Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
File:                     evoTWyBy38xO87VBwTa8gAHvQwc.mft (raw, json)
Hash identifier:          jWzZREkE7/hK2RRCj3C85HYfS5UKnOPSUVT/Q7JXx6A=
Subject key identifier:   5E:82:51:DF:16:29:10:A2:DA:5A:5B:AF:27:F6:D3:28:FE:EF:BD:50
Authority key identifier: 7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
Certificate issuer:       /CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Certificate serial:       019D2BBC5B721D3969965E496CBD41CFDC46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
Manifest number:          0D0C
Signing time:             Thu 26 Mar 2026 20:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 20:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 20:00:57 +0000
Files and hashes:         1: M7y_k5iNH6dSWHLXPJNTz-Qdtp8.roa (hash: kmS2hNo1cx40s9TRt+mHs2M1UGSMR40egkM7Knj7Rb4=)
                          2: evoTWyBy38xO87VBwTa8gAHvQwc.crl (hash: ZEkX/hncQyjk/CWg5iqic1rE9ZdzhFCB33CQdD0G0qg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:bc:5b:72:1d:39:69:96:5e:49:6c:bd:41:cf:dc:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
        Validity
            Not Before: Mar 26 20:00:57 2026 GMT
            Not After : Mar 27 20:00:57 2026 GMT
        Subject: CN=5e8251df162910a2da5a5baf27f6d328feefbd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d0:99:4d:b5:21:31:30:0d:8f:88:d4:70:6b:
                    2c:a6:60:37:46:66:39:14:1e:ce:ae:07:0e:5d:78:
                    75:5e:c3:2f:a0:03:c2:b8:ef:f7:4c:94:83:18:5e:
                    52:13:07:17:dd:c4:6e:db:d6:c2:a5:24:28:e1:7f:
                    86:92:df:97:be:8f:df:0b:e3:16:d8:18:e6:fa:31:
                    af:0e:91:25:d5:f0:d8:e3:44:23:df:43:91:56:46:
                    ff:dd:83:76:2e:a1:ac:92:1d:d4:0f:9e:d2:65:38:
                    5e:ba:b1:32:e8:11:ad:ae:d6:2b:d3:f8:e4:83:48:
                    da:15:ec:79:34:41:b2:55:25:71:63:ae:90:e7:8e:
                    2b:ba:af:32:34:82:2c:c3:bc:5a:58:2f:e1:de:be:
                    21:ab:ed:34:d8:6d:a9:84:42:09:dd:08:32:ca:5d:
                    0c:48:08:3f:1d:64:c8:7b:80:80:98:9c:59:0b:4e:
                    c8:11:69:8c:a4:41:ee:ac:39:18:04:b9:b3:d7:19:
                    54:5c:e4:08:c8:f4:4e:6a:bd:fd:2b:1b:65:ea:e8:
                    bc:8c:7b:45:e9:7c:3c:ea:f5:68:b8:5f:50:00:c3:
                    a9:cf:4f:fb:3f:e1:67:1e:72:11:e1:65:b8:f7:8f:
                    77:4f:c6:43:61:74:a7:ba:e3:82:ca:8c:fa:3d:40:
                    b7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:82:51:DF:16:29:10:A2:DA:5A:5B:AF:27:F6:D3:28:FE:EF:BD:50
            X509v3 Authority Key Identifier:
                keyid:7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:73:1c:95:5e:f7:78:6f:5b:61:3a:71:84:7c:5f:fa:ba:c4:
         21:f2:7b:0a:f8:ff:3c:72:2d:c7:02:7e:43:1e:43:a4:46:89:
         bd:f7:c9:7b:4c:ac:fc:99:0e:24:93:5f:f8:8c:cc:d4:a6:b9:
         cf:70:a5:13:0a:6d:f4:13:31:ee:62:13:e1:f1:2f:c4:90:e8:
         20:a8:37:e5:87:ad:60:06:e8:18:91:24:99:a9:85:58:1c:76:
         15:88:6f:51:1e:03:21:90:a1:ca:20:1d:eb:a4:1c:0a:0e:2f:
         c5:8e:2d:ea:13:63:c2:ab:70:3a:32:5d:71:b9:bf:6a:3a:e4:
         df:be:50:c8:fa:dd:df:e5:71:6f:9e:e4:ce:f5:fd:e3:1f:44:
         b5:f1:c1:67:d3:69:f3:f6:9b:a8:31:87:ab:fe:9f:11:9f:27:
         c5:ee:06:b1:0d:2f:62:61:1f:c4:da:7a:db:c5:2a:2a:f8:99:
         f3:ac:59:03:d0:bd:ca:b9:d8:7f:34:89:f5:0b:c0:92:b3:e8:
         93:df:85:1e:13:c0:ab:ef:37:a8:95:1f:c4:c6:5f:3e:64:da:
         10:36:c0:de:ec:2b:26:5a:77:e1:f0:f1:4b:e4:28:34:a7:5a:
         71:d1:91:84:64:84:80:56:b9:88:0e:f1:fd:83:ed:4b:cf:a1:
         fd:aa:32:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rvFtyHTlpll5JbL1Bz9xGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZmExMzViMjA3MmRmY2M0ZWYzYjU0MWMxMzZiYzgwMDFl
ZjQzMDcwHhcNMjYwMzI2MjAwMDU3WhcNMjYwMzI3MjAwMDU3WjAzMTEwLwYDVQQD
Eyg1ZTgyNTFkZjE2MjkxMGEyZGE1YTViYWYyN2Y2ZDMyOGZlZWZiZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdCZTbUhMTANj4jUcGsspmA3RmY5
FB7OrgcOXXh1XsMvoAPCuO/3TJSDGF5SEwcX3cRu29bCpSQo4X+Gkt+Xvo/fC+MW
2Bjm+jGvDpEl1fDY40Qj30ORVkb/3YN2LqGskh3UD57SZTheurEy6BGtrtYr0/jk
g0jaFex5NEGyVSVxY66Q544ruq8yNIIsw7xaWC/h3r4hq+002G2phEIJ3Qgyyl0M
SAg/HWTIe4CAmJxZC07IEWmMpEHurDkYBLmz1xlUXOQIyPROar39Kxtl6ui8jHtF
6Xw86vVouF9QAMOpz0/7P+FnHnIR4WW49493T8ZDYXSnuuOCyoz6PUC3qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6CUd8WKRCi2lpbryf20yj+771QMB8GA1UdIwQY
MBaAFHr6E1sgct/MTvO1QcE2vIAB70MHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZvVFd5QnkzOHhPODdWQndUYThnQUh2UXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iMTQxOTMtZjU2OS00MzRhLWFlYTQt
ZjVkZWFhOWJmMGY3LzEvZXZvVFd5QnkzOHhPODdWQndUYThnQUh2UXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9iMTQxOTMtZjU2OS00MzRhLWFlYTQtZjVkZWFhOWJmMGY3
LzEvZXZvVFd5QnkzOHhPODdWQndUYThnQUh2UXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3MclV73
eG9bYTpxhHxf+rrEIfJ7Cvj/PHItxwJ+Qx5DpEaJvffJe0ys/JkOJJNf+IzM1Ka5
z3ClEwpt9BMx7mIT4fEvxJDoIKg35YetYAboGJEkmamFWBx2FYhvUR4DIZChyiAd
66QcCg4vxY4t6hNjwqtwOjJdcbm/ajrk375QyPrd3+Vxb57kzvX94x9EtfHBZ9Np
8/abqDGHq/6fEZ8nxe4GsQ0vYmEfxNp628UqKviZ86xZA9C9yrnYfzSJ9QvAkrPo
k9+FHhPAq+83qJUfxMZfPmTaEDbA3uwrJlp34fDxS+QoNKdacdGRhGSEgFa5iA7x
/YPtS8+h/aoyDQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:58:40 2026 by rpki-client