Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          dnGq14W2TDT1L3AQ9s3+nkJcAcXc+4vu/wONk222hAo=
Subject key identifier:   8A:5B:0F:91:13:72:23:DD:7E:C5:B6:4D:29:D4:93:6F:A6:2F:13:18
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       019F829E04F927E0F27586E76656B89B68DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          0940
Signing time:             Tue 21 Jul 2026 03:00:21 +0000
Manifest this update:     Tue 21 Jul 2026 03:00:21 +0000
Manifest next update:     Wed 22 Jul 2026 03:00:21 +0000
Files and hashes:         1: 6RGW9FHC1xpyf6wgXfv_Eu_s6uU.roa (hash: 6vhjvZr3Kb+sylEayrM6AVgYe9A0exMXL5Q6uA9ZfJU=)
                          2: 79S97sh77TUY_ErUyiX3p8rKe3w.roa (hash: LEhB0OtYTizcbBHkerXjTJ1lt8uSH6AUULDTX50iSM0=)
                          3: 7WCK9V1amL7VfvRQvmwfuLID77I.roa (hash: dSLJNNz7Yonxdt/qjaMstXNcLqH1Gi7MhACN+SvlT3Y=)
                          4: 8dN_y6FCHmSwh9zyOdGKc-Xa3Xc.roa (hash: AzOTxMcQLVwli/cilDsxwDkXYXmhghgIjsMcqtIyLUc=)
                          5: 9YMsNSl9uqbLQlhpMDCKts3pRbc.roa (hash: WgiyYz+dNNGuW/Et9LEhQWTMq/N/0yU1nPwcWEo5s64=)
                          6: A0BdIUg-tIB8xYgoBPkgZQEJZFM.roa (hash: vAFPQ7/zBwmd5lfN1DQPlwlOlVHsgUGVyWdvSmPAIkg=)
                          7: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: NiO+QnAY/r8GNTtCaPC7nr16vU087usxFxoFh3oHZO0=)
                          8: I_5lxzMWxk5Aopl0hXQj_WKgEyA.roa (hash: /gE5K6NhC2k5CWVY4m5yP/kklyPqncoXj/AGRLvfkHQ=)
                          9: KGz7A7bTE88v8gErdsKgHCUC2LI.roa (hash: +mLqNnbl4FhK35X4O0rVUkitsCTraJ0mv2xz6w3UBIQ=)
                          10: MbRan6OrTVgecR6FfgRRIDuxgPc.roa (hash: SlpR7LyUtBASFkbDWJJxH3uK9Z/DaHWNWAtgRxEYHi4=)
                          11: OESYnQ8L_1H2AfEG7VV509kAgPE.roa (hash: Jctl083IIiJh6niNEBCQQuzky5TCpmOUPtj0HXtKO5Q=)
                          12: QqeydQshq5wVgPFowaH8kSdulJE.roa (hash: yQTQIjYLygA4Mrk/w3xFYjqE+rMboxec1iCZjnDNzKc=)
                          13: R_cuxg4z9NiO0rwHOrSqofSaMMc.roa (hash: V1go2+jNZlz4sljszm+EGOwj91XAdgeWv3whnnNSU5k=)
                          14: TwHtCTFt01-DoJiRnIPLzu06kO0.roa (hash: DqST1n24LVvhbJfMGakXbLktGwWUU3tf5w7i5S+8aD4=)
                          15: UZKdyiYuEJgK1CXf4lhc7ZkfKPU.roa (hash: 2bdOr/wIOcULD+99fYfl0oPnDBufy+6gGb+f1589cJ0=)
                          16: YaXl0EyGIRJtUwVXEpmTyj4RbIM.roa (hash: UARP9ccmGAz/IxujWESaJ+gM6YXvbQBi7CqndR5OWns=)
                          17: Zi0NjMEtFw5voPHGZoxrA-l2oWA.roa (hash: rEeauSC/jqbljS/hWUZuNo4LDWDnXsLsoGbI9r4RZdo=)
                          18: clZodLAFWFzf94TZLnuJ0a-wAJo.asa (hash: VVttTdxIL6mPE72qJiimWHq833VONqQxL8m8fNbx8sY=)
                          19: dizEX_iSYkDBVGUBivY0AsRq6PU.roa (hash: NkNfYdAc55dCA+dXU/xichk+dhBdBm/+aZDwkRCWs98=)
                          20: es_0iYTgC8KGf6QVaGhwXVTE_MQ.roa (hash: w6H/ZpVUIMoSl/7OP/vOqQcfBns9Oiq1ViSqyP3gYPM=)
                          21: l3-NhbJzA_XVE-TmzzNypY-VV5c.roa (hash: ZUBG94tef4wB8hBuRGaTGpnWf6HCKUPgbpaFu4tpF7Q=)
                          22: lakZTlHlef4ahy1QkuLluXAniGU.roa (hash: UmkeThGihGm0QDSjkaY2uV8rXNRfz2AB7rrYZbO/0W8=)
