Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
File:                     ERRf3gGvgQdg7mG881TPlirEYNk.mft (raw, json)
Hash identifier:          TmXlRB0IJcWQCQvPOxaKc6pxYBWKDXO2yVU0EpVY28w=
Subject key identifier:   F4:D3:3D:06:39:CC:35:F8:64:8C:24:EE:21:A1:B0:64:9B:55:86:58
Authority key identifier: 11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
Certificate issuer:       /CN=11145fde01af810760ee61bcf354cf962ac460d9
Certificate serial:       01A120C052DF7DC439C25E4D47EDC6585CEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
Manifest number:          12FD
Signing time:             Fri 09 Oct 2026 13:00:37 +0000
Manifest this update:     Fri 09 Oct 2026 13:00:37 +0000
Manifest next update:     Sat 10 Oct 2026 13:00:37 +0000
Files and hashes:         1: ERRf3gGvgQdg7mG881TPlirEYNk.crl (hash: kfUEX9ctpvIa8EGs/kW5QvL54caCHhw90knNwCGaODw=)
                          2: Hyuuk77aXVuDiZApqxvQdHAqv1c.roa (hash: kj5MrWTwW/9CXEtRL1jC4+VD3V1e9sFAl7gGS1hXkNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:20:c0:52:df:7d:c4:39:c2:5e:4d:47:ed:c6:58:5c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11145fde01af810760ee61bcf354cf962ac460d9
        Validity
            Not Before: Oct  9 13:00:37 2026 GMT
            Not After : Oct 10 13:00:37 2026 GMT
        Subject: CN=f4d33d0639cc35f8648c24ee21a1b0649b558658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:97:8d:26:82:10:15:6a:50:9b:bf:b3:61:f1:
                    18:06:81:63:74:4b:35:6b:73:e0:6e:de:55:b7:8c:
                    53:67:d2:1e:18:ec:fa:b9:92:13:81:1e:c4:47:ac:
                    81:f0:c3:de:e5:cb:9f:24:1a:46:78:3f:16:f5:41:
                    64:85:ec:fd:12:4d:f2:23:59:b7:f2:bf:b1:3a:e4:
                    52:51:7e:d5:c2:89:64:4e:39:05:9e:ca:a3:27:46:
                    d6:e4:39:87:ed:e6:38:7e:3d:b1:64:72:82:c0:51:
                    06:c7:f6:b9:1e:54:aa:94:9e:93:e5:23:05:fb:30:
                    50:85:5e:87:a8:5b:db:2a:0a:28:6c:cd:50:9d:f5:
                    18:89:0a:bd:71:53:9d:ca:9a:a8:50:07:29:77:c8:
                    a9:4a:c3:2f:0b:a0:b2:e1:74:f7:cf:00:3f:cc:4a:
                    43:e0:fe:6e:31:93:74:1c:40:dc:00:15:2d:29:ca:
                    e0:c6:f7:5a:cb:0b:1a:6a:ea:6c:7b:d1:de:18:f3:
                    7c:26:64:c8:b5:d0:e5:6a:79:1b:e2:00:69:a2:35:
                    0e:f8:85:c4:63:f7:4e:69:72:12:45:f5:5c:47:2d:
                    60:c8:d8:96:70:1e:a3:45:26:c8:ed:f1:a1:66:f6:
                    16:b8:ae:72:a2:34:10:7b:5c:9d:3d:b4:4f:a6:66:
                    44:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D3:3D:06:39:CC:35:F8:64:8C:24:EE:21:A1:B0:64:9B:55:86:58
            X509v3 Authority Key Identifier:
