Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          T9ijZYt7aOE1smRX0D/bKPSw9DuzSCTVOKu3pJc9DJk=
Subject key identifier:   B9:D4:73:61:02:15:33:59:61:10:20:87:9E:A0:C0:45:27:E3:03:B5
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       01A15BC2E2F0C77714B17198646E0CE6DC98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          0A41
Signing time:             Wed 21 Oct 2026 00:01:01 +0000
Manifest this update:     Wed 21 Oct 2026 00:01:01 +0000
Manifest next update:     Thu 22 Oct 2026 00:01:01 +0000
Files and hashes:         1: 1FZG6wB87qloa1UbjayKMtrq8-A.roa (hash: quaCh4MjQgJ28N6zhE6aOSaSzuiG0zl0jXtQZOOkACY=)
                          2: 1olwn7ICW7wQ7rzv6lV7Sb-PQEg.roa (hash: z8lX2g4b2x4FJkwuYbzNJJZEhTP25jGzuB3PKLYYUCk=)
                          3: 5lBFGUAoZxbYBVNbtiraNCntgkY.roa (hash: D2AWufXWx23fxF8Lz5Xwtrbq4J1toTvFTMMwNaB2tNg=)
                          4: 6RGW9FHC1xpyf6wgXfv_Eu_s6uU.roa (hash: 6vhjvZr3Kb+sylEayrM6AVgYe9A0exMXL5Q6uA9ZfJU=)
                          5: 6Slb6ctAjkaetdPp9fu-qsq12hU.roa (hash: nI/JTPazexs9LlS7qZJ1qYqSPfTJGwhci4GC3G7Xc0Y=)
                          6: 79S97sh77TUY_ErUyiX3p8rKe3w.roa (hash: LEhB0OtYTizcbBHkerXjTJ1lt8uSH6AUULDTX50iSM0=)
                          7: 7WCK9V1amL7VfvRQvmwfuLID77I.roa (hash: dSLJNNz7Yonxdt/qjaMstXNcLqH1Gi7MhACN+SvlT3Y=)
                          8: 8dN_y6FCHmSwh9zyOdGKc-Xa3Xc.roa (hash: AzOTxMcQLVwli/cilDsxwDkXYXmhghgIjsMcqtIyLUc=)
                          9: 9YMsNSl9uqbLQlhpMDCKts3pRbc.roa (hash: WgiyYz+dNNGuW/Et9LEhQWTMq/N/0yU1nPwcWEo5s64=)
                          10: A0BdIUg-tIB8xYgoBPkgZQEJZFM.roa (hash: vAFPQ7/zBwmd5lfN1DQPlwlOlVHsgUGVyWdvSmPAIkg=)
                          11: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: t+c67s5/n2N7aZWdbfsAdy2xDDq2u7kjaqt4crzItIw=)
                          12: GhIcthy_Bt7RZmc3Srzmgu8Z0kA.roa (hash: nWrFbHNPHUtu9F2zSIqhUDca6rtxXZo5ycbC2prOvIg=)
                          13: I_5lxzMWxk5Aopl0hXQj_WKgEyA.roa (hash: /gE5K6NhC2k5CWVY4m5yP/kklyPqncoXj/AGRLvfkHQ=)
                          14: KGz7A7bTE88v8gErdsKgHCUC2LI.roa (hash: +mLqNnbl4FhK35X4O0rVUkitsCTraJ0mv2xz6w3UBIQ=)
                          15: MbRan6OrTVgecR6FfgRRIDuxgPc.roa (hash: SlpR7LyUtBASFkbDWJJxH3uK9Z/DaHWNWAtgRxEYHi4=)
                          16: NYMiViosdH9_4pb4GrGmYXreRLk.roa (hash: +zZYAlnSqEknoj1ol6xGExD0ML3HjwlMnuE300t6plo=)
