Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
File:                     Erh8bK-B3jYl_hzgVZ854wUFoFE.mft (raw, json)
Hash identifier:          eDKDPe9qMQTOXYMSjTTjR86qMKDtmPkUQs4nPO2BA1M=
Subject key identifier:   6D:5C:29:39:D3:7F:A5:73:E6:17:B3:43:28:5E:79:67:02:C1:4B:51
Authority key identifier: 12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51
Certificate issuer:       /CN=12b87c6caf81de3625fe1ce0559f39e30505a051
Certificate serial:       01A06E39F22BD4D82D0AA09A1C3A37433266
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
Manifest number:          172A
Signing time:             Fri 04 Sep 2026 21:01:26 +0000
Manifest this update:     Fri 04 Sep 2026 21:01:26 +0000
Manifest next update:     Sat 05 Sep 2026 21:01:26 +0000
Files and hashes:         1: Erh8bK-B3jYl_hzgVZ854wUFoFE.crl (hash: KN6IXEiUe3Rz3beM1BmJDTaTmGaRLAPKAv/C+IwFuSQ=)
                          2: K3mAv4ENjdFvUb1ySwEcIqWxG_8.roa (hash: TrWxwfXOHY5NB4elTvUPByLYubX+YUC3/aQn4/n7h2A=)
                          3: UNr1JSsPVlDmc77n-IlJ4J8D-J0.roa (hash: cNdO2qWipe5XDjbIGYIIO5If+75z//dCQTdfnQ/FOsg=)
                          4: jHQC9ewMgHDq31w-y2B2QE0UeQ0.roa (hash: lbUdkuZKAp7sLgTfOG04La55MW6JLwB4IkggCwLUq1g=)
                          5: vv3CReJV7LkCDD7lq-2ePD1bHSw.roa (hash: vcOUmLLDOnBolotJp01JH8ANPyx16KLiqHkliISm6TA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:39:f2:2b:d4:d8:2d:0a:a0:9a:1c:3a:37:43:32:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b87c6caf81de3625fe1ce0559f39e30505a051
        Validity
            Not Before: Sep  4 21:01:26 2026 GMT
            Not After : Sep  5 21:01:26 2026 GMT
        Subject: CN=6d5c2939d37fa573e617b343285e796702c14b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:b1:71:b2:a7:0b:bf:0c:3b:f2:fb:47:d4:
                    41:67:83:4e:e6:6b:67:bc:a9:a8:f3:67:4e:41:41:
                    be:d1:6b:ff:c0:b4:1c:3d:54:76:3f:3a:e7:05:9b:
                    dc:b9:30:09:79:3e:cd:51:52:8b:fa:df:9f:fc:54:
                    39:53:70:69:c5:1d:c2:7f:70:9d:7f:8a:43:3f:41:
                    8a:48:8d:bd:92:34:6f:c4:ec:a4:e8:f4:14:ba:ad:
                    1a:6b:58:94:b4:1f:7c:31:98:78:4b:62:b7:12:43:
                    b8:8f:91:e1:79:b5:97:77:8c:7e:2a:c0:74:f1:88:
                    4a:e1:b7:30:1e:fe:19:75:84:b7:6c:0c:14:66:41:
                    f8:74:ae:00:ff:62:66:50:36:6d:6f:47:ea:e2:9c:
                    fb:6a:d9:68:be:d5:5a:c7:51:77:00:2f:a0:eb:f9:
                    ed:0b:91:d9:1d:0e:31:14:56:ac:bb:17:78:05:74:
                    fa:b4:9e:82:d4:2e:99:de:ab:e6:96:41:b3:85:5b:
                    31:d8:aa:87:60:e6:62:f9:a6:ae:a6:f1:37:d2:98:
                    54:ab:ea:1b:1e:e5:7d:51:52:cb:79:8c:e2:70:b5:
                    30:e6:00:81:bd:b1:3f:7e:42:89:a1:cd:3e:33:d7:
                    81:87:20:8f:ca:2e:8a:b2:df:d8:85:bf:be:db:2f:
                    66:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5C:29:39:D3:7F:A5:73:E6:17:B3:43:28:5E:79:67:02:C1:4B:51
            X509v3 Authority Key Identifier:
                keyid:12:B8:7C:6C:AF:81:DE:36:25:FE:1C:E0:55:9F:39:E3:05:05:A0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Erh8bK-B3jYl_hzgVZ854wUFoFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/e2934c-053a-4b97-aa2a-62808bbbdd21/1/Erh8bK-B3jYl_hzgVZ854wUFoFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:13:05:98:1f:45:9b:86:94:30:4d:59:95:3f:50:6c:1b:af:
         94:d1:5d:46:d5:05:ee:cc:98:13:a9:0f:0f:d9:75:7c:43:a4:
         3a:20:10:37:0c:c5:b9:bb:30:82:f0:64:db:bb:19:01:2a:67:
         83:95:53:ef:61:a8:f5:6c:9d:d8:29:84:bf:aa:6c:35:84:e5:
         c7:91:49:82:45:00:22:18:12:a7:b4:5a:c4:c3:6a:f4:57:4a:
         33:10:85:83:77:19:e4:38:2e:5a:9a:f0:e5:0f:3c:6d:04:bb:
         2f:39:4e:9f:74:0b:82:1c:51:c9:de:6c:b1:05:e5:5b:fd:74:
         34:c2:1b:e5:1d:84:ff:be:50:47:74:17:73:68:84:69:62:61:
         46:4c:ae:9c:f6:e9:6c:6b:0b:1f:98:7d:25:e9:75:49:70:cb:
         0f:83:9a:17:be:6b:a3:f7:95:0c:2e:67:64:e7:1b:7e:e8:52:
         95:1e:b6:0b:6d:b8:f0:ab:06:ba:1d:a5:b9:9c:22:b6:4b:48:
         06:18:49:22:e8:a8:63:7c:53:67:96:5d:11:d1:cf:18:bd:03:
         20:b6:30:40:50:f2:48:00:23:52:eb:17:86:d5:96:5d:59:8d:
         32:7f:6c:7c:c5:82:ff:81:33:ac:27:ea:83:d2:69:ae:50:14:
         8c:54:4f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:33:13 2026 by rpki-client