Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
File:                     ERAUzorTjRU1AJbVSe4cWAXQncg.mft (raw, json)
Hash identifier:          dK9Ny2MlFTcCcfUYoTox9hsAnmX0/piXiC75xRS03QM=
Subject key identifier:   99:6D:1A:4D:9A:E7:AD:2F:B5:E4:33:DC:7C:1F:88:DC:12:0B:82:41
Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
Certificate issuer:       /CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Certificate serial:       019D378956A41FB6D9194C77F5289AC67197
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 03:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:40 +0000
Files and hashes:         1: ERAUzorTjRU1AJbVSe4cWAXQncg.crl (hash: y3x04RIN6fow3OkMSRNCjq/8TxxLuIGqlHhxi59wAPI=)
                          2: ZPA0yTEgbeGTPx3uVMlT6oTLbXM.roa (hash: 1cNaYSmAVMmYxCmd/+BHA+BklNBA0EPt0mpd9OexoGk=)
                          3: eZKM8TJMYeLWEyu920Ld75NcinM.roa (hash: tmv3AASNUdy6CqfMaQz0xtQC6GhRK7nXqdtlIL9UhUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:56:a4:1f:b6:d9:19:4c:77:f5:28:9a:c6:71:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8
        Validity
            Not Before: Mar 29 03:00:40 2026 GMT
            Not After : Mar 30 03:00:40 2026 GMT
        Subject: CN=996d1a4d9ae7ad2fb5e433dc7c1f88dc120b8241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:16:dc:0d:3a:bf:57:f9:27:9b:a7:7a:e6:7e:
                    9d:1b:95:d7:df:71:11:20:94:88:e4:27:48:a1:85:
                    28:02:e0:06:fb:90:db:8e:7d:62:a1:58:37:5e:f9:
                    b8:44:3e:6a:ec:16:3a:82:d2:0a:84:d3:3e:8a:2b:
                    ca:67:67:12:aa:10:0d:a1:c3:3a:e1:f3:14:1c:aa:
                    99:33:f9:5f:5a:21:8f:4a:1e:88:e9:05:82:b0:d4:
                    91:49:83:ec:ad:29:ba:2b:d4:38:ce:bd:5c:95:5b:
                    3c:2e:49:e2:0b:b1:9c:cf:2e:f7:6c:39:31:9b:60:
                    f2:86:7d:d0:76:8e:8f:f4:76:8d:49:b0:67:99:15:
                    73:88:50:d3:94:0b:5a:fa:b8:b1:db:3e:db:c8:55:
                    e4:5a:bb:17:08:b6:19:e1:33:6a:e8:ea:1c:32:b5:
                    0f:13:e8:46:64:82:82:84:4f:d8:4e:d2:1d:60:12:
                    44:b7:cd:3f:a5:0e:1f:66:25:cc:a2:4c:b6:23:0c:
                    d5:a2:71:90:a5:61:65:d9:e1:cf:8d:ec:17:7c:e8:
                    97:0a:59:3a:33:15:18:ff:f4:47:d3:fc:23:3c:23:
                    94:4c:af:d6:3b:41:a3:85:15:6c:99:fe:df:4a:91:
                    7d:d1:36:96:43:90:88:ca:67:e2:2c:0e:8f:fd:28:
                    d1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6D:1A:4D:9A:E7:AD:2F:B5:E4:33:DC:7C:1F:88:DC:12:0B:82:41
            X509v3 Authority Key Identifier:
                keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:40:f0:bf:c0:f7:42:ee:99:da:6b:32:6a:4a:94:ff:43:8e:
         93:09:83:40:cc:c4:42:fd:14:88:a5:0e:7a:ba:b8:be:a6:43:
         f3:94:f8:62:da:c4:04:f2:7a:7c:5f:39:d6:b8:3b:70:12:a1:
         00:1d:a8:ae:75:00:ed:96:72:d3:1a:37:e7:be:a3:9c:0d:9f:
         be:dc:2c:0e:87:3f:b3:81:e2:fd:11:b5:f6:22:0c:16:2d:fc:
         96:a6:72:b1:16:d7:22:df:25:bf:ab:10:92:94:4c:22:36:99:
         9b:10:0a:36:6c:77:af:b5:2c:c1:7f:15:bd:f1:ad:c4:5d:90:
         43:b7:47:81:c7:b3:48:de:37:90:bd:f5:1b:19:54:8a:92:51:
         09:5f:00:aa:21:cf:e3:66:9a:af:ae:6a:3e:75:87:26:1a:39:
         17:a6:78:bc:dc:a7:40:3c:e9:42:36:a1:e8:23:47:22:ef:73:
         86:9c:77:67:f3:f6:79:86:cf:01:58:7d:65:17:2b:62:1f:e9:
         10:45:a3:4f:af:3a:3f:74:c9:ac:25:5f:d9:50:bf:59:27:88:
         95:7a:fb:5e:61:e0:01:fb:6d:02:77:8c:ad:1c:1d:11:c3:78:
         62:2c:6f:24:c0:e2:cd:a2:af:60:26:da:dc:44:b9:26:87:1e:
         2d:d7:ae:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:26 2026 by rpki-client