                keyid:11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:06:7e:6c:08:73:0c:70:ba:78:10:16:e4:03:bb:21:a0:2d:
         c0:ce:49:49:c8:d8:0d:1a:e9:dc:10:12:db:c8:15:2c:5a:33:
         23:8d:c1:3c:2b:c3:25:aa:c9:73:87:af:8d:2f:07:51:43:e5:
         87:ae:bc:3d:ef:18:06:27:8c:43:47:10:9b:85:2b:86:f7:87:
         dc:01:d2:aa:62:ef:0c:a1:7c:a5:a2:18:7b:84:06:6f:91:67:
         c7:86:e3:fa:af:ed:3e:f5:77:7d:97:71:58:a5:f4:3d:d9:76:
         7f:7a:74:8d:b6:7a:38:57:f6:f2:a2:1f:c4:e3:c2:8c:92:5a:
         cb:3e:ee:d3:35:6f:a3:84:21:10:2c:29:93:4d:d1:68:37:90:
         de:1f:f1:d8:e6:4b:45:65:2a:5f:79:dd:5e:85:c9:aa:cc:ae:
         74:03:b9:f0:48:fe:2a:0d:30:02:36:de:44:11:2b:0d:4e:11:
         83:52:80:9b:f8:e8:8f:62:e5:0b:3f:fc:57:f2:7f:db:4b:a9:
         50:14:57:40:56:a8:e1:7e:76:60:49:1c:ca:86:52:23:92:df:
         1c:7e:b3:46:49:f0:99:88:b2:64:c6:24:35:ef:fd:aa:37:76:
         70:ed:f4:f0:c1:9b:8a:dd:1f:9b:b8:ea:1d:10:22:5e:1e:93:
         d6:da:cc:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEgwFLffcQ5wl5NR+3GWFzrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTQ1ZmRlMDFhZjgxMDc2MGVlNjFiY2YzNTRjZjk2MmFj
NDYwZDkwHhcNMjYxMDA5MTMwMDM3WhcNMjYxMDEwMTMwMDM3WjAzMTEwLwYDVQQD
EyhmNGQzM2QwNjM5Y2MzNWY4NjQ4YzI0ZWUyMWExYjA2NDliNTU4NjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25eNJoIQFWpQm7+zYfEYBoFjdEs1
a3Pgbt5Vt4xTZ9IeGOz6uZITgR7ER6yB8MPe5cufJBpGeD8W9UFkhez9Ek3yI1m3
8r+xOuRSUX7VwolkTjkFnsqjJ0bW5DmH7eY4fj2xZHKCwFEGx/a5HlSqlJ6T5SMF
+zBQhV6HqFvbKgoobM1QnfUYiQq9cVOdypqoUAcpd8ipSsMvC6Cy4XT3zwA/zEpD
4P5uMZN0HEDcABUtKcrgxvdaywsaaupse9HeGPN8JmTItdDlankb4gBpojUO+IXE
Y/dOaXISRfVcRy1gyNiWcB6jRSbI7fGhZvYWuK5yojQQe1ydPbRPpmZE4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTTPQY5zDX4ZIwk7iGhsGSbVYZYMB8GA1UdIwQY
MBaAFBEUX94Br4EHYO5hvPNUz5YqxGDZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJSZjNnR3ZnUWRnN21HODgxVFBsaXJFWU5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9hNDNmNzktZjcyOC00NjQ1LWE3MWUt
YzMwNWM4ZDlhMzE5LzEvRVJSZjNnR3ZnUWRnN21HODgxVFBsaXJFWU5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9hNDNmNzktZjcyOC00NjQ1LWE3MWUtYzMwNWM4ZDlhMzE5
LzEvRVJSZjNnR3ZnUWRnN21HODgxVFBsaXJFWU5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAZ+bAhz
DHC6eBAW5AO7IaAtwM5JScjYDRrp3BAS28gVLFozI43BPCvDJarJc4evjS8HUUPl
h668Pe8YBieMQ0cQm4UrhveH3AHSqmLvDKF8paIYe4QGb5Fnx4bj+q/tPvV3fZdx
WKX0Pdl2f3p0jbZ6OFf28qIfxOPCjJJayz7u0zVvo4QhECwpk03RaDeQ3h/x2OZL
RWUqX3ndXoXJqsyudAO58Ej+Kg0wAjbeRBErDU4Rg1KAm/joj2LlCz/8V/J/20up
UBRXQFao4X52YEkcyoZSI5LfHH6zRknwmYiyZMYkNe/9qjd2cO308MGbit0fm7jq
HRAiXh6T1trMrw==
-----END CERTIFICATE-----
Generated at Fri Oct 9 21:03:37 2026 by rpki-client