                          17: OESYnQ8L_1H2AfEG7VV509kAgPE.roa (hash: Jctl083IIiJh6niNEBCQQuzky5TCpmOUPtj0HXtKO5Q=)
                          18: OZRl0EIZvzMHZGy3Mgu3BOnL2cQ.roa (hash: iLj5NBVnsGW8zwXege6rDcdJrlo0iKYwZQK/cL/VEYQ=)
                          19: QGn7qwBSb-aDCmcB72sRlQjFuqY.roa (hash: viTlkuXOKEHPRGpj/iXhEKABilpBEiqBOa97D8tnSRE=)
                          20: QqeydQshq5wVgPFowaH8kSdulJE.roa (hash: yQTQIjYLygA4Mrk/w3xFYjqE+rMboxec1iCZjnDNzKc=)
                          21: S7aozI9FvqzyVV9qPBI0-pBgja0.roa (hash: RZcrxAGTaObIV2NJYPIxgsFk5KxFbecqZdjcxq2F6wI=)
                          22: SXWGoki_NUQ9PQVZrdM0Hw_QNv4.roa (hash: wTDBOiQk6iaZWimbuWiLB8VRAHOMx16PDKlmETFmMKc=)
                          23: TwHtCTFt01-DoJiRnIPLzu06kO0.roa (hash: DqST1n24LVvhbJfMGakXbLktGwWUU3tf5w7i5S+8aD4=)
                          24: UZKdyiYuEJgK1CXf4lhc7ZkfKPU.roa (hash: 2bdOr/wIOcULD+99fYfl0oPnDBufy+6gGb+f1589cJ0=)
                          25: Zi0NjMEtFw5voPHGZoxrA-l2oWA.roa (hash: rEeauSC/jqbljS/hWUZuNo4LDWDnXsLsoGbI9r4RZdo=)
                          26: clZodLAFWFzf94TZLnuJ0a-wAJo.asa (hash: VVttTdxIL6mPE72qJiimWHq833VONqQxL8m8fNbx8sY=)
                          27: dUNUWDt_0kJ2DS1ugt0Ii3WwX7g.roa (hash: oQQoKXMtu0U1IsU0j0ZWo2KwQtbcMi8+QdULtf86sM4=)
                          28: dizEX_iSYkDBVGUBivY0AsRq6PU.roa (hash: NkNfYdAc55dCA+dXU/xichk+dhBdBm/+aZDwkRCWs98=)
                          29: es_0iYTgC8KGf6QVaGhwXVTE_MQ.roa (hash: w6H/ZpVUIMoSl/7OP/vOqQcfBns9Oiq1ViSqyP3gYPM=)
                          30: ktR5aIXX8DCSaPyU0JqULEOdpDU.roa (hash: k4DH/NgsWxNDC6QhLfhwddBpbOTI6E+3vgE3oTuzzck=)
                          31: l3-NhbJzA_XVE-TmzzNypY-VV5c.roa (hash: ZUBG94tef4wB8hBuRGaTGpnWf6HCKUPgbpaFu4tpF7Q=)
                          32: lPksXWHNEjk8KBU1rNqMSJ5_KXw.roa (hash: wA7yzfQgmx3kHbuFrXJdkVaMKtNXen5NHHeqTyxqclU=)
                          33: m610dYqPqVXc5d6IQHjpHxMDUxc.roa (hash: hsCwEpAHBEjFxhnKmMwXYFpcZTvB5BeuJTVur+XGJvU=)
                          34: npFTFWkQvJEB-uPZw7_yc1bOCYg.roa (hash: +mXvNAxr4u+gG4g9s2iT2e/7Fxy7fLo5N61r3XWKELI=)
                          35: remQI3vXY-CwDxRRv5Pj5NwA140.roa (hash: LH+kG9be4lJ6veGuO7nsYdrnjEkQS1MlDMWHJ7NAdZg=)
                          36: vit3FI0YIMfjDCvKP-WGp2Vf7C8.roa (hash: 4CxQdDOXcl5lKbs0eX2DlAuxNnLP4vZ7ksKuT8r2+Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5b:c2:e2:f0:c7:77:14:b1:71:98:64:6e:0c:e6:dc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Oct 21 00:01:01 2026 GMT
