyTxn4TkuW/e0Nhw9OIXiDTRDw4hhvhN8=
Subject key identifier:   0D:4E:9D:9F:36:CA:CC:70:54:42:AC:4C:BA:14:02:30:EC:5F:BD:77
Authority key identifier: 79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB
Certificate issuer:       /CN=7913f8c13ba8290f60da63ba89e935b275893adb
Certificate serial:       019EBFC86BD536D5007A1F05DE3B9D76E196
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
Manifest number:          0801
Signing time:             Sat 13 Jun 2026 07:00:43 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:43 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:43 +0000
Files and hashes:         1: eRP4wTuoKQ9g2mO6iek1snWJOts.crl (hash: fRB8KcRp0Dpbfp8FnQ8TdyVv01twEn6ljbuKXWu5ii8=)
                          2: qXkw0QfrHcnGQSy5HSSgU96t89k.roa (hash: 0wRXU7/knPguYz2PH2GBKtyb9XdxaFy8E6VNNqtVEPw=)
                          3: tF9YKOONiKk1CscCM98zlB8EJLs.roa (hash: 6wUmwqGkAOvn8GZ/bao7dMUtyUHLPWG5h6PlJNzejcg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:6b:d5:36:d5:00:7a:1f:05:de:3b:9d:76:e1:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7913f8c13ba8290f60da63ba89e935b275893adb
        Validity
            Not Before: Jun 13 07:00:43 2026 GMT
            Not After : Jun 14 07:00:43 2026 GMT
        Subject: CN=0d4e9d9f36cacc705442ac4cba140230ec5fbd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d6:94:1b:7d:93:e5:17:7a:4b:e3:a4:9c:df:
                    90:93:4b:89:57:b7:99:e3:c7:20:eb:df:25:0e:89:
                    92:2f:c0:e0:2d:f2:33:5b:61:5f:bd:bb:50:dd:83:
                    f7:1f:8d:ec:85:be:b4:82:fa:ee:bf:50:fe:01:5f:
                    79:a7:08:ee:00:12:82:e7:5c:2b:7e:c0:68:a3:91:
                    b0:09:85:ea:20:e6:f6:92:61:d7:b9:55:42:25:fb:
                    01:d8:e3:e1:a5:60:df:32:e9:77:64:cf:5c:63:3c:
                    ef:96:75:b4:ba:b1:41:e2:0b:0b:04:c2:b2:4d:a0:
                    8c:b1:74:03:34:91:92:b8:3f:8a:ab:39:57:1c:d3:
                    33:4f:3f:08:a0:45:77:f9:88:8e:d8:b7:2e:3e:cc:
                    4b:e8:75:6d:b8:fe:ff:78:3a:9c:33:33:a7:44:82:
                    ea:22:a1:b4:2a:e2:a3:5a:90:8e:9b:52:38:05:c1:
                    c8:10:68:f7:65:74:4b:54:f8:f5:ac:46:d4:06:60:
                    29:3d:17:6f:d7:5c:40:6a:9e:19:a5:dd:9d:27:3c:
                    3b:8e:23:fa:bd:dc:34:99:5e:b9:e5:a3:28:d5:64:
                    32:e3:a4:33:92:01:52:6d:2e:71:b2:9d:10:ba:c1:
                    c7:15:49:b5:0e:c2:25:2b:a9:5a:aa:97:0f:69:c2:
                    86:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4E:9D:9F:36:CA:CC:70:54:42:AC:4C:BA:14:02:30:EC:5F:BD:77
            X509v3 Authority Key Identifier:
