Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          pz3Y8yFVz9ydu6J4/RKR+8sMAuxyd7Y5cHOQdfQXcHM=
Subject key identifier:   96:11:CD:7D:EC:F1:A5:37:F8:24:2C:1B:AB:E5:9F:47:FF:83:51:E3
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       019DAF0ECE5928FDBBFEAA1BEEA900D2A6A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          0846
Signing time:             Tue 21 Apr 2026 08:01:16 +0000
Manifest this update:     Tue 21 Apr 2026 08:01:16 +0000
Manifest next update:     Wed 22 Apr 2026 08:01:16 +0000
Files and hashes:         1: 6RGW9FHC1xpyf6wgXfv_Eu_s6uU.roa (hash: 6vhjvZr3Kb+sylEayrM6AVgYe9A0exMXL5Q6uA9ZfJU=)
                          2: 6W3PFSYqXuu3DVpLrOTVZguZ2N0.roa (hash: bgN/Wif1RDjqgtzhUIXOtx86/S164vOmljhvPEsaCa4=)
                          3: 79S97sh77TUY_ErUyiX3p8rKe3w.roa (hash: LEhB0OtYTizcbBHkerXjTJ1lt8uSH6AUULDTX50iSM0=)
                          4: 7WCK9V1amL7VfvRQvmwfuLID77I.roa (hash: dSLJNNz7Yonxdt/qjaMstXNcLqH1Gi7MhACN+SvlT3Y=)
                          5: 9YMsNSl9uqbLQlhpMDCKts3pRbc.roa (hash: WgiyYz+dNNGuW/Et9LEhQWTMq/N/0yU1nPwcWEo5s64=)
                          6: A0BdIUg-tIB8xYgoBPkgZQEJZFM.roa (hash: vAFPQ7/zBwmd5lfN1DQPlwlOlVHsgUGVyWdvSmPAIkg=)
                          7: CBS2cYZH0a1-EtTZe3IWAD6c-2g.roa (hash: aNpmaLz6DM8TbSPf9PeLDC2ZVCw6M60lBO00KmbqUys=)
                          8: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: 0MJlOdwEp5Rko4OlNT8Ae78ovMgUZK6ESP9g+CcZemo=)
                          9: I_5lxzMWxk5Aopl0hXQj_WKgEyA.roa (hash: /gE5K6NhC2k5CWVY4m5yP/kklyPqncoXj/AGRLvfkHQ=)
                          10: KGz7A7bTE88v8gErdsKgHCUC2LI.roa (hash: +mLqNnbl4FhK35X4O0rVUkitsCTraJ0mv2xz6w3UBIQ=)
                          11: MbRan6OrTVgecR6FfgRRIDuxgPc.roa (hash: SlpR7LyUtBASFkbDWJJxH3uK9Z/DaHWNWAtgRxEYHi4=)
                          12: OESYnQ8L_1H2AfEG7VV509kAgPE.roa (hash: Jctl083IIiJh6niNEBCQQuzky5TCpmOUPtj0HXtKO5Q=)
                          13: QqeydQshq5wVgPFowaH8kSdulJE.roa (hash: yQTQIjYLygA4Mrk/w3xFYjqE+rMboxec1iCZjnDNzKc=)
                          14: R_cuxg4z9NiO0rwHOrSqofSaMMc.roa (hash: V1go2+jNZlz4sljszm+EGOwj91XAdgeWv3whnnNSU5k=)
                          15: TwHtCTFt01-DoJiRnIPLzu06kO0.roa (hash: DqST1n24LVvhbJfMGakXbLktGwWUU3tf5w7i5S+8aD4=)
                          16: Zi0NjMEtFw5voPHGZoxrA-l2oWA.roa (hash: rEeauSC/jqbljS/hWUZuNo4LDWDnXsLsoGbI9r4RZdo=)
