Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
File:                     evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft (raw, json)
Hash identifier:          SvuyKM0LIEOmB1BKVeZNYwVzys/oTZRtkmZQD5sAR6M=
Subject key identifier:   61:58:00:54:B8:25:38:44:87:95:B0:5A:B0:2A:F4:2F:64:1E:31:6F
Authority key identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
Certificate issuer:       /CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Certificate serial:       01A0D38399E5BB5E59194AE507F9671D28DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
Manifest number:          0A21
Signing time:             Thu 24 Sep 2026 13:03:32 +0000
Manifest this update:     Thu 24 Sep 2026 13:03:32 +0000
Manifest next update:     Fri 25 Sep 2026 13:03:32 +0000
Files and hashes:         1: V66HJYFriZ5IsLfzQnEEiBV4Qd8.roa (hash: 8XPaW6i45AJEe25djtC6P54qz+Rb4g3K7vpBnD6+9v4=)
                          2: XASNzZ7eNfFZgvbJT8Q1lC9Tw84.roa (hash: pBgoU7wOpw4nY7mOMS9Fl6YvITNZqmO4sxUzQmgNOCY=)
                          3: evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl (hash: iaIOg/atABGjevvLWrXinqp3Bq52NboAf+FTRKTI5Cc=)
                          4: x8rtYvoQZMNut6lhRb4aMkAq0js.roa (hash: nUuWeYtzWwss47rmzR4BBXj/AZGrFJGMJoFw56T6Rv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:99:e5:bb:5e:59:19:4a:e5:07:f9:67:1d:28:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
        Validity
            Not Before: Sep 24 13:03:32 2026 GMT
            Not After : Sep 25 13:03:32 2026 GMT
        Subject: CN=61580054b82538448795b05ab02af42f641e316f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:3e:0f:47:3c:45:39:08:dc:bd:27:2f:bd:
                    8d:52:c2:9e:a3:cc:9e:ba:4e:f2:0c:f6:f5:74:69:
                    01:3e:63:cb:42:65:70:54:0e:76:ef:0f:7f:8c:fa:
                    4f:11:cc:83:39:5d:e4:c9:cf:39:81:a8:56:32:30:
                    39:16:88:ba:6d:ff:d6:47:cf:e6:56:06:55:0b:ec:
                    ac:3d:6f:0f:fc:f2:2d:87:e8:c9:79:8e:96:4d:cc:
                    08:f0:80:7f:78:84:bf:98:a3:e9:eb:af:ec:cc:c7:
                    ef:18:2f:7a:33:b6:5d:80:c9:14:12:ca:5e:dd:84:
                    6a:db:5a:78:8d:7f:2d:47:a4:ea:cd:09:92:60:3c:
                    a8:3d:b8:bd:d2:9f:b6:1f:6b:2b:1d:ec:2d:45:ee:
                    94:73:f4:56:fe:eb:c1:5b:70:6d:b4:b6:a3:24:5e:
                    4c:52:4a:9d:96:43:79:0f:1e:d0:3a:2e:03:fb:59:
                    c6:f3:70:88:b1:b3:d5:74:f7:7b:eb:76:2d:b5:c4:
                    76:21:1b:8b:fe:f5:b6:7e:4d:e7:aa:4f:0c:3b:a5:
                    48:ef:eb:5f:60:d4:3e:c2:4b:64:63:dd:57:ae:ef:
                    71:89:c9:a9:87:e9:a4:5e:dd:b1:4f:d9:9a:a2:aa:
                    80:2c:3d:db:2f:ac:1a:dd:0c:bd:a1:24:2b:b3:04:
                    f3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:58:00:54:B8:25:38:44:87:95:B0:5A:B0:2A:F4:2F:64:1E:31:6F
            X509v3 Authority Key Identifier:
                keyid:7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:a3:7a:4d:52:5b:25:8f:db:29:de:ad:bb:47:e8:c1:1b:2b:
         46:d4:98:4b:46:6a:5f:5f:ac:12:cc:81:70:d8:9f:fa:fa:05:
         4e:56:92:fb:d6:b8:be:40:58:75:29:c1:27:b1:2b:78:3b:c2:
         8a:e2:95:e6:a6:6a:8d:07:e5:73:fa:e5:83:11:bd:27:e0:f8:
         e4:03:24:3c:8d:33:b5:7b:8e:89:a9:9d:81:15:f3:76:d2:0d:
         da:b2:d6:6a:9c:0b:39:92:18:68:19:dc:16:bf:80:07:3f:28:
         df:b4:a7:57:03:bf:dd:45:64:c5:00:5c:ff:c7:80:ac:0b:5d:
         a1:2d:ed:da:1d:bf:5d:64:1c:7d:df:5a:80:93:6a:f5:ac:3d:
         d1:71:70:72:7d:83:f6:0b:67:59:20:fe:f7:f8:5b:79:01:05:
         0a:8a:39:26:53:18:6c:e6:aa:69:94:f8:3f:99:a5:89:08:ed:
         fe:1e:4e:45:3d:f0:1c:63:ed:dc:b1:1d:11:b8:d3:2a:74:79:
         84:bd:56:55:88:b8:80:1d:5e:9c:7f:e1:3b:e7:5b:ec:f6:52:
         4e:f4:31:d2:51:c5:19:3b:10:0f:33:49:60:b0:ef:c7:c7:26:
         a0:0c:a2:67:f4:6d:4b:14:6b:22:63:a7:83:b9:f9:81:42:ed:
         44:83:3a:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTg5nlu15ZGUrlB/lnHSjbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZmI1NDQxZDhlZjhlNDFhYTI4ZGQ1MWNkZGU5MjU5NDNh
ZWY3ZmEwHhcNMjYwOTI0MTMwMzMyWhcNMjYwOTI1MTMwMzMyWjAzMTEwLwYDVQQD
Eyg2MTU4MDA1NGI4MjUzODQ0ODc5NWIwNWFiMDJhZjQyZjY0MWUzMTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz0+D0c8RTkI3L0nL72NUsKeo8ye
uk7yDPb1dGkBPmPLQmVwVA527w9/jPpPEcyDOV3kyc85gahWMjA5Foi6bf/WR8/m
VgZVC+ysPW8P/PIth+jJeY6WTcwI8IB/eIS/mKPp66/szMfvGC96M7ZdgMkUEspe
3YRq21p4jX8tR6TqzQmSYDyoPbi90p+2H2srHewtRe6Uc/RW/uvBW3BttLajJF5M
UkqdlkN5Dx7QOi4D+1nG83CIsbPVdPd763YttcR2IRuL/vW2fk3nqk8MO6VI7+tf
YNQ+wktkY91Xru9xicmph+mkXt2xT9maoqqALD3bL6wa3Qy9oSQrswTzmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFYAFS4JThEh5WwWrAq9C9kHjFvMB8GA1UdIwQY
MBaAFHr7VEHY745BqijdUc3ekllDrvf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80ZDc2ZjUtNDJlYy00NTNlLTg5OTIt
ZDg5NzNhY2FmNDFkLzEvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80ZDc2ZjUtNDJlYy00NTNlLTg5OTItZDg5NzNhY2FmNDFk
LzEvZXZ0VVFkanZqa0dxS04xUnpkNlNXVU91OV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaN6TVJb
JY/bKd6tu0fowRsrRtSYS0ZqX1+sEsyBcNif+voFTlaS+9a4vkBYdSnBJ7EreDvC
iuKV5qZqjQflc/rlgxG9J+D45AMkPI0ztXuOiamdgRXzdtIN2rLWapwLOZIYaBnc
Fr+ABz8o37SnVwO/3UVkxQBc/8eArAtdoS3t2h2/XWQcfd9agJNq9aw90XFwcn2D
9gtnWSD+9/hbeQEFCoo5JlMYbOaqaZT4P5mliQjt/h5ORT3wHGPt3LEdEbjTKnR5
hL1WVYi4gB1enH/hO+db7PZSTvQx0lHFGTsQDzNJYLDvx8cmoAyiZ/RtSxRrImOn
g7n5gULtRIM6og==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:58:04 2026 by rpki-client