                          23: m610dYqPqVXc5d6IQHjpHxMDUxc.roa (hash: hsCwEpAHBEjFxhnKmMwXYFpcZTvB5BeuJTVur+XGJvU=)
                          24: neYIYJF2wg6OgH6kUj7IKfFilY8.roa (hash: ry5xgcA92qzlZuKehBUAKzpu87W5MD4AyXHq3MrCGuk=)
                          25: remQI3vXY-CwDxRRv5Pj5NwA140.roa (hash: LH+kG9be4lJ6veGuO7nsYdrnjEkQS1MlDMWHJ7NAdZg=)
                          26: u0aooYk6vpPtd7DAaqhA5TCwqL8.roa (hash: jrpZh1EcyK9ynVBjFBbvxMjSEhlJo0Ta8D6EcHF8U7U=)
                          27: vit3FI0YIMfjDCvKP-WGp2Vf7C8.roa (hash: 4CxQdDOXcl5lKbs0eX2DlAuxNnLP4vZ7ksKuT8r2+Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:9e:04:f9:27:e0:f2:75:86:e7:66:56:b8:9b:68:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Jul 21 03:00:21 2026 GMT
            Not After : Jul 22 03:00:21 2026 GMT
        Subject: CN=8a5b0f91137223dd7ec5b64d29d4936fa62f1318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:e4:78:57:38:3f:4a:26:31:68:0f:e5:25:
                    a5:2b:df:f0:ba:60:ff:7f:a4:4d:e9:2b:9b:65:d5:
                    e9:5f:4b:da:b6:1f:da:08:42:a4:db:c6:13:5a:c9:
                    7a:cf:e7:d3:ac:7c:33:0e:dd:a0:db:0a:6d:4b:8f:
                    35:b0:34:55:b3:0f:31:84:a8:09:dd:b5:ad:ba:82:
                    d5:b3:cc:0c:06:29:d4:40:4a:e5:de:fe:62:7d:4d:
                    46:c7:f2:68:e9:51:3d:bf:c5:71:eb:cf:5e:96:ec:
                    72:cc:e0:71:f9:d8:b4:9d:8f:91:aa:9f:29:6f:d1:
                    a1:39:9b:13:f4:c1:aa:94:42:e0:0f:aa:94:30:e4:
                    02:04:fc:71:88:56:8f:49:c8:bd:e4:80:06:1a:c6:
                    fb:7b:92:04:d1:68:ee:72:ce:33:e4:3f:7b:02:c6:
                    22:fc:19:f5:71:46:d4:b5:92:97:bd:36:e8:ec:d7:
                    ae:41:b5:27:67:bc:51:30:06:e0:36:ff:50:07:cf:
                    37:ce:67:ef:0d:57:12:33:ec:1d:52:7c:76:62:86:
                    48:05:5e:68:dd:e4:b7:3b:d0:74:80:2d:cd:a1:bd:
                    6c:be:7e:de:4c:63:07:a4:81:0a:1e:e7:20:56:e4:
                    2a:e6:68:5a:99:3b:92:e3:46:95:d2:67:98:ee:55:
                    d1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5B:0F:91:13:72:23:DD:7E:C5:B6:4D:29:D4:93:6F:A6:2F:13:18
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:60:d1:4d:e2:8d:f6:5c:16:a1:fd:15:96:8f:4d:ea:5e:7d:
         df:e1:2f:e2:ca:34:2e:2b:69:39:46:3a:5d:44:57:49:49:df:
         46:b0:99:4c:54:bc:5f:1a:d6:a8:96:88:1d:17:9d:dc:8e:67:
         7a:df:c9:d5:2f:cc:f9:b3:12:44:51:09:f7:7c:9d:ae:b7:ff:
         fb:22:27:f1:86:18:92:a6:41:d9:c0:a8:e1:54:50:00:cc:11:
         e2:4c:d6:af:b4:76:88:69:13:88:66:80:0a:7e:4b:f4:48:ba:
         6e:7f:b7:18:1a:b8:20:e6:24:be:af:31:4b:be:cb:93:4f:0a:
         5b:62:8b:5a:bb:53:aa:c7:12:29:14:30:0b:1c:1a:d2:32:1f:
         64:d6:7a:f4:d6:b7:ef:3f:d5:8d:b7:53:18:86:a4:02:0f:28:
         0a:7f:5e:df:f3:20:54:7f:2b:8e:1a:d8:89:18:69:9a:94:98:
         07:08:56:07:39:78:87:93:c6:48:dd:86:44:2c:42:06:6a:e0:
         90:78:ea:8b:d3:d8:7f:36:39:c4:c5:2f:f4:71:89:9b:88:1a:
         9b:dd:f1:6d:3b:f5:e2:72:a8:d1:29:8b:d1:f7:56:ed:c0:0b:
         46:f2:f8:b1:e6:74:7c:0a:4f:94:03:94:c2:74:72:45:6a:9f:
         49:78:8b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:56:31 2026 by rpki-client