                          17: Zpf8k-utZ-y-8MYwY4-BPJIVrfk.roa (hash: JsgAAgOYUgJpttWHw6EFU/CdhVAm1YhdTwLSh0mwz1o=)
                          18: dizEX_iSYkDBVGUBivY0AsRq6PU.roa (hash: NkNfYdAc55dCA+dXU/xichk+dhBdBm/+aZDwkRCWs98=)
                          19: es_0iYTgC8KGf6QVaGhwXVTE_MQ.roa (hash: w6H/ZpVUIMoSl/7OP/vOqQcfBns9Oiq1ViSqyP3gYPM=)
                          20: m610dYqPqVXc5d6IQHjpHxMDUxc.roa (hash: hsCwEpAHBEjFxhnKmMwXYFpcZTvB5BeuJTVur+XGJvU=)
                          21: remQI3vXY-CwDxRRv5Pj5NwA140.roa (hash: LH+kG9be4lJ6veGuO7nsYdrnjEkQS1MlDMWHJ7NAdZg=)
                          22: th-pkYsabCtPHP7XSfMxlWWoLcc.roa (hash: 7JcEYA3oBFrQgm+OWdr61iqJwxaW+l4ViwD1FUIVuRI=)
                          23: u0aooYk6vpPtd7DAaqhA5TCwqL8.roa (hash: jrpZh1EcyK9ynVBjFBbvxMjSEhlJo0Ta8D6EcHF8U7U=)
                          24: uqsekWJuSw7r3Dya1ubkFFQwZ0A.roa (hash: uhPlLOwrh4dOokndyH8BP6ushq/h/noadcoE3Lt6ezI=)
                          25: vit3FI0YIMfjDCvKP-WGp2Vf7C8.roa (hash: 4CxQdDOXcl5lKbs0eX2DlAuxNnLP4vZ7ksKuT8r2+Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 08:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:af:0e:ce:59:28:fd:bb:fe:aa:1b:ee:a9:00:d2:a6:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Apr 21 08:01:16 2026 GMT
            Not After : Apr 22 08:01:16 2026 GMT
        Subject: CN=9611cd7decf1a537f8242c1babe59f47ff8351e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:05:62:e9:c1:08:e2:93:a0:61:20:43:b8:a1:
                    38:95:e2:e7:94:3c:56:08:0a:61:bb:ef:d9:c2:4c:
                    0e:67:ca:a8:68:4e:84:e7:ed:d6:80:84:5e:e6:db:
                    42:a7:0f:38:f5:7f:41:17:26:1e:83:29:bc:65:56:
                    e5:fd:61:25:6b:fe:46:40:b2:61:fa:c5:eb:68:df:
                    93:5c:14:d7:d9:f9:a4:76:34:21:4b:26:74:00:75:
                    ed:77:2c:e6:73:03:41:c2:76:81:0b:05:e3:f7:ca:
                    48:a0:84:80:66:48:83:a9:6c:42:23:d6:40:47:f5:
                    96:f4:ed:a2:23:bf:0a:0a:a4:35:c8:39:68:9d:9d:
                    31:ff:64:ea:9e:b7:cc:8c:c6:37:31:1b:7b:a3:06:
                    04:8c:ba:d9:0d:77:20:12:f5:a7:2c:e7:f6:3f:2e:
                    9a:c2:f7:ef:a2:5f:5c:22:5b:16:8e:3c:a7:b7:63:
                    3f:af:30:ce:27:1b:29:9a:63:30:e6:96:21:29:9a:
                    0e:43:c7:f3:25:36:79:42:f2:07:e8:a2:0c:8f:03:
                    cb:36:bb:ee:c9:27:4f:2e:2a:fe:66:03:70:fe:21:
                    a4:b0:6c:67:dd:d3:4d:b9:d9:88:cc:5d:12:17:2e:
                    c4:a8:94:34:0f:29:20:d0:43:16:9d:74:36:61:1c:
                    2b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:11:CD:7D:EC:F1:A5:37:F8:24:2C:1B:AB:E5:9F:47:FF:83:51:E3
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a8:3e:08:ce:c8:a2:e8:c1:5d:42:e0:3d:46:59:f0:00:10:
         8e:30:09:7c:ff:64:9b:5d:8c:c4:fb:d5:f6:2b:5e:db:69:2a:
         ce:cc:62:00:f0:8d:f3:0a:5b:b5:01:37:0a:ff:c5:47:e9:b3:
         fd:c9:57:7d:68:99:bf:18:b7:87:61:10:5e:1c:ed:e8:2f:74:
         f0:fb:d5:72:d2:3d:92:b9:bb:ae:13:c5:a2:e6:1d:8b:86:97:
         12:51:35:0c:a3:13:e9:93:83:73:5d:4b:89:a1:bd:2f:a9:50:
         14:54:d1:d4:8d:5d:71:ae:63:c0:5c:82:8a:8c:7c:e4:e4:de:
         e6:b8:d7:43:be:2a:d5:be:f5:94:da:7e:ef:3f:d2:04:3b:9e:
         45:e7:68:88:ad:df:ed:9b:8e:ef:30:f9:79:1a:ac:6f:69:b8:
         92:d2:b0:4f:65:0d:16:cc:97:45:f7:f6:d7:28:b1:3c:ef:06:
         97:da:73:ac:f5:6b:d7:8c:c2:47:68:3e:41:e4:81:47:4b:bf:
         02:4e:a0:64:36:ed:12:12:2f:a2:45:28:86:81:fe:38:37:68:
         42:74:4a:f5:fe:33:8f:57:3c:32:eb:cb:a5:c4:74:42:03:f4:
         d2:0f:5f:22:33:3a:8c:01:d8:27:bb:66:d1:81:55:c6:cc:40:
         5e:9b:59:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2vDs5ZKP27/qob7qkA0qapMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjYwNDIxMDgwMTE2WhcNMjYwNDIyMDgwMTE2WjAzMTEwLwYDVQQD
Eyg5NjExY2Q3ZGVjZjFhNTM3ZjgyNDJjMWJhYmU1OWY0N2ZmODM1MWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gVi6cEI4pOgYSBDuKE4leLnlDxW
CAphu+/ZwkwOZ8qoaE6E5+3WgIRe5ttCpw849X9BFyYegym8ZVbl/WEla/5GQLJh
+sXraN+TXBTX2fmkdjQhSyZ0AHXtdyzmcwNBwnaBCwXj98pIoISAZkiDqWxCI9ZA
R/WW9O2iI78KCqQ1yDlonZ0x/2TqnrfMjMY3MRt7owYEjLrZDXcgEvWnLOf2Py6a
wvfvol9cIlsWjjynt2M/rzDOJxspmmMw5pYhKZoOQ8fzJTZ5QvIH6KIMjwPLNrvu
ySdPLir+ZgNw/iGksGxn3dNNudmIzF0SFy7EqJQ0Dykg0EMWnXQ2YRwr7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYRzX3s8aU3+CQsG6vln0f/g1HjMB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKg+CM7I
oujBXULgPUZZ8AAQjjAJfP9km12MxPvV9ite22kqzsxiAPCN8wpbtQE3Cv/FR+mz
/clXfWiZvxi3h2EQXhzt6C908PvVctI9krm7rhPFouYdi4aXElE1DKMT6ZODc11L
iaG9L6lQFFTR1I1dca5jwFyCiox85OTe5rjXQ74q1b71lNp+7z/SBDueRedoiK3f
7ZuO7zD5eRqsb2m4ktKwT2UNFsyXRff21yixPO8Gl9pzrPVr14zCR2g+QeSBR0u/
Ak6gZDbtEhIvokUohoH+ODdoQnRK9f4zj1c8MuvLpcR0QgP00g9fIjM6jAHYJ7tm
0YFVxsxAXptZzw==
-----END CERTIFICATE-----
Generated at Tue Apr 21 16:13:07 2026 by rpki-client