Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
File:                     ERJUBMbdRy8QAe2f_fcmdirHcB0.mft (raw, json)
Hash identifier:          pdcUeXYc/zc4go7tRMvjC+f8IhZq0bWO2cTMfPK0iaI=
Subject key identifier:   3F:4A:6B:7D:78:36:0A:D7:FB:BF:4B:F5:6F:96:84:53:C8:18:EA:78
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Certificate issuer:       /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial:       019CAA217A0FF2E0DE1107868FB43D58A57F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
Manifest number:          0495
Signing time:             Sun 01 Mar 2026 16:00:46 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:46 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:46 +0000
Files and hashes:         1: 4c4lZly6HHaIn3VNqVSoI3aAMWg.roa (hash: PBhbI3oOnr9sdruKclXaXP1waBkJYiKgXCoZi2kNPsg=)
                          2: B033U8I90D9nbSqVDxG_vYMVGDE.roa (hash: RVPeY+Z8B+B/KYBUq3T2NRT96vo4mWrRs3gtPw92Sfc=)
                          3: DESLe4b52-By8QEWuPrBB3D08fA.roa (hash: Z1TnS92MbXYaGPJmmAihKiNu6ivlSoreA5OQ5gkks8I=)
                          4: ERJUBMbdRy8QAe2f_fcmdirHcB0.crl (hash: XZyYwLW8ggr17GInhEInFIA/lq2q/tdhAqJIobLDnwU=)
                          5: OgXQseKO3Ow7Mhh_xwXxqG0TMU8.roa (hash: GiPu825S6CpEgmzpgvr6bfnt5L9VQLAkTPxtvMZRAqk=)
                          6: gIV-PtLXLT4xOhl2M8ZDrRWJN2c.roa (hash: ez0j8r5ZrGXHsarz1DHJ3c6wCD32BsWkJMkUor30YR4=)
                          7: skB-Hezp9u6dMSW47ypzkcQMALM.roa (hash: 7DCWoB2xt0+UZjjo6BwRXpvUHyGYHyqHkNc8BdIa858=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:7a:0f:f2:e0:de:11:07:86:8f:b4:3d:58:a5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
        Validity
            Not Before: Mar  1 16:00:46 2026 GMT
            Not After : Mar  2 16:00:46 2026 GMT
        Subject: CN=3f4a6b7d78360ad7fbbf4bf56f968453c818ea78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:e6:f4:25:3e:ea:d4:49:f2:75:02:09:8f:
                    54:67:87:16:94:a1:df:c9:63:25:df:bd:f2:74:98:
                    5b:f4:80:5b:1d:30:76:d2:0a:a5:92:5a:8e:3c:f9:
                    a1:72:49:fa:0a:65:4a:07:99:f7:4e:55:06:ac:ed:
                    10:16:8b:f5:cd:2e:f6:02:95:03:cb:41:1e:e4:5c:
                    3a:fe:3b:30:ef:a7:7f:4a:23:62:96:47:ba:b8:19:
                    fd:67:0c:2e:a1:e5:90:bc:7f:5c:6e:50:eb:3b:8b:
                    04:f4:e6:12:75:59:2a:62:eb:ca:46:b4:39:fd:c2:
                    52:fb:74:50:06:7f:16:2f:3e:06:a6:4a:89:64:76:
                    cc:96:8b:0b:f3:b6:3f:29:94:4d:87:27:72:76:90:
                    0a:b4:2b:c9:b0:fe:3f:bf:4f:e4:e5:b1:7a:26:bb:
                    fb:08:35:81:99:49:ea:48:89:b1:9a:b8:e4:b1:30:
                    d9:b3:9c:01:94:03:19:be:47:49:06:fb:9f:cb:1d:
                    77:3e:37:0c:b5:70:cc:8d:fc:19:b9:52:20:71:00:
                    ba:16:56:6c:72:4f:56:0a:46:b9:9b:62:99:5a:95:
                    5a:05:0c:98:1e:1a:9a:39:73:f3:f2:39:a8:22:9e:
                    97:e7:5f:cc:1c:cb:35:1c:03:aa:e3:50:b0:60:a0:
                    8c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4A:6B:7D:78:36:0A:D7:FB:BF:4B:F5:6F:96:84:53:C8:18:EA:78
            X509v3 Authority Key Identifier:
                keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:33:2e:e7:f0:30:19:23:5a:d9:a0:27:c3:c3:86:51:9a:06:
         67:49:ec:bc:27:ec:2e:34:a7:82:e9:69:0e:de:23:e1:c7:3b:
         b9:4f:f9:af:4d:f0:a6:12:ed:ff:64:7a:38:57:88:c9:a7:f8:
         f3:04:3e:c3:64:3c:b9:da:0a:95:e7:4d:db:a0:27:73:9b:27:
         55:44:86:65:68:bf:3d:d8:c5:c0:46:80:26:bb:49:b0:23:a4:
         82:07:62:a2:3e:f1:c0:dc:63:27:09:88:2b:32:cd:48:db:21:
         c8:4a:3f:ba:7e:45:bc:c6:43:29:72:0a:f1:d7:81:10:c0:3b:
         06:37:7b:8a:ab:95:51:73:09:eb:12:5a:e9:be:36:40:3c:86:
         54:b3:d1:d2:90:a1:32:e6:bf:5b:a3:8d:ca:a2:a0:f3:84:b1:
         34:e6:69:31:cb:2d:3c:94:31:87:bf:e9:b1:9b:21:a2:12:fc:
         3b:27:e5:41:7d:0f:95:10:4c:32:31:34:96:03:57:c8:0e:7c:
         99:c6:3c:e2:51:65:c2:2b:98:14:9f:fa:86:58:37:4b:a7:91:
         67:b2:b4:a7:0e:b4:ab:3e:ae:12:82:65:d5:d3:ac:9a:82:c3:
         79:65:1e:36:c0:72:a9:ac:98:4b:4e:4f:55:7c:64:10:89:8b:
         46:43:52:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:36:54 2026 by rpki-client