Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
File:                     ERRf3gGvgQdg7mG881TPlirEYNk.mft (raw, json)
Hash identifier:          VwD/rnNGnXvo01jbJDi3WK/VZfgB1mU60wf+G3iMXnU=
Subject key identifier:   0B:5C:E4:38:C3:0B:18:12:59:32:31:B8:3B:71:12:60:0F:3E:40:D3
Authority key identifier: 11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9
Certificate issuer:       /CN=11145fde01af810760ee61bcf354cf962ac460d9
Certificate serial:       019E2023E9ECE2BA52ACD483B65E92ED6FA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
Manifest number:          116F
Signing time:             Wed 13 May 2026 07:01:24 +0000
Manifest this update:     Wed 13 May 2026 07:01:24 +0000
Manifest next update:     Thu 14 May 2026 07:01:24 +0000
Files and hashes:         1: ERRf3gGvgQdg7mG881TPlirEYNk.crl (hash: nW9on8FLOFS42Bjo54SXJ/Xxikma5cqaqYvKHGgFU0c=)
                          2: Hyuuk77aXVuDiZApqxvQdHAqv1c.roa (hash: kj5MrWTwW/9CXEtRL1jC4+VD3V1e9sFAl7gGS1hXkNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:23:e9:ec:e2:ba:52:ac:d4:83:b6:5e:92:ed:6f:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11145fde01af810760ee61bcf354cf962ac460d9
        Validity
            Not Before: May 13 07:01:24 2026 GMT
            Not After : May 14 07:01:24 2026 GMT
        Subject: CN=0b5ce438c30b1812593231b83b7112600f3e40d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a7:e1:b3:7b:3d:b3:77:fb:78:a9:2b:d3:21:
                    64:02:cc:7a:34:19:f8:b6:74:4d:64:f7:00:1e:1f:
                    ca:16:b7:e9:cb:7a:57:b1:ba:fc:05:90:6c:da:07:
                    ba:ed:25:41:8f:c6:6e:6b:42:d5:18:5e:63:86:30:
                    aa:67:23:20:0f:77:21:1d:92:62:43:aa:8d:4b:a7:
                    94:80:b2:46:d9:0c:c1:aa:88:56:13:98:e9:3e:f7:
                    03:8e:b0:a2:ef:f4:93:1e:d1:e5:10:af:a2:fb:bb:
                    7e:c3:72:f7:08:c5:e6:f2:cb:1d:dd:57:4b:ba:1c:
                    c1:a4:cb:d3:99:f1:7f:05:e5:f4:3b:5d:4c:e7:0a:
                    8a:3c:29:98:08:27:de:4b:bf:a7:ea:5c:46:07:4b:
                    66:1f:77:3c:37:97:4e:ac:66:f6:f1:5c:56:fd:e9:
                    b7:a4:45:5a:ab:d6:2a:6b:bc:3d:ef:ba:ba:bb:ff:
                    44:17:fd:de:7e:ec:22:55:ee:cd:72:9e:75:06:f7:
                    11:5b:ae:ed:d5:23:60:66:db:f3:06:a1:f0:a4:8d:
                    20:c4:37:41:36:f8:cf:f8:1b:c8:fa:4f:14:a3:8a:
                    20:07:79:ff:91:ce:7d:7e:f7:85:fb:bd:4c:36:32:
                    bc:a4:1e:5c:3e:fe:d0:d2:79:8d:38:51:83:42:a8:
                    51:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5C:E4:38:C3:0B:18:12:59:32:31:B8:3B:71:12:60:0F:3E:40:D3
            X509v3 Authority Key Identifier:
                keyid:11:14:5F:DE:01:AF:81:07:60:EE:61:BC:F3:54:CF:96:2A:C4:60:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERRf3gGvgQdg7mG881TPlirEYNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/a43f79-f728-4645-a71e-c305c8d9a319/1/ERRf3gGvgQdg7mG881TPlirEYNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c4:74:ee:60:50:49:87:74:b9:9a:bd:fa:23:b6:03:9a:0b:
         c5:05:05:59:c8:6d:32:82:cd:a6:e7:3b:0f:87:45:61:f2:33:
         c3:d4:7a:9f:9e:ab:9d:3e:d1:6e:02:6c:3f:3c:c2:90:79:c2:
         47:3b:55:df:a6:27:01:91:bc:f9:14:18:46:d2:12:0e:73:31:
         be:a0:05:a3:f9:d3:0c:3e:f1:44:33:d6:c7:ac:39:aa:cf:18:
         5d:c2:92:c8:65:ea:65:b8:f6:02:c6:0e:55:99:89:1d:94:fc:
         a9:fe:ab:83:de:6b:f0:65:03:12:7d:ed:91:7c:78:0b:b2:d4:
         14:9f:69:01:47:85:ed:44:85:b3:d9:e9:d0:10:fb:fb:41:04:
         ff:59:22:f6:7e:7b:61:3d:aa:da:71:e8:eb:10:3b:14:c8:4b:
         5c:71:75:27:a2:1b:c1:64:4b:64:ff:d9:58:f0:e4:f6:0c:c3:
         d2:9c:52:f7:c3:16:95:80:13:c9:fd:02:9b:94:bc:b4:0a:b2:
         93:fb:26:2a:ca:fe:88:ac:34:6d:3f:1a:5c:82:f9:2f:7d:bc:
         93:86:71:fb:d9:59:62:2d:9e:8b:b4:4a:ad:5f:3a:1e:57:76:
         79:9b:f4:c0:b4:8c:07:f1:b6:81:11:d4:7a:96:d9:39:d3:72:
         55:11:b9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:22:58 2026 by rpki-client