Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          YaLCke2oK2wtGMnKhowexOkwZfBuDG6VrHJU0FZF6hU=
Subject key identifier:   63:9E:21:9D:5A:F5:75:EC:42:04:E9:4F:37:C8:FB:F7:14:D2:61:CC
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       019D2695DC26AC924A7FB78F5761CBBD2258
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          07FD
Signing time:             Wed 25 Mar 2026 20:00:48 +0000
Manifest this update:     Wed 25 Mar 2026 20:00:48 +0000
Manifest next update:     Thu 26 Mar 2026 20:00:48 +0000
Files and hashes:         1: 6RGW9FHC1xpyf6wgXfv_Eu_s6uU.roa (hash: 6vhjvZr3Kb+sylEayrM6AVgYe9A0exMXL5Q6uA9ZfJU=)
                          2: 6W3PFSYqXuu3DVpLrOTVZguZ2N0.roa (hash: bgN/Wif1RDjqgtzhUIXOtx86/S164vOmljhvPEsaCa4=)
                          3: 79S97sh77TUY_ErUyiX3p8rKe3w.roa (hash: LEhB0OtYTizcbBHkerXjTJ1lt8uSH6AUULDTX50iSM0=)
                          4: 7WCK9V1amL7VfvRQvmwfuLID77I.roa (hash: dSLJNNz7Yonxdt/qjaMstXNcLqH1Gi7MhACN+SvlT3Y=)
                          5: 9YMsNSl9uqbLQlhpMDCKts3pRbc.roa (hash: WgiyYz+dNNGuW/Et9LEhQWTMq/N/0yU1nPwcWEo5s64=)
                          6: A0BdIUg-tIB8xYgoBPkgZQEJZFM.roa (hash: vAFPQ7/zBwmd5lfN1DQPlwlOlVHsgUGVyWdvSmPAIkg=)
                          7: CBS2cYZH0a1-EtTZe3IWAD6c-2g.roa (hash: aNpmaLz6DM8TbSPf9PeLDC2ZVCw6M60lBO00KmbqUys=)
                          8: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: Yg8Lc2Rq7+3Os93Ecjchryeh5O+4C8qNNrnrSer+s8o=)
                          9: I_5lxzMWxk5Aopl0hXQj_WKgEyA.roa (hash: /gE5K6NhC2k5CWVY4m5yP/kklyPqncoXj/AGRLvfkHQ=)
                          10: KGz7A7bTE88v8gErdsKgHCUC2LI.roa (hash: +mLqNnbl4FhK35X4O0rVUkitsCTraJ0mv2xz6w3UBIQ=)
                          11: MbRan6OrTVgecR6FfgRRIDuxgPc.roa (hash: SlpR7LyUtBASFkbDWJJxH3uK9Z/DaHWNWAtgRxEYHi4=)
                          12: NuVuQpaVYj5sGSuzNBVLP-7OEhQ.roa (hash: XsemG1a9ry3NgfMb3C0eGMoRV9inDwtSEqw5UJjMBMU=)
                          13: OESYnQ8L_1H2AfEG7VV509kAgPE.roa (hash: Jctl083IIiJh6niNEBCQQuzky5TCpmOUPtj0HXtKO5Q=)
                          14: QqeydQshq5wVgPFowaH8kSdulJE.roa (hash: yQTQIjYLygA4Mrk/w3xFYjqE+rMboxec1iCZjnDNzKc=)
                          15: R_cuxg4z9NiO0rwHOrSqofSaMMc.roa (hash: V1go2+jNZlz4sljszm+EGOwj91XAdgeWv3whnnNSU5k=)
                          16: TwHtCTFt01-DoJiRnIPLzu06kO0.roa (hash: DqST1n24LVvhbJfMGakXbLktGwWUU3tf5w7i5S+8aD4=)
                          17: Zi0NjMEtFw5voPHGZoxrA-l2oWA.roa (hash: rEeauSC/jqbljS/hWUZuNo4LDWDnXsLsoGbI9r4RZdo=)
                          18: dizEX_iSYkDBVGUBivY0AsRq6PU.roa (hash: NkNfYdAc55dCA+dXU/xichk+dhBdBm/+aZDwkRCWs98=)
                          19: es_0iYTgC8KGf6QVaGhwXVTE_MQ.roa (hash: w6H/ZpVUIMoSl/7OP/vOqQcfBns9Oiq1ViSqyP3gYPM=)
                          20: jZrRxArAkWsgIRXLzqXFJ2uzg1M.roa (hash: oQRjlCXEvb91V7QDXOTq59uWKq0mZjS4woUXREc+3oY=)
                          21: m610dYqPqVXc5d6IQHjpHxMDUxc.roa (hash: hsCwEpAHBEjFxhnKmMwXYFpcZTvB5BeuJTVur+XGJvU=)
                          22: remQI3vXY-CwDxRRv5Pj5NwA140.roa (hash: LH+kG9be4lJ6veGuO7nsYdrnjEkQS1MlDMWHJ7NAdZg=)
                          23: u0aooYk6vpPtd7DAaqhA5TCwqL8.roa (hash: jrpZh1EcyK9ynVBjFBbvxMjSEhlJo0Ta8D6EcHF8U7U=)
                          24: vit3FI0YIMfjDCvKP-WGp2Vf7C8.roa (hash: 4CxQdDOXcl5lKbs0eX2DlAuxNnLP4vZ7ksKuT8r2+Oc=)
                          25: wT4zBHWAKZXvAcKkyIUr6uRAbbA.roa (hash: ib0iHP7uE5Y5OML0Ye43R9IPy5aU8jLszDsAo4o8MLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:95:dc:26:ac:92:4a:7f:b7:8f:57:61:cb:bd:22:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Mar 25 20:00:48 2026 GMT
            Not After : Mar 26 20:00:48 2026 GMT
        Subject: CN=639e219d5af575ec4204e94f37c8fbf714d261cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:18:5f:7c:44:a1:ec:30:26:ec:98:e0:78:
                    e2:46:95:88:33:d0:40:5d:fa:4a:89:0d:f0:09:07:
                    27:69:4c:49:3e:52:94:b1:4c:5f:44:4f:ac:94:5e:
                    8d:c1:fb:6a:98:4e:cc:6b:19:14:df:cd:84:4e:54:
                    ea:66:1b:8a:52:97:b9:a8:60:fc:9a:1b:81:69:a1:
                    5f:3d:d5:28:30:c6:05:58:32:ec:ba:a5:5f:95:e3:
                    2f:c6:bb:13:83:73:d2:0d:c3:7a:bd:e8:61:dd:0b:
                    ac:bf:e3:35:e6:f1:00:17:a8:f5:c9:5a:f4:f2:92:
                    a9:46:c7:b5:db:2a:69:5a:a9:da:6c:de:ed:b8:a3:
                    f0:cf:a3:03:18:f3:2b:2d:d3:3c:ed:0c:c8:14:dd:
                    7c:b4:e2:ba:50:38:d9:af:57:fe:ec:ea:ff:e8:9d:
                    ed:c8:18:8b:78:b5:b5:1c:fa:67:5f:7b:0a:92:48:
                    12:b9:e5:47:5b:c1:28:4d:73:28:01:f2:b7:0a:00:
                    05:8b:10:ad:ee:d2:e0:d3:d4:0d:cf:b7:83:f4:58:
                    54:1f:ba:9a:b9:29:d5:58:22:14:48:bb:af:ee:67:
                    9e:2c:23:a4:5a:f0:2e:7b:6d:23:54:20:30:9c:66:
                    e4:2b:1d:ea:55:94:9d:07:53:0c:71:43:4d:38:e7:
                    b9:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9E:21:9D:5A:F5:75:EC:42:04:E9:4F:37:C8:FB:F7:14:D2:61:CC
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:4a:67:4b:77:30:89:15:1d:9e:ee:2e:af:e8:f1:c9:bf:11:
         35:19:69:41:fc:0e:ed:55:03:b5:d4:95:e1:a2:73:e8:88:de:
         d3:c4:63:e4:5a:11:fd:0b:f1:e8:e1:0a:01:65:5b:d0:82:77:
         08:c3:2d:7f:dd:50:6b:20:c7:aa:48:be:bd:3d:7e:d9:09:61:
         e0:d5:5c:4c:c6:e8:ad:e9:6f:52:18:45:70:9f:f8:bf:5a:ce:
         77:58:87:77:c2:a7:e0:c8:82:d2:72:4c:99:46:2f:a9:16:ba:
         76:75:9f:ea:64:63:76:80:f1:c8:74:35:35:43:92:ac:38:09:
         3e:5a:6b:24:dd:91:22:35:44:dc:32:06:36:ac:e0:d3:62:d1:
         d0:13:c4:97:d7:4f:11:f0:c5:41:00:3f:dc:03:a2:84:9f:6f:
         d3:1e:a4:4e:03:15:78:c3:1e:a8:76:1a:6f:8f:54:19:19:39:
         11:06:75:dc:02:fd:9f:83:7c:67:b3:84:5d:7b:0e:6a:c9:aa:
         d4:fb:66:3c:96:ca:a8:a3:f0:78:f1:b8:5c:43:c2:34:e0:6a:
         9a:2a:0e:09:b1:8c:62:a6:7e:74:f0:3f:50:6e:a5:91:3a:5c:
         02:99:43:6a:09:e0:ef:7f:f7:7b:74:94:0b:1e:d3:db:f9:52:
         89:1d:fd:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mldwmrJJKf7ePV2HLvSJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjYwMzI1MjAwMDQ4WhcNMjYwMzI2MjAwMDQ4WjAzMTEwLwYDVQQD
Eyg2MzllMjE5ZDVhZjU3NWVjNDIwNGU5NGYzN2M4ZmJmNzE0ZDI2MWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkAYX3xEoewwJuyY4HjiRpWIM9BA
XfpKiQ3wCQcnaUxJPlKUsUxfRE+slF6NwftqmE7MaxkU382ETlTqZhuKUpe5qGD8
mhuBaaFfPdUoMMYFWDLsuqVfleMvxrsTg3PSDcN6vehh3Qusv+M15vEAF6j1yVr0
8pKpRse12yppWqnabN7tuKPwz6MDGPMrLdM87QzIFN18tOK6UDjZr1f+7Or/6J3t
yBiLeLW1HPpnX3sKkkgSueVHW8EoTXMoAfK3CgAFixCt7tLg09QNz7eD9FhUH7qa
uSnVWCIUSLuv7meeLCOkWvAue20jVCAwnGbkKx3qVZSdB1MMcUNNOOe5wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOeIZ1a9XXsQgTpTzfI+/cU0mHMMB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0pnS3cw
iRUdnu4ur+jxyb8RNRlpQfwO7VUDtdSV4aJz6Ije08Rj5FoR/Qvx6OEKAWVb0IJ3
CMMtf91QayDHqki+vT1+2Qlh4NVcTMborelvUhhFcJ/4v1rOd1iHd8Kn4MiC0nJM
mUYvqRa6dnWf6mRjdoDxyHQ1NUOSrDgJPlprJN2RIjVE3DIGNqzg02LR0BPEl9dP
EfDFQQA/3AOihJ9v0x6kTgMVeMMeqHYab49UGRk5EQZ13AL9n4N8Z7OEXXsOasmq
1PtmPJbKqKPwePG4XEPCNOBqmioOCbGMYqZ+dPA/UG6lkTpcAplDagng73/3e3SU
Cx7T2/lSiR39kg==
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:37:03 2026 by rpki-client