Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
File:                     ERJUBMbdRy8QAe2f_fcmdirHcB0.mft (raw, json)
Hash identifier:          JrKZ0UV987rIzZiGGaxKhHr+22stRGqT2SjwPH5nR7w=
Subject key identifier:   92:8F:6A:04:2D:E1:BD:92:98:F5:F1:A3:62:EB:5A:09:4E:5E:9B:EF
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Certificate issuer:       /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial:       01A0C444DB120AB83EA736366ED244778C13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
Manifest number:          06BE
Signing time:             Mon 21 Sep 2026 14:00:41 +0000
Manifest this update:     Mon 21 Sep 2026 14:00:41 +0000
Manifest next update:     Tue 22 Sep 2026 14:00:41 +0000
Files and hashes:         1: 9aoZjeP82sIrz0suU7b3xGsNc6I.roa (hash: 9awhXlx1E7KdK8ach9rj/A1Y4XfGeb5QIQogGD1J5eY=)
                          2: BaSF_ZGkeScNLZyzpNr5WLb2t4c.roa (hash: 2BBTfQtCotzZDQlBL99JCiD7kOOIYBfNbtG6mjQoESc=)
                          3: ERJUBMbdRy8QAe2f_fcmdirHcB0.crl (hash: r/aenVOwsLnPutyYTmRtlOPtzhsyq2YlmXETDtQqtTg=)
                          4: O-kPL51RwlGez8pEnbJxbW-ISOc.roa (hash: wUb1lBOUWdo1qebtORUqDsfWv7RnWMa9pObuYoS5EnU=)
                          5: QXxwBNb8gXdd8a5CKVAG17WDeg8.roa (hash: dWYndi8o7Q2l6mEcK6nt6IGPLfLrVv/vo8+jNXCmS84=)
                          6: VxlMtp46aGtX4_VrPgDQ6HvQbdE.roa (hash: W9RNPArWYdSPLq6QU2Lw7aPUbOCgd4YoDKP5U/vqtdY=)
                          7: gIV-PtLXLT4xOhl2M8ZDrRWJN2c.roa (hash: ez0j8r5ZrGXHsarz1DHJ3c6wCD32BsWkJMkUor30YR4=)
                          8: skB-Hezp9u6dMSW47ypzkcQMALM.roa (hash: 7DCWoB2xt0+UZjjo6BwRXpvUHyGYHyqHkNc8BdIa858=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:44:db:12:0a:b8:3e:a7:36:36:6e:d2:44:77:8c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
        Validity
            Not Before: Sep 21 14:00:41 2026 GMT
            Not After : Sep 22 14:00:41 2026 GMT
        Subject: CN=928f6a042de1bd9298f5f1a362eb5a094e5e9bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:43:97:bb:ba:e5:99:50:c7:b9:bd:c0:9f:
                    04:b8:26:37:28:31:0a:06:9d:8b:bd:67:22:6c:22:
                    a2:67:a7:4d:cb:c2:37:32:f4:50:8b:a3:62:d8:b4:
                    69:ff:6c:b3:f3:c3:37:27:db:7a:fb:12:8d:b6:9d:
                    c0:fe:a7:e4:e9:c4:b3:ac:45:ec:2d:e1:58:38:43:
                    0b:8e:f3:5f:2d:fe:ed:72:ad:0e:f4:13:68:74:c6:
                    b5:84:78:6c:ef:05:a9:38:64:0d:a3:e6:87:99:81:
                    14:58:cb:85:16:d3:2a:c3:df:7a:4f:8d:db:c0:b9:
                    82:e2:94:f7:26:fd:df:b7:9b:36:9d:1a:bb:3e:a3:
                    19:d8:d1:e0:7f:fc:aa:8f:04:10:bf:94:76:8a:01:
                    12:91:89:81:cb:86:39:46:1d:5d:10:ff:b5:b7:ad:
                    57:4f:5c:0e:31:7b:79:18:9c:a2:da:7c:c6:4d:33:
                    d5:68:cf:b9:90:1d:fe:65:ee:77:3e:6b:80:30:ab:
                    d6:26:cd:85:5f:73:99:66:1e:d7:7e:e1:fe:6a:3a:
                    be:4a:a6:5d:8b:45:eb:47:28:ec:ad:a4:4c:cc:e4:
                    66:8d:e7:89:3b:5e:eb:98:8d:51:ad:ec:80:fa:76:
                    8d:e7:e9:28:95:e3:b0:6d:98:a4:b2:a9:19:a9:63:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8F:6A:04:2D:E1:BD:92:98:F5:F1:A3:62:EB:5A:09:4E:5E:9B:EF
            X509v3 Authority Key Identifier:
                keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:35:c6:0e:16:bf:e5:3e:be:3d:f0:ad:ce:d2:b2:6a:6c:4d:
         7e:75:61:2c:66:46:07:af:a0:a7:fa:29:6c:08:87:20:5d:05:
         6c:ab:ff:fe:17:4a:da:b9:fb:b9:0a:d9:c7:5c:b3:7d:75:13:
         05:8f:dc:3e:d9:37:82:50:f5:98:14:d3:20:53:a6:21:c2:b2:
         ca:f2:63:ab:aa:6a:7b:ed:47:5c:b6:b3:e3:5d:e1:49:86:45:
         a9:9e:53:7c:ab:3d:9a:16:81:74:0c:3d:4a:8a:79:40:72:64:
         fe:e0:67:9b:48:37:11:5b:93:de:13:08:5d:e6:8a:d3:33:c2:
         93:87:0e:dd:24:8e:ab:34:21:77:c8:46:f6:01:c2:70:fa:12:
         28:95:b4:12:73:6e:ae:b1:ec:08:38:70:c7:8e:0d:5b:a4:5b:
         02:a2:fb:e2:80:90:0b:6e:94:9f:67:a0:f7:6d:8f:07:72:e6:
         e7:33:7e:8c:f6:aa:fc:66:a0:5a:f1:d1:d3:bb:d9:67:ba:b3:
         7b:6b:b6:a5:8d:97:bf:fc:d7:6f:14:63:18:84:ad:91:10:c8:
         61:37:08:9b:2e:1c:d1:9a:ee:0e:e9:23:af:84:ca:84:2c:97:
         8f:33:0a:e4:5e:0c:46:fd:0c:c1:39:88:54:c8:0a:2e:b4:99:
         79:b8:6a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:59:31 2026 by rpki-client