Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
File:                     evUSKXc6-RV-MXFg-dyADzgeCys.mft (raw, json)
Hash identifier:          O7zhwF3oySpKxmzKX7HAdq9fN1sZvvpQyIWFXeBJX0g=
Subject key identifier:   04:02:9F:28:B0:E1:F5:20:4F:E7:EE:17:B0:8F:9C:F6:C3:23:14:F1
Authority key identifier: 7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
Certificate issuer:       /CN=7af51229773af9157e317160f9dc800f381e0b2b
Certificate serial:       01A0CD47A906B3AA8462DA66E9685BDAD4C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
Manifest number:          0318
Signing time:             Wed 23 Sep 2026 08:00:20 +0000
Manifest this update:     Wed 23 Sep 2026 08:00:20 +0000
Manifest next update:     Thu 24 Sep 2026 08:00:20 +0000
Files and hashes:         1: 0JXzPsfQiwnhkAPuwUcoZ4TksqU.roa (hash: PLw1g8tEdu8DohzHWXzHrIGYzVNggXd55nUqO0fw1fA=)
                          2: HLXrwT45MTMa_mhCV00Hv0aHA2k.