                keyid:79:13:F8:C1:3B:A8:29:0F:60:DA:63:BA:89:E9:35:B2:75:89:3A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRP4wTuoKQ9g2mO6iek1snWJOts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ce1c99-0abe-4277-aca2-fe1cf308a008/1/eRP4wTuoKQ9g2mO6iek1snWJOts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:6b:44:48:0a:07:61:cf:1f:0f:ee:0a:de:01:75:c8:7b:b2:
         1d:ea:67:56:35:42:f8:60:6c:a4:5c:76:e3:74:55:46:5f:24:
         83:ed:d9:ab:eb:a1:fd:eb:b5:84:74:9d:c5:78:98:71:56:67:
         66:ad:0e:77:05:c7:d7:e8:e8:f5:0d:e6:ab:9d:4d:8e:97:e4:
         78:22:8b:75:93:b7:da:61:f2:33:61:d8:97:02:36:f7:30:32:
         59:e5:e1:f6:9d:15:d1:d8:e5:8c:ef:16:4f:0e:33:8e:b6:a9:
         a0:65:57:7b:f9:7f:0f:dc:2e:bc:7e:1a:1c:f8:fd:25:51:e5:
         bf:bb:d4:64:ca:4c:67:a5:6a:8f:18:0c:42:18:2d:d6:bb:1f:
         da:4a:e2:04:4a:44:90:a1:5b:d0:4f:d9:b8:86:ab:8e:c4:04:
         4c:6c:bb:da:b2:9e:2a:ab:32:26:dc:6a:e9:5e:38:e0:1f:9a:
         31:7e:4d:08:97:ce:c8:2f:95:42:66:d3:da:97:a0:3f:25:c8:
         48:ea:57:84:93:a7:ac:d8:16:ef:e2:01:e7:81:a7:a6:06:c0:
         dd:41:d4:95:cb:62:22:65:f5:56:50:1c:a0:0f:68:ac:b1:23:
         78:b1:b2:13:ee:0a:5f:c2:16:99:44:24:fe:ac:fb:af:f3:e8:
         22:e1:c4:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yGvVNtUAeh8F3judduGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTNmOGMxM2JhODI5MGY2MGRhNjNiYTg5ZTkzNWIyNzU4
OTNhZGIwHhcNMjYwNjEzMDcwMDQzWhcNMjYwNjE0MDcwMDQzWjAzMTEwLwYDVQQD
EygwZDRlOWQ5ZjM2Y2FjYzcwNTQ0MmFjNGNiYTE0MDIzMGVjNWZiZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NaUG32T5Rd6S+OknN+Qk0uJV7eZ
48cg698lDomSL8DgLfIzW2FfvbtQ3YP3H43shb60gvruv1D+AV95pwjuABKC51wr
fsBoo5GwCYXqIOb2kmHXuVVCJfsB2OPhpWDfMul3ZM9cYzzvlnW0urFB4gsLBMKy
TaCMsXQDNJGSuD+KqzlXHNMzTz8IoEV3+YiO2LcuPsxL6HVtuP7/eDqcMzOnRILq
IqG0KuKjWpCOm1I4BcHIEGj3ZXRLVPj1rEbUBmApPRdv11xAap4Zpd2dJzw7jiP6
vdw0mV655aMo1WQy46QzkgFSbS5xsp0QusHHFUm1DsIlK6laqpcPacKG/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1OnZ82ysxwVEKsTLoUAjDsX713MB8GA1UdIwQY
MBaAFHkT+ME7qCkPYNpjuonpNbJ1iTrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJQNHdUdW9LUTlnMm1PNmllazFzbldKT3RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jZTFjOTktMGFiZS00Mjc3LWFjYTIt
ZmUxY2YzMDhhMDA4LzEvZVJQNHdUdW9LUTlnMm1PNmllazFzbldKT3RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9jZTFjOTktMGFiZS00Mjc3LWFjYTItZmUxY2YzMDhhMDA4
LzEvZVJQNHdUdW9LUTlnMm1PNmllazFzbldKT3RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWtESAoH
Yc8fD+4K3gF1yHuyHepnVjVC+GBspFx243RVRl8kg+3Zq+uh/eu1hHSdxXiYcVZn
Zq0OdwXH1+jo9Q3mq51NjpfkeCKLdZO32mHyM2HYlwI29zAyWeXh9p0V0djljO8W
Tw4zjrapoGVXe/l/D9wuvH4aHPj9JVHlv7vUZMpMZ6VqjxgMQhgt1rsf2kriBEpE
kKFb0E/ZuIarjsQETGy72rKeKqsyJtxq6V444B+aMX5NCJfOyC+VQmbT2pegPyXI
SOpXhJOnrNgW7+IB54GnpgbA3UHUlctiImX1VlAcoA9orLEjeLGyE+4KX8IWmUQk
/qz7r/PoIuHELQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:57:13 2026 by rpki-client