Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
File:                     ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft (raw, json)
Hash identifier:          SGK9jHTy94/Sh8mObualvHIXWMsLbOw/WQZscKZMd6o=
Subject key identifier:   B7:25:D2:49:F4:1B:C8:AE:D9:67:36:3D:44:46:55:5C:65:18:8A:46
Authority key identifier: 11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1
Certificate issuer:       /CN=111b09710acdb72086d658e90d8f025fa6a111b1
Certificate serial:       019F189EA2BA5D8D36AAE6A9EB5711C41DEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
Manifest number:          0C27
Signing time:             Tue 30 Jun 2026 13:01:17 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:17 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:17 +0000
Files and hashes:         1: 185JWtL1nJVygOFr95-RQtms_58.roa (hash: KasP2muj3cS9GbttmeKweMSTbVCW9PhTnMbBxoVVNls=)
                          2: ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl (hash: ZM8WvU8+MT2qg+mx9YBbdBo3CVFph7rtc+VfNgbyABE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:a2:ba:5d:8d:36:aa:e6:a9:eb:57:11:c4:1d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111b09710acdb72086d658e90d8f025fa6a111b1
        Validity
            Not Before: Jun 30 13:01:17 2026 GMT
            Not After : Jul  1 13:01:17 2026 GMT
        Subject: CN=b725d249f41bc8aed967363d4446555c65188a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:d2:02:66:71:06:7a:06:08:40:0a:f7:5b:
                    89:2a:f5:18:bb:9b:30:a3:d3:36:56:d0:fa:66:2a:
                    74:4a:97:99:00:97:57:56:61:0b:8b:94:07:bb:30:
                    94:6e:d5:87:c7:9f:14:59:2e:ef:da:bd:51:42:c8:
                    7f:30:74:93:d0:be:ee:ec:bd:ce:c5:bc:8e:94:8d:
                    c3:9b:40:a8:42:e3:81:7f:3b:3d:b4:18:b1:22:6b:
                    f3:b1:39:92:f2:5e:c6:b3:05:5e:b4:7c:0d:94:1d:
                    9b:7a:dd:2d:e0:c4:ce:6f:df:93:40:a6:ca:01:64:
                    ba:b6:8c:1f:ee:3a:a7:66:23:fd:29:9f:0e:90:04:
                    66:61:61:90:b3:c2:5e:8a:34:b8:cc:f1:a8:76:18:
                    34:1c:86:8c:91:df:9d:52:f6:e4:d3:3c:b9:91:f6:
                    d1:2a:fd:af:b5:13:fa:5b:50:4c:b7:5b:bf:cd:40:
                    97:51:74:b8:66:8b:23:f4:d4:b6:dd:67:f2:3c:d4:
                    e7:8d:0a:d0:3a:66:21:76:e1:58:77:b5:5b:cb:6a:
                    f2:18:5c:f4:ad:45:ba:04:94:9f:a5:8e:e4:b9:18:
                    10:b5:09:3d:e7:26:7c:02:7e:ed:9d:40:04:d5:01:
                    09:a3:86:21:02:bd:37:42:25:f3:ae:0e:10:31:ee:
                    81:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:25:D2:49:F4:1B:C8:AE:D9:67:36:3D:44:46:55:5C:65:18:8A:46
            X509v3 Authority Key Identifier:
                keyid:11:1B:09:71:0A:CD:B7:20:86:D6:58:E9:0D:8F:02:5F:A6:A1:11:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERsJcQrNtyCG1ljpDY8CX6ahEbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1cd134-4d03-4fcd-b229-7bf0356a6bab/1/ERsJcQrNtyCG1ljpDY8CX6ahEbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:76:13:04:e8:0e:fa:fc:d3:67:19:c9:b2:77:fb:51:94:1f:
         c7:9e:20:b6:95:2d:e8:87:f7:b9:3c:5d:69:60:da:59:f9:59:
         31:72:e3:ca:7a:80:b3:f8:7c:4b:64:52:89:84:e3:97:7c:40:
         f9:55:a2:f0:98:39:bd:e6:81:96:5c:40:12:be:05:cc:74:7a:
         ee:73:18:51:cc:3f:92:29:3f:eb:ab:4e:b3:51:40:fb:a9:f0:
         ab:a7:70:e6:54:78:d9:e2:22:42:da:6c:d2:81:a5:f7:0e:86:
         b3:a0:40:95:43:55:20:86:e3:e7:4b:96:40:b6:39:85:09:02:
         fa:79:37:61:91:c8:af:87:81:67:94:d4:25:ad:a3:6b:96:a5:
         7e:9e:42:fb:d5:62:ef:dc:52:38:10:60:8f:cb:41:4c:98:4b:
         36:a1:07:77:7d:ab:ff:ff:97:ae:1d:bb:d6:5e:1b:be:d2:9f:
         85:93:39:3f:ec:32:2d:5e:59:7a:25:e8:83:27:83:60:5d:fd:
         5e:21:a7:ba:6e:e0:38:a1:af:96:58:7f:e7:90:58:23:13:6d:
         f8:1d:97:53:32:31:4e:bf:c7:70:29:f1:25:cd:af:13:b5:3a:
         e7:42:04:d7:cb:e6:1c:ed:79:02:78:ad:49:dd:c9:16:33:e8:
         89:0b:90:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:17 2026 by rpki-client