            Not After : Oct 22 00:01:01 2026 GMT
        Subject: CN=b9d4736102153359611020879ea0c04527e303b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:39:fb:10:fc:a3:e3:fd:52:0c:4f:64:fc:
                    f2:f5:55:84:76:0f:7d:b8:17:73:85:13:ff:0e:ef:
                    4e:61:60:ea:b5:76:ca:05:d6:44:1e:4e:6c:1e:b6:
                    52:40:d4:3c:6e:95:07:50:2e:49:be:d4:09:4c:32:
                    a8:c8:48:e8:f0:74:cf:56:6a:88:c1:c4:33:18:67:
                    c6:fa:c8:d6:0d:61:a3:bc:dc:c9:5b:d4:13:05:8e:
                    0d:96:6d:d6:2f:42:46:47:b6:12:9d:18:82:b0:1c:
                    53:2b:09:e6:4d:51:04:e1:77:3c:67:57:34:14:f5:
                    a1:85:57:d3:0e:f0:6c:1f:47:09:e2:98:d8:63:c4:
                    cd:f5:ec:4f:d1:15:86:79:2c:31:f3:86:ff:91:6b:
                    a3:c5:6b:34:a3:e0:51:03:d5:41:37:ec:6f:ee:37:
                    62:fd:ee:3a:7c:48:4f:2a:76:43:a9:c3:08:78:50:
                    45:ab:ad:ee:d4:d0:da:f8:0f:23:ae:71:51:f1:03:
                    6e:b9:65:80:dd:0e:e6:10:01:87:dd:9b:cb:26:67:
                    e2:19:f2:ba:94:e8:21:df:ac:92:24:8c:0a:d2:0a:
                    cc:9d:7c:e8:02:0a:56:6e:03:8f:2a:51:31:66:26:
                    8b:14:72:8d:97:39:ba:66:eb:f9:62:4f:c1:ff:bb:
                    4e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D4:73:61:02:15:33:59:61:10:20:87:9E:A0:C0:45:27:E3:03:B5
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:80:a2:fb:e0:fd:6b:86:27:36:ea:65:eb:d3:bb:10:f9:ab:
         be:33:0a:2c:82:64:9b:c4:dc:0c:f8:2b:39:b9:1c:61:6d:64:
         08:b1:a6:bd:ba:9a:fb:2d:b8:f9:27:b9:7f:75:5c:2d:4f:43:
         38:aa:1d:3e:7e:b5:5d:57:31:b9:d8:9e:24:54:f2:0a:81:0a:
         93:f5:20:8d:d6:54:7e:5a:55:06:f0:cc:dc:61:75:32:c7:dc:
         2f:a1:4c:87:a5:0f:75:d1:54:4b:97:35:3a:bf:e9:29:b4:23:
         62:af:0e:d9:fd:05:2d:3a:3c:56:0f:6f:57:ee:64:dd:d7:8c:
         ed:0e:4f:9c:0b:f9:6e:7d:06:8a:52:12:bd:bf:6f:2e:fb:49:
         3c:49:92:b4:39:11:c0:e6:25:69:19:c6:a1:55:55:bd:9f:14:
         00:f7:44:84:f4:e3:0b:b0:8e:a2:23:0e:c2:6a:73:a6:41:80:
         79:51:c9:4c:49:8f:04:1d:5c:6c:08:ea:d8:d5:76:d3:7d:cb:
         60:fc:c9:45:c1:d2:d0:1c:64:5f:ae:45:10:cb:49:23:94:e6:
         f0:a0:53:dd:50:2a:86:38:12:83:c1:c0:60:be:e6:67:ba:fb:
         52:f6:50:54:2d:a1:38:83:9b:ec:37:2c:41:0c:8d:b0:c9:9c:
         45:a4:25:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 09:25:20 2026 by rpki-client