Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
File:                     ERJUBMbdRy8QAe2f_fcmdirHcB0.mft (raw, json)
Hash identifier:          JGKJ0aUWJoujb39cgGBj5IykjkBmswk4ElD0hUa0ze0=
Subject key identifier:   84:52:1F:CD:7C:F4:6E:71:AC:F0:2F:CE:FA:F2:EA:60:58:79:55:8D
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Certificate issuer:       /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial:       0198D5F14BF81C6C210F37B51E87A6D7228C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
Manifest number:          0297
Signing time:             Sat 23 Aug 2025 08:00:17 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:17 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:17 +0000
Files and hashes:         1: 0b5iGIeuo2DKMNvHl9YT-o9ecPk.roa (hash: /wSlkj/hp/zdqNdystfvelHxMMMnIXaQ57KuV+lO360=)
                          2: ERJUBMbdRy8QAe2f_fcmdirHcB0.crl (hash: MS9XATdcgS8e85b7sKfR/+eSkLNVEuVFd+s2iprBzzg=)
                          3: ODYY9AlzIZx0ieuJ78ib_t7PzDs.roa (hash: KSKzI9P0WUD8e51fYFO9/Pub+6R71g7f3EQIV1FBw9c=)
                          4: PJg6i8bSTOaaHuAf64uU7RgQ9X0.roa (hash: yqj+o3D869BdUEpdNxfbAfsWgWZ/Cc+Y5gzfpaAYQRA=)
                          5: RCUtTKBPBoSKR2wwa8B0W47XWEM.roa (hash: AEJlL4bhsHAgCbizEJxDPTW1T7XXa+3+vQvB/un6vPo=)
                          6: U-U_Tkm4xBBrlekFBtQjiXrIauU.roa (hash: 41TyEm79tZ+O3IraL+NOA9wwTefMXNRXTAYZJHoHXZs=)
                          7: daT_tlHA6Qk4P5c_mAKg_30bQto.roa (hash: 8QeryI1AvWB8IxUm5wUjKihb2jduD7+5c0+oE2ozl40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:4b:f8:1c:6c:21:0f:37:b5:1e:87:a6:d7:22:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
        Validity
            Not Before: Aug 23 08:00:17 2025 GMT
            Not After : Aug 24 08:00:17 2025 GMT
        Subject: CN=84521fcd7cf46e71acf02fcefaf2ea605879558d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:75:a1:ff:ef:a8:ca:14:a3:b9:38:19:15:e4:
                    c3:c4:fc:ce:59:9f:b0:cc:c1:32:88:98:04:78:91:
                    49:ea:0f:af:58:72:30:0e:61:24:2e:d2:9c:73:0d:
                    08:7d:7c:38:4d:39:9a:ae:bf:a8:f0:03:f7:45:c5:
                    3a:c6:14:65:c5:aa:bd:09:87:f3:70:6b:1b:f2:6c:
                    1f:ca:bf:54:9f:f8:65:20:f8:ec:ba:ec:49:25:c0:
                    2a:83:32:e1:03:e9:2d:de:ef:29:51:7f:80:71:e2:
                    91:d1:e4:0e:1c:4f:a0:14:8a:6d:4f:de:37:8d:41:
                    26:7c:cb:da:66:ec:1c:c7:26:b1:46:88:b6:12:17:
                    1d:f1:30:26:bb:fd:26:88:28:f0:3a:b5:25:7f:97:
                    e7:a2:db:62:06:55:3e:ec:90:5b:2e:61:25:18:7f:
                    52:dc:6d:5a:a7:db:ef:c5:25:ba:1d:db:25:67:be:
                    ea:c3:6e:67:12:e6:51:45:1c:a9:50:dd:6f:8b:86:
                    0d:9b:4d:51:a3:59:1e:34:b4:07:99:e4:e5:85:d2:
                    4a:f8:34:d4:c1:22:75:55:36:d6:4d:56:87:ff:6f:
                    9a:82:30:92:76:9b:ca:0a:45:51:79:7b:28:77:6f:
                    64:a5:e5:8f:27:7e:c7:db:f4:f1:cc:ee:c3:f6:86:
                    83:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:52:1F:CD:7C:F4:6E:71:AC:F0:2F:CE:FA:F2:EA:60:58:79:55:8D
            X509v3 Authority Key Identifier:
                keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ca:45:1b:d7:71:94:19:db:1a:21:8e:a4:e1:b6:c8:d0:d3:
         0e:5c:75:c9:5d:f3:10:ec:42:c9:28:16:51:24:5e:3c:c2:c7:
         0b:b0:1f:88:db:ac:60:85:c9:0c:5e:8a:fc:df:df:b5:15:b1:
         0a:8a:ca:c7:f0:13:05:07:a3:f2:a7:70:fc:8d:05:17:60:99:
         95:80:06:e5:ae:0a:a0:11:a4:8d:bb:f0:fb:60:6f:a8:bd:6d:
         b7:86:41:51:9f:bd:fa:6b:40:da:35:0d:4a:53:76:b7:8d:0a:
         4f:e0:c4:c6:31:56:22:21:31:66:42:3f:8a:92:5a:86:ef:eb:
         34:1c:d3:d7:7d:02:97:f1:b1:da:33:1e:2b:e2:dd:f2:28:93:
         28:f9:3b:06:07:cd:a0:80:08:ce:f6:4b:07:e0:a7:48:fa:f2:
         ac:c2:2b:e8:0a:a5:07:c9:d8:45:af:8e:8c:76:09:fb:46:80:
         45:30:ee:30:69:7b:dc:73:13:71:66:64:45:e6:4f:58:38:f4:
         e2:8a:4e:a1:6f:5c:e2:9f:23:e6:65:52:5e:f7:28:52:fd:69:
         13:f7:91:26:f8:35:f9:ea:ba:e0:88:7b:87:1d:da:85:38:3c:
         1f:5f:c7:e8:12:f6:2b:3c:30:36:ff:9b:6b:28:8b:9c:47:c2:
         c8:eb:3e:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8Uv4HGwhDze1Hoem1yKMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTI1NDA0YzZkZDQ3MmYxMDAxZWQ5ZmZkZjcyNjc2MmFj
NzcwMWQwHhcNMjUwODIzMDgwMDE3WhcNMjUwODI0MDgwMDE3WjAzMTEwLwYDVQQD
Eyg4NDUyMWZjZDdjZjQ2ZTcxYWNmMDJmY2VmYWYyZWE2MDU4Nzk1NThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXWh/++oyhSjuTgZFeTDxPzOWZ+w
zMEyiJgEeJFJ6g+vWHIwDmEkLtKccw0IfXw4TTmarr+o8AP3RcU6xhRlxaq9CYfz
cGsb8mwfyr9Un/hlIPjsuuxJJcAqgzLhA+kt3u8pUX+AceKR0eQOHE+gFIptT943
jUEmfMvaZuwcxyaxRoi2Ehcd8TAmu/0miCjwOrUlf5fnottiBlU+7JBbLmElGH9S
3G1ap9vvxSW6HdslZ77qw25nEuZRRRypUN1vi4YNm01Ro1keNLQHmeTlhdJK+DTU
wSJ1VTbWTVaH/2+agjCSdpvKCkVReXsod29kpeWPJ37H2/TxzO7D9oaDsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRSH8189G5xrPAvzvry6mBYeVWNMB8GA1UdIwQY
MBaAFBESVATG3UcvEAHtn/33JnYqx3AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYt
NmRmZTBmN2Q1M2JkLzEvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYtNmRmZTBmN2Q1M2Jk
LzEvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMpFG9dx
lBnbGiGOpOG2yNDTDlx1yV3zEOxCySgWUSRePMLHC7AfiNusYIXJDF6K/N/ftRWx
CorKx/ATBQej8qdw/I0FF2CZlYAG5a4KoBGkjbvw+2BvqL1tt4ZBUZ+9+mtA2jUN
SlN2t40KT+DExjFWIiExZkI/ipJahu/rNBzT130Cl/Gx2jMeK+Ld8iiTKPk7BgfN
oIAIzvZLB+CnSPryrMIr6AqlB8nYRa+OjHYJ+0aARTDuMGl73HMTcWZkReZPWDj0
4opOoW9c4p8j5mVSXvcoUv1pE/eRJvg1+eq64Ih7hx3ahTg8H1/H6BL2KzwwNv+b
ayiLnEfCyOs+wA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:21 2025 by rpki-client