Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
File:                     ERJUBMbdRy8QAe2f_fcmdirHcB0.mft (raw, json)
Hash identifier:          F1VXKXs46DX/a4Z2GdXK4iYIlhJESpkppVP7IOKiWq0=
Subject key identifier:   2E:A5:57:C8:15:6E:EE:F3:AB:C8:F7:29:71:59:2B:1B:6C:DB:49:FD
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Certificate issuer:       /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial:       01A1BF8AA64D22695D2C0EB6BBCFF8E05596
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
Manifest number:          0746
Signing time:             Mon 09 Nov 2026 09:01:36 +0000
Manifest this update:     Mon 09 Nov 2026 09:01:36 +0000
Manifest next update:     Tue 10 Nov 2026 09:01:36 +0000
Files and hashes:         1: 7jsYQEdezNNFEcPagYJhhcxcGpw.roa (hash: 573FGfquEy4wMV+IC0hPQaSmWfduSjD5MRwt7ba/uAo=)
                          2: ERJUBMbdRy8QAe2f_fcmdirHcB0.crl (hash: u2zj7SxUkDnNJWRLVj80YPS8ab6Gso6fAsRLE+c4/XM=)
                          3: Iex_HIGWJ1_HZLQFPOxHaTL99kc.roa (hash: enkXUMri3c9cQM2t5h0xIUwLjyIdr7M8AWfa7hKZxSQ=)
                          4: LX6mhH_wBNTHgTV0Wr4sXS50kJ0.roa (hash: HzUPlGWzaXcN2DwW7/zu6cSqWzjIwFjguiSiBP9ebDo=)
                          5: O-kPL51RwlGez8pEnbJxbW-ISOc.roa (hash: wUb1lBOUWdo1qebtORUqDsfWv7RnWMa9pObuYoS5EnU=)
                          6: QXxwBNb8gXdd8a5CKVAG17WDeg8.roa (hash: dWYndi8o7Q2l6mEcK6nt6IGPLfLrVv/vo8+jNXCmS84=)
                          7: RTRTE9xKUc0wvrWSoT5TmS_0ono.roa (hash: K3MbfdP7df/nyXsDcN13J2oQ2i4nh5PqKxDwz2z01xU=)
                          8: gIV-PtLXLT4xOhl2M8ZDrRWJN2c.roa (hash: ez0j8r5ZrGXHsarz1DHJ3c6wCD32BsWkJMkUor30YR4=)
                          9: h5bVoNbZKQGsW8LgGTtCl0H3Y00.roa (hash: VRBlLbI94nVsPflwlPeAs8oZ8WqmMAa9c7mcZdDmMr0=)
                          10: skB-Hezp9u6dMSW47ypzkcQMALM.roa (hash: 7DCWoB2xt0+UZjjo6BwRXpvUHyGYHyqHkNc8BdIa858=)
                          11: tR3JIILCUmampae68zfNR46wdoE.roa (hash: aOqdmbX2NCdGMxgtkhoy2Vkl/dGODFCPv3lOT4iO6Dc=)
                          12: vnUXnydR0DGVu-Jzm4RtvrnYOwg.roa (hash: T2RgyQjJF3ogU00QFDBSWVRSfWceiKFKCTyfu3XyyA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 09:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:bf:8a:a6:4d:22:69:5d:2c:0e:b6:bb:cf:f8:e0:55:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
        Validity
            Not Before: Nov  9 09:01:36 2026 GMT
            Not After : Nov 10 09:01:36 2026 GMT
        Subject: CN=2ea557c8156eeef3abc8f72971592b1b6cdb49fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:95:dc:43:fb:17:3e:76:79:20:72:28:89:9b:
                    59:06:27:6a:37:8f:c0:8e:45:0c:6c:68:80:30:0c:
                    22:90:4d:ee:00:9b:e2:c6:b8:75:bc:23:6d:ca:17:
                    7f:95:0a:f9:3a:c7:6f:f8:dc:3e:81:8b:a9:aa:c5:
                    09:99:3a:15:ac:63:78:df:18:4a:32:ed:47:9a:76:
                    f3:c9:bf:f0:95:21:ef:c1:d7:67:d4:99:e6:52:47:
                    b4:84:b7:15:12:1e:36:94:21:31:43:41:fb:02:84:
                    98:4f:ea:d2:96:30:cb:a6:3b:18:95:89:07:54:c7:
                    8b:9e:fd:1d:41:25:9e:c7:64:a8:a3:b0:0c:3a:e3:
                    43:5e:e6:1a:f4:69:3b:2a:4d:43:5b:85:fa:54:9b:
                    e1:61:3b:05:34:01:a7:0a:df:c6:ed:83:7b:eb:2d:
                    ad:da:cc:9d:f3:e6:f7:ae:cc:25:9f:c1:83:04:ce:
                    df:c7:61:4c:b9:2d:5a:b1:bb:81:b2:f2:79:0e:74:
                    96:1c:29:b1:eb:cc:99:9f:8f:82:63:fa:9e:e5:d4:
                    f1:46:8a:46:3a:9b:46:79:9a:23:8e:f5:72:86:14:
                    af:35:ed:6c:96:d8:c0:b9:a8:6a:82:e5:ad:36:cc:
                    89:4c:21:61:b0:22:be:7a:a2:32:06:1f:2b:49:81:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A5:57:C8:15:6E:EE:F3:AB:C8:F7:29:71:59:2B:1B:6C:DB:49:FD
            X509v3 Authority Key Identifier:
                keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:37:59:94:ff:15:77:32:a8:9d:59:63:04:11:66:c3:f6:11:
         01:4d:72:42:79:f9:f5:46:33:bc:cd:c8:11:a7:14:ad:82:23:
         c1:7a:54:83:11:82:0f:51:19:4c:86:ac:fa:1f:59:99:0f:8b:
         23:13:c7:01:0c:6f:aa:08:10:9a:bc:b0:02:79:33:71:a2:5e:
         3e:0b:dc:ea:76:49:90:5f:9d:bf:aa:0f:d2:18:22:e3:92:3e:
         94:c3:10:ea:36:e1:2a:ab:c6:ce:6e:b1:dc:2a:88:51:5b:20:
         fc:6e:19:ad:84:1e:95:c4:db:3a:2b:8a:f1:19:c7:96:d3:da:
         54:62:5a:7d:7b:7c:c2:ee:04:c1:ec:8e:b4:a8:82:37:c5:f2:
         bd:8b:a8:96:5f:ca:8c:9a:b3:6d:16:7b:1c:7e:51:33:41:f6:
         e7:c7:57:c1:b8:4c:0e:54:24:a6:a4:ee:87:8c:61:3e:f2:5e:
         79:b6:62:5d:18:aa:9d:c9:33:30:4a:99:d1:76:1d:74:af:87:
         7f:0b:93:1b:cb:33:ef:d1:02:81:44:df:4b:1a:cf:29:01:00:
         ae:3d:38:37:00:1f:87:d8:73:03:c3:ed:e7:68:d9:f5:d9:f7:
         57:8a:87:14:a7:c0:28:5b:78:69:28:2d:ed:ce:38:26:ce:c1:
         fb:33:37:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 18:27:39 2026 by rpki-client