Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
File:                     ERJUBMbdRy8QAe2f_fcmdirHcB0.mft (raw, json)
Hash identifier:          iecjQMEwmFRgRAeIFRaUao59WDZnCsF/LQylnhN4ASU=
Subject key identifier:   22:DF:1D:7C:85:C7:BE:F6:3A:59:5F:5A:E4:CA:93:7C:70:24:DC:1E
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Certificate issuer:       /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial:       019DE9A371A8446FF9C928B30348F4B88CCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
Manifest number:          053B
Signing time:             Sat 02 May 2026 17:01:35 +0000
Manifest this update:     Sat 02 May 2026 17:01:35 +0000
Manifest next update:     Sun 03 May 2026 17:01:35 +0000
Files and hashes:         1: 4c4lZly6HHaIn3VNqVSoI3aAMWg.roa (hash: PBhbI3oOnr9sdruKclXaXP1waBkJYiKgXCoZi2kNPsg=)
                          2: B033U8I90D9nbSqVDxG_vYMVGDE.roa (hash: RVPeY+Z8B+B/KYBUq3T2NRT96vo4mWrRs3gtPw92Sfc=)
                          3: DESLe4b52-By8QEWuPrBB3D08fA.roa (hash: Z1TnS92MbXYaGPJmmAihKiNu6ivlSoreA5OQ5gkks8I=)
                          4: ERJUBMbdRy8QAe2f_fcmdirHcB0.crl (hash: T3rrJJ4VfiqfP1KsTaAPHMqNtjpM+fIq65xR4HHGXRc=)
                          5: O7GDt8dKw3fKOEif7-xxv83MkX8.roa (hash: kfZgqTcN9/pOm+4VrhF+ketnsnk9Jw6GuPo/q4is8H0=)
                          6: VxlMtp46aGtX4_VrPgDQ6HvQbdE.roa (hash: W9RNPArWYdSPLq6QU2Lw7aPUbOCgd4YoDKP5U/vqtdY=)
                          7: gIV-PtLXLT4xOhl2M8ZDrRWJN2c.roa (hash: ez0j8r5ZrGXHsarz1DHJ3c6wCD32BsWkJMkUor30YR4=)
                          8: skB-Hezp9u6dMSW47ypzkcQMALM.roa (hash: 7DCWoB2xt0+UZjjo6BwRXpvUHyGYHyqHkNc8BdIa858=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 03 May 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:e9:a3:71:a8:44:6f:f9:c9:28:b3:03:48:f4:b8:8c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
        Validity
            Not Before: May  2 17:01:35 2026 GMT
            Not After : May  3 17:01:35 2026 GMT
        Subject: CN=22df1d7c85c7bef63a595f5ae4ca937c7024dc1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:af:c5:80:3b:45:b4:dc:7b:b7:9f:30:5c:21:
                    3e:ab:3e:6e:60:e3:fa:4d:b5:a2:f4:14:f1:55:17:
                    e0:d3:cd:d1:95:c5:b3:5e:9b:34:24:9e:69:55:0f:
                    8d:79:a0:3c:c3:4a:19:c9:d7:78:df:52:bd:28:62:
                    db:fb:87:42:b8:12:71:64:8f:e2:5b:c2:05:55:f6:
                    95:56:7b:75:12:12:3e:30:16:26:b0:8d:5c:7b:91:
                    73:e0:22:51:e2:50:df:c5:f9:41:9c:e9:dd:85:e6:
                    12:2d:11:0d:b8:4c:13:ea:8f:8b:1b:71:b2:fb:cb:
                    86:89:0a:55:b5:07:da:e0:1d:26:3c:9f:13:a0:b1:
                    90:4a:46:88:56:db:94:12:ba:43:6e:6d:ae:c0:cd:
                    78:2d:b8:a8:38:f7:48:69:8e:43:7e:4c:cc:8e:04:
                    cd:37:6d:7f:74:96:b5:d4:22:1b:1b:3f:4a:2c:7b:
                    a7:7f:b9:8b:df:d7:6e:75:aa:63:c4:5c:70:29:5a:
                    67:19:7b:d7:f0:7c:ae:cd:fa:1b:09:8d:12:21:9a:
                    1b:b8:e6:f3:81:b7:ac:7d:67:4a:27:e9:96:bb:a3:
                    ba:e5:b9:4f:cb:89:50:68:e5:7e:44:d2:3c:cb:7e:
                    e5:4e:25:aa:02:96:60:6d:5d:d7:a3:f0:c6:83:53:
                    8d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DF:1D:7C:85:C7:BE:F6:3A:59:5F:5A:E4:CA:93:7C:70:24:DC:1E
            X509v3 Authority Key Identifier:
                keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ba:a8:b7:ea:3f:f0:30:26:ae:d8:5f:cc:3f:fb:ad:ea:c9:
         29:03:aa:63:75:13:ec:02:b3:56:c6:d4:a4:7b:c3:a9:ef:9f:
         0c:16:1a:19:51:f7:50:40:fa:90:31:7a:ec:64:1f:cb:cd:64:
         0b:11:8d:d1:96:ea:7d:a5:8d:cd:75:c3:28:9c:01:a0:63:e6:
         54:0a:ed:86:63:f9:f4:03:5d:bd:3d:34:01:4d:85:c0:6d:48:
         8e:0e:37:bb:d8:09:4a:5d:8e:b0:6b:66:74:d5:1f:70:c1:5e:
         5c:ac:1f:aa:40:b4:28:b0:9f:db:df:9f:d3:6d:48:e2:24:63:
         45:a2:cf:b9:47:f5:0e:e8:d2:89:5e:b4:77:12:b1:0b:f8:d3:
         33:ec:bc:f3:c3:78:46:69:a2:01:ab:79:8b:c5:00:ed:cc:11:
         9b:d4:ca:9a:fc:b7:aa:c4:23:5b:7b:ff:da:c2:88:dd:45:b3:
         ba:b4:27:96:0e:47:06:6e:c5:6b:0b:f9:44:34:1a:7a:56:8f:
         45:6f:df:ae:b5:f8:d5:3b:cc:46:b8:b8:e1:42:76:69:6d:4c:
         ab:22:ee:2f:15:8b:2a:2f:d5:1b:59:e8:e4:19:a1:fb:47:28:
         61:de:03:4c:46:f4:f9:7d:81:36:3d:11:ab:17:ba:34:26:17:
         a5:c9:68:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 20:13:34 2026 by rpki-client