Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          BnnBWi3FdoQ4Sqpm7JVo6RbQQUBNaH+BvvFhN2P4Of4=
Subject key identifier:   A7:D6:6E:29:6F:B4:A2:6C:2B:ED:15:68:D8:53:2D:92:07:98:1C:89
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       019CC606EE2C732007C5D51412772BD26157
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          07CB
Signing time:             Sat 07 Mar 2026 02:01:08 +0000
Manifest this update:     Sat 07 Mar 2026 02:01:08 +0000
Manifest next update:     Sun 08 Mar 2026 02:01:08 +0000
Files and hashes:         1: 6RGW9FHC1xpyf6wgXfv_Eu_s6uU.roa (hash: 6vhjvZr3Kb+sylEayrM6AVgYe9A0exMXL5Q6uA9ZfJU=)
                          2: 6W3PFSYqXuu3DVpLrOTVZguZ2N0.roa (hash: bgN/Wif1RDjqgtzhUIXOtx86/S164vOmljhvPEsaCa4=)
                          3: 79S97sh77TUY_ErUyiX3p8rKe3w.roa (hash: LEhB0OtYTizcbBHkerXjTJ1lt8uSH6AUULDTX50iSM0=)
                          4: 7WCK9V1amL7VfvRQvmwfuLID77I.roa (hash: dSLJNNz7Yonxdt/qjaMstXNcLqH1Gi7MhACN+SvlT3Y=)
                          5: 9YMsNSl9uqbLQlhpMDCKts3pRbc.roa (hash: WgiyYz+dNNGuW/Et9LEhQWTMq/N/0yU1nPwcWEo5s64=)
                          6: A0BdIUg-tIB8xYgoBPkgZQEJZFM.roa (hash: vAFPQ7/zBwmd5lfN1DQPlwlOlVHsgUGVyWdvSmPAIkg=)
                          7: CBS2cYZH0a1-EtTZe3IWAD6c-2g.roa (hash: aNpmaLz6DM8TbSPf9PeLDC2ZVCw6M60lBO00KmbqUys=)
                          8: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: HiStAFY79Lez69zdciwCUJ8oYq4NIAKaj/aLDZsXD64=)
                          9: I_5lxzMWxk5Aopl0hXQj_WKgEyA.roa (hash: /gE5K6NhC2k5CWVY4m5yP/kklyPqncoXj/AGRLvfkHQ=)
                          10: KGz7A7bTE88v8gErdsKgHCUC2LI.roa (hash: +mLqNnbl4FhK35X4O0rVUkitsCTraJ0mv2xz6w3UBIQ=)
                          11: MbRan6OrTVgecR6FfgRRIDuxgPc.roa (hash: SlpR7LyUtBASFkbDWJJxH3uK9Z/DaHWNWAtgRxEYHi4=)
                          12: NuVuQpaVYj5sGSuzNBVLP-7OEhQ.roa (hash: XsemG1a9ry3NgfMb3C0eGMoRV9inDwtSEqw5UJjMBMU=)
                          13: OESYnQ8L_1H2AfEG7VV509kAgPE.roa (hash: Jctl083IIiJh6niNEBCQQuzky5TCpmOUPtj0HXtKO5Q=)
                          14: QqeydQshq5wVgPFowaH8kSdulJE.roa (hash: yQTQIjYLygA4Mrk/w3xFYjqE+rMboxec1iCZjnDNzKc=)
                          15: R_cuxg4z9NiO0rwHOrSqofSaMMc.roa (hash: V1go2+jNZlz4sljszm+EGOwj91XAdgeWv3whnnNSU5k=)
                          16: TwHtCTFt01-DoJiRnIPLzu06kO0.roa (hash: DqST1n24LVvhbJfMGakXbLktGwWUU3tf5w7i5S+8aD4=)
                          17: Zi0NjMEtFw5voPHGZoxrA-l2oWA.roa (hash: rEeauSC/jqbljS/hWUZuNo4LDWDnXsLsoGbI9r4RZdo=)
                          18: dizEX_iSYkDBVGUBivY0AsRq6PU.roa (hash: NkNfYdAc55dCA+dXU/xichk+dhBdBm/+aZDwkRCWs98=)
                          19: es_0iYTgC8KGf6QVaGhwXVTE_MQ.roa (hash: w6H/ZpVUIMoSl/7OP/vOqQcfBns9Oiq1ViSqyP3gYPM=)
                          20: jZrRxArAkWsgIRXLzqXFJ2uzg1M.roa (hash: oQRjlCXEvb91V7QDXOTq59uWKq0mZjS4woUXREc+3oY=)
                          21: m610dYqPqVXc5d6IQHjpHxMDUxc.roa (hash: hsCwEpAHBEjFxhnKmMwXYFpcZTvB5BeuJTVur+XGJvU=)
                          22: remQI3vXY-CwDxRRv5Pj5NwA140.roa (hash: LH+kG9be4lJ6veGuO7nsYdrnjEkQS1MlDMWHJ7NAdZg=)
