Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
File:                     Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft (raw, json)
Hash identifier:          qvsbQnr9+4OA8LNNYrossFjTLbPu3P0rnyzUjxUG/6k=
Subject key identifier:   C4:3E:3F:0B:CB:E1:57:80:10:3D:C5:E5:E3:13:A2:57:F7:1B:ED:07
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Certificate issuer:       /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial:       019F8E345B959647E4A382F7019B4082CF0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
Manifest number:          0946
Signing time:             Thu 23 Jul 2026 09:00:23 +0000
Manifest this update:     Thu 23 Jul 2026 09:00:23 +0000
Manifest next update:     Fri 24 Jul 2026 09:00:23 +0000
Files and hashes:         1: 6RGW9FHC1xpyf6wgXfv_Eu_s6uU.roa (hash: 6vhjvZr3Kb+sylEayrM6AVgYe9A0exMXL5Q6uA9ZfJU=)
                          2: 79S97sh77TUY_ErUyiX3p8rKe3w.roa (hash: LEhB0OtYTizcbBHkerXjTJ1lt8uSH6AUULDTX50iSM0=)
                          3: 7WCK9V1amL7VfvRQvmwfuLID77I.roa (hash: dSLJNNz7Yonxdt/qjaMstXNcLqH1Gi7MhACN+SvlT3Y=)
                          4: 8dN_y6FCHmSwh9zyOdGKc-Xa3Xc.roa (hash: AzOTxMcQLVwli/cilDsxwDkXYXmhghgIjsMcqtIyLUc=)
                          5: 9YMsNSl9uqbLQlhpMDCKts3pRbc.roa (hash: WgiyYz+dNNGuW/Et9LEhQWTMq/N/0yU1nPwcWEo5s64=)
                          6: A0BdIUg-tIB8xYgoBPkgZQEJZFM.roa (hash: vAFPQ7/zBwmd5lfN1DQPlwlOlVHsgUGVyWdvSmPAIkg=)
                          7: Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl (hash: JZwr1BfcQkJEJxunysaNzUos8tUa/LrfVjQmZL+/+qY=)
                          8: I_5lxzMWxk5Aopl0hXQj_WKgEyA.roa (hash: /gE5K6NhC2k5CWVY4m5yP/kklyPqncoXj/AGRLvfkHQ=)
                          9: KGz7A7bTE88v8gErdsKgHCUC2LI.roa (hash: +mLqNnbl4FhK35X4O0rVUkitsCTraJ0mv2xz6w3UBIQ=)
                          10: MbRan6OrTVgecR6FfgRRIDuxgPc.roa (hash: SlpR7LyUtBASFkbDWJJxH3uK9Z/DaHWNWAtgRxEYHi4=)
                          11: OESYnQ8L_1H2AfEG7VV509kAgPE.roa (hash: Jctl083IIiJh6niNEBCQQuzky5TCpmOUPtj0HXtKO5Q=)
                          12: QqeydQshq5wVgPFowaH8kSdulJE.roa (hash: yQTQIjYLygA4Mrk/w3xFYjqE+rMboxec1iCZjnDNzKc=)
                          13: R_cuxg4z9NiO0rwHOrSqofSaMMc.roa (hash: V1go2+jNZlz4sljszm+EGOwj91XAdgeWv3whnnNSU5k=)
                          14: TwHtCTFt01-DoJiRnIPLzu06kO0.roa (hash: DqST1n24LVvhbJfMGakXbLktGwWUU3tf5w7i5S+8aD4=)
                          15: UZKdyiYuEJgK1CXf4lhc7ZkfKPU.roa (hash: 2bdOr/wIOcULD+99fYfl0oPnDBufy+6gGb+f1589cJ0=)
                          16: YaXl0EyGIRJtUwVXEpmTyj4RbIM.roa (hash: UARP9ccmGAz/IxujWESaJ+gM6YXvbQBi7CqndR5OWns=)
