Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
File:                     ERJUBMbdRy8QAe2f_fcmdirHcB0.mft (raw, json)
Hash identifier:          cX4ugQDjfCi+qvRbuXBQONZhwa2tZ7T+SWJ5BiRnZ+w=
Subject key identifier:   B0:8B:87:E0:A0:E7:73:64:25:7D:BD:23:F7:69:54:9C:98:69:A9:AB
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Certificate issuer:       /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial:       019D2B85225C9F1364017739DC083FF9A496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
Manifest number:          04D8
Signing time:             Thu 26 Mar 2026 19:00:38 +0000
Manifest this update:     Thu 26 Mar 2026 19:00:38 +0000
Manifest next update:     Fri 27 Mar 2026 19:00:38 +0000
Files and hashes:         1: 4c4lZly6HHaIn3VNqVSoI3aAMWg.roa (hash: PBhbI3oOnr9sdruKclXaXP1waBkJYiKgXCoZi2kNPsg=)
                          2: B033U8I90D9nbSqVDxG_vYMVGDE.roa (hash: RVPeY+Z8B+B/KYBUq3T2NRT96vo4mWrRs3gtPw92Sfc=)
                          3: DESLe4b52-By8QEWuPrBB3D08fA.roa (hash: Z1TnS92MbXYaGPJmmAihKiNu6ivlSoreA5OQ5gkks8I=)
                          4: ERJUBMbdRy8QAe2f_fcmdirHcB0.crl (hash: WFkb5Inph+EC7FkQUXQ25qfMSLNkWYHHCP7Ozds29NA=)
                          5: OgXQseKO3Ow7Mhh_xwXxqG0TMU8.roa (hash: GiPu825S6CpEgmzpgvr6bfnt5L9VQLAkTPxtvMZRAqk=)
                          6: gIV-PtLXLT4xOhl2M8ZDrRWJN2c.roa (hash: ez0j8r5ZrGXHsarz1DHJ3c6wCD32BsWkJMkUor30YR4=)
                          7: skB-Hezp9u6dMSW47ypzkcQMALM.roa (hash: 7DCWoB2xt0+UZjjo6BwRXpvUHyGYHyqHkNc8BdIa858=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:85:22:5c:9f:13:64:01:77:39:dc:08:3f:f9:a4:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
        Validity
            Not Before: Mar 26 19:00:38 2026 GMT
            Not After : Mar 27 19:00:38 2026 GMT
        Subject: CN=b08b87e0a0e77364257dbd23f769549c9869a9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ec:32:09:d3:3f:07:97:8a:e8:b4:09:a8:6b:
                    46:93:0f:81:19:e9:e0:a2:b3:6d:fc:f8:07:71:95:
                    df:e8:43:89:63:f5:80:49:14:ec:d3:4d:7a:dd:1e:
                    28:c0:d4:92:38:7b:69:b2:da:35:bd:49:d4:27:2c:
                    86:94:8d:57:a7:b4:3d:85:7b:ae:d5:86:57:94:00:
                    61:23:c1:70:8b:e9:65:6f:b1:a2:fd:4f:1c:dd:ba:
                    c6:79:66:05:5d:62:74:d7:2b:08:97:d8:a7:c9:6c:
                    8c:a5:db:f6:ab:5a:c5:16:6e:1d:b2:42:f3:8a:33:
                    df:4c:76:6b:2e:69:39:24:40:11:de:5e:c3:46:4d:
                    97:ca:47:b2:59:13:16:ea:38:73:6a:19:10:86:1a:
                    62:15:03:1f:d3:a7:bf:b3:72:7d:3a:0d:12:4c:ed:
                    3d:b5:41:dc:86:bd:d8:0a:b1:e9:1a:99:27:9a:c5:
                    c0:35:9d:74:a2:1e:e5:fd:cc:ac:a3:99:49:4e:a4:
                    b8:47:72:c2:b1:f1:36:47:73:8d:86:39:2e:e7:ff:
                    d2:53:9b:10:67:e6:aa:1a:d0:6c:c0:4d:d3:cc:71:
                    33:77:53:6a:bd:46:26:b4:1f:3b:81:2c:c9:23:25:
                    76:44:15:30:b8:61:33:a8:c3:40:6c:bf:14:9f:49:
                    c0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8B:87:E0:A0:E7:73:64:25:7D:BD:23:F7:69:54:9C:98:69:A9:AB
            X509v3 Authority Key Identifier:
                keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:48:84:3a:70:9c:05:bd:b0:c1:75:7c:22:3c:5b:1e:f8:64:
         5d:58:7d:a9:d7:7a:b9:2c:32:a7:57:7d:1a:83:5c:bc:ca:58:
         97:0e:0b:fc:e9:48:8c:08:74:ef:55:a8:7a:09:4d:c8:6d:6b:
         66:96:40:64:de:72:cb:7d:2c:82:c6:2a:d0:b2:4b:7c:7b:83:
         bf:1c:18:bc:e6:b1:83:d5:3b:ed:e5:d5:ec:19:24:a5:ad:17:
         af:40:25:45:ba:d2:af:9a:3d:c0:3e:1d:43:10:e2:7d:03:6d:
         ab:05:e6:98:33:82:04:1b:1a:ba:6a:1d:4e:e7:18:09:31:b7:
         19:9c:8f:82:2f:c1:49:de:89:9f:cf:83:ca:74:dc:b9:3c:97:
         80:29:88:61:b0:3e:0a:93:76:33:a9:6c:ef:2b:70:36:02:ab:
         69:11:6d:16:35:f6:5b:46:84:e9:85:15:ca:65:91:93:29:6d:
         00:35:88:d5:49:fa:e2:ad:15:70:aa:45:3a:7d:a2:cf:67:b7:
         52:d6:3d:24:d7:ca:a3:7e:b6:05:e2:11:fb:77:f8:df:b5:41:
         57:33:74:57:e4:91:5a:85:3d:a3:c9:40:1a:99:96:c8:b7:d9:
         fe:af:c8:7b:5d:a8:4d:89:3c:6c:79:bb:ae:ea:f6:60:1a:10:
         f4:e2:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:47:23 2026 by rpki-client