                          23: u0aooYk6vpPtd7DAaqhA5TCwqL8.roa (hash: jrpZh1EcyK9ynVBjFBbvxMjSEhlJo0Ta8D6EcHF8U7U=)
                          24: vit3FI0YIMfjDCvKP-WGp2Vf7C8.roa (hash: 4CxQdDOXcl5lKbs0eX2DlAuxNnLP4vZ7ksKuT8r2+Oc=)
                          25: wT4zBHWAKZXvAcKkyIUr6uRAbbA.roa (hash: ib0iHP7uE5Y5OML0Ye43R9IPy5aU8jLszDsAo4o8MLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 02:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c6:06:ee:2c:73:20:07:c5:d5:14:12:77:2b:d2:61:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Mar  7 02:01:08 2026 GMT
            Not After : Mar  8 02:01:08 2026 GMT
        Subject: CN=a7d66e296fb4a26c2bed1568d8532d9207981c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:79:ed:4e:49:aa:7d:c2:43:5d:de:53:33:ef:
                    e3:a5:da:27:1e:b1:80:23:c3:93:26:d2:ae:a4:05:
                    01:1f:16:ac:69:fa:f4:52:33:86:fe:31:71:11:ed:
                    85:75:6d:15:de:31:11:fe:30:e1:ac:e5:14:60:24:
                    9c:b2:c7:d7:f7:58:b5:21:09:c1:2a:c7:72:52:ed:
                    a1:3f:d3:b8:6f:6c:9f:b9:58:86:55:13:63:32:50:
                    55:d8:e0:80:51:89:ea:fc:bf:e4:32:50:28:a6:13:
                    c6:13:dd:91:c5:51:63:b2:48:c4:da:2b:67:e5:b4:
                    15:0e:45:89:30:0b:39:0b:6e:d8:79:a9:ee:b7:aa:
                    ba:08:00:32:70:51:05:d7:16:d4:7a:c6:a3:af:1b:
                    d6:bd:cf:ab:d6:3d:3e:0e:8e:01:31:b9:ba:62:7e:
                    89:bf:e8:6e:93:07:ea:fa:29:01:71:68:6b:2c:e9:
                    a0:f7:51:be:25:de:fb:e8:4a:7a:f2:14:6a:6d:56:
                    16:81:ee:90:27:7b:47:97:97:e8:1f:33:80:86:81:
                    bd:49:19:38:a7:4d:ac:23:d0:d1:f0:9b:6e:51:94:
                    ff:2f:ae:1a:36:68:a2:a0:9f:ab:a0:bf:5a:86:a6:
                    23:0e:c7:77:e7:b0:e2:89:18:13:26:fe:d4:43:5a:
                    ca:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D6:6E:29:6F:B4:A2:6C:2B:ED:15:68:D8:53:2D:92:07:98:1C:89
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5f:22:87:b0:6d:7f:83:79:9e:4d:76:a8:33:a4:6d:55:a8:
         7d:c2:a5:90:fe:9f:9b:19:05:e0:43:3f:51:88:fb:46:70:7a:
         76:da:55:ff:60:96:61:5d:f7:a1:14:c5:3e:2b:1c:3f:18:cc:
         e6:8b:08:b0:09:4c:05:23:14:9d:b0:e7:2f:10:83:07:61:d1:
         6e:e7:08:83:16:d6:50:72:8c:79:94:64:dd:93:9c:b6:3e:dc:
         f7:87:04:bf:ab:b2:32:c1:4b:2c:57:84:28:34:07:09:7b:12:
         b8:d2:8a:d7:d5:29:31:b9:b4:af:5d:76:83:50:84:1b:20:ff:
         5e:28:9a:fb:57:4d:91:52:b2:35:a5:5c:fa:19:1a:2b:6f:dc:
         3b:95:46:cb:55:bc:80:e4:7f:d0:58:67:5a:b6:6d:c9:96:93:
         9d:50:66:42:a8:67:c2:6f:0b:12:47:9f:ec:31:c7:f5:17:cc:
         d1:60:de:9e:1f:2f:4e:6f:91:8b:45:1d:df:de:a2:ab:ef:bc:
         60:a3:6c:59:db:2e:c1:d5:39:ea:cb:37:cc:e5:a6:6b:ca:a1:
         3d:6d:6c:50:5e:0d:21:1b:2d:90:ca:9b:0b:07:08:12:51:2a:
         ce:33:ea:31:94:bb:93:48:6e:47:2d:97:6f:2c:c6:11:80:23:
         04:0f:84:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:42:44 2026 by rpki-client