                          17: Zi0NjMEtFw5voPHGZoxrA-l2oWA.roa (hash: rEeauSC/jqbljS/hWUZuNo4LDWDnXsLsoGbI9r4RZdo=)
                          18: clZodLAFWFzf94TZLnuJ0a-wAJo.asa (hash: VVttTdxIL6mPE72qJiimWHq833VONqQxL8m8fNbx8sY=)
                          19: dizEX_iSYkDBVGUBivY0AsRq6PU.roa (hash: NkNfYdAc55dCA+dXU/xichk+dhBdBm/+aZDwkRCWs98=)
                          20: es_0iYTgC8KGf6QVaGhwXVTE_MQ.roa (hash: w6H/ZpVUIMoSl/7OP/vOqQcfBns9Oiq1ViSqyP3gYPM=)
                          21: l3-NhbJzA_XVE-TmzzNypY-VV5c.roa (hash: ZUBG94tef4wB8hBuRGaTGpnWf6HCKUPgbpaFu4tpF7Q=)
                          22: lakZTlHlef4ahy1QkuLluXAniGU.roa (hash: UmkeThGihGm0QDSjkaY2uV8rXNRfz2AB7rrYZbO/0W8=)
                          23: m610dYqPqVXc5d6IQHjpHxMDUxc.roa (hash: hsCwEpAHBEjFxhnKmMwXYFpcZTvB5BeuJTVur+XGJvU=)
                          24: neYIYJF2wg6OgH6kUj7IKfFilY8.roa (hash: ry5xgcA92qzlZuKehBUAKzpu87W5MD4AyXHq3MrCGuk=)
                          25: remQI3vXY-CwDxRRv5Pj5NwA140.roa (hash: LH+kG9be4lJ6veGuO7nsYdrnjEkQS1MlDMWHJ7NAdZg=)
                          26: u0aooYk6vpPtd7DAaqhA5TCwqL8.roa (hash: jrpZh1EcyK9ynVBjFBbvxMjSEhlJo0Ta8D6EcHF8U7U=)
                          27: vit3FI0YIMfjDCvKP-WGp2Vf7C8.roa (hash: 4CxQdDOXcl5lKbs0eX2DlAuxNnLP4vZ7ksKuT8r2+Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 09:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:34:5b:95:96:47:e4:a3:82:f7:01:9b:40:82:cf:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
        Validity
            Not Before: Jul 23 09:00:23 2026 GMT
            Not After : Jul 24 09:00:23 2026 GMT
        Subject: CN=c43e3f0bcbe15780103dc5e5e313a257f71bed07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a3:3b:fc:05:70:0c:8b:ed:e0:11:47:81:75:
                    32:b0:e3:70:00:ac:11:5c:7e:78:66:70:3e:53:6d:
                    f6:8e:53:f3:d6:c7:71:ef:aa:e8:29:f2:4c:d0:f5:
                    a0:e9:13:55:b8:08:ac:5c:d5:27:e1:c9:91:49:b5:
                    4d:69:1c:bf:73:24:86:32:cb:5d:46:e7:d1:2b:a7:
                    50:50:23:95:e0:4d:83:31:b8:75:91:7c:ff:d0:da:
                    c5:38:60:a0:c1:4c:67:16:42:d2:15:2b:1c:f1:4e:
                    f1:71:3d:a5:df:79:61:9c:fd:92:ac:16:25:40:fc:
                    91:d7:cd:44:63:7e:95:42:3d:c9:65:5a:0b:62:27:
                    4b:b4:b5:cc:a6:a5:52:8a:a4:6f:8b:77:e4:16:60:
                    2a:ef:73:44:fd:a8:95:1c:65:f6:ee:ac:15:3e:8e:
                    7b:84:c4:a9:5c:12:06:33:64:c4:7b:22:7f:f2:26:
                    2e:40:38:6d:f7:ea:5c:62:c0:86:9a:90:fa:b9:9b:
                    5e:76:7a:ee:24:75:55:75:98:bb:1f:d8:17:71:fd:
                    85:cf:f3:b4:fe:42:b5:a8:14:be:6d:91:a5:2b:d7:
                    72:8b:57:74:21:53:78:bb:fe:78:71:39:c3:5b:a2:
                    60:9f:17:4f:05:8f:25:47:9c:75:21:36:b9:4e:8d:
                    86:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3E:3F:0B:CB:E1:57:80:10:3D:C5:E5:E3:13:A2:57:F7:1B:ED:07
            X509v3 Authority Key Identifier:
                keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:63:02:8e:0d:32:3d:7c:77:9c:23:6b:16:7c:3f:87:0c:82:
         4a:ad:de:03:7e:2c:2c:5f:ab:6e:53:af:f0:31:43:2f:8c:bc:
         be:09:d0:ee:e0:d4:40:66:29:b4:c6:77:de:c4:1d:29:90:d3:
         4e:e7:d3:35:62:44:15:b5:35:eb:32:0f:b3:25:09:5e:6a:50:
         20:6c:f5:ca:40:c2:c3:6b:7d:44:8a:b6:f9:cc:ca:b7:83:2b:
         93:75:79:b7:e9:8e:4e:45:d3:ff:ec:40:ec:c1:4a:04:bc:61:
         e2:ba:29:69:44:ef:17:45:1a:69:c5:d3:60:eb:dc:b8:19:e1:
         ca:75:9a:07:77:18:4c:c1:8f:fa:6e:ed:3d:09:f3:08:11:88:
         a4:ac:19:b8:f5:21:06:0f:4f:4a:79:30:e3:1a:6e:7d:eb:d7:
         8f:c3:8d:e8:0f:94:3b:2d:45:92:fc:01:f8:9e:eb:16:55:2d:
         6b:56:6d:5f:e3:a3:68:16:c6:e4:07:94:e4:d5:cf:e7:86:b0:
         27:d1:ea:d0:5b:c6:c2:ef:e2:8a:40:0d:f1:fd:f5:80:64:c8:
         e0:0e:f7:f5:1c:3b:bb:36:dd:7e:7e:d4:1c:82:1b:2f:ad:fb:
         5f:7a:4f:38:3d:ec:85:ac:3c:4c:84:ec:e5:9c:25:c2:a2:02:
         8b:f9:11:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ONFuVlkfko4L3AZtAgs8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx
YmM3N2YwHhcNMjYwNzIzMDkwMDIzWhcNMjYwNzI0MDkwMDIzWjAzMTEwLwYDVQQD
EyhjNDNlM2YwYmNiZTE1NzgwMTAzZGM1ZTVlMzEzYTI1N2Y3MWJlZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6M7/AVwDIvt4BFHgXUysONwAKwR
XH54ZnA+U232jlPz1sdx76roKfJM0PWg6RNVuAisXNUn4cmRSbVNaRy/cySGMstd
RufRK6dQUCOV4E2DMbh1kXz/0NrFOGCgwUxnFkLSFSsc8U7xcT2l33lhnP2SrBYl
QPyR181EY36VQj3JZVoLYidLtLXMpqVSiqRvi3fkFmAq73NE/aiVHGX27qwVPo57
hMSpXBIGM2TEeyJ/8iYuQDht9+pcYsCGmpD6uZtednruJHVVdZi7H9gXcf2Fz/O0
/kK1qBS+bZGlK9dyi1d0IVN4u/54cTnDW6JgnxdPBY8lR5x1ITa5To2GZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQ+PwvL4VeAED3F5eMTolf3G+0HMB8GA1UdIwQY
MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt
YWE2ZWQ0ZGFmYjNiLzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi
LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGMCjg0y
PXx3nCNrFnw/hwyCSq3eA34sLF+rblOv8DFDL4y8vgnQ7uDUQGYptMZ33sQdKZDT
TufTNWJEFbU16zIPsyUJXmpQIGz1ykDCw2t9RIq2+czKt4Mrk3V5t+mOTkXT/+xA
7MFKBLxh4ropaUTvF0UaacXTYOvcuBnhynWaB3cYTMGP+m7tPQnzCBGIpKwZuPUh
Bg9PSnkw4xpufevXj8ON6A+UOy1FkvwB+J7rFlUta1ZtX+OjaBbG5AeU5NXP54aw
J9Hq0FvGwu/iikAN8f31gGTI4A739Rw7uzbdfn7UHIIbL637X3pPOD3shaw8TITs
5ZwlwqICi/kRLA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:41 2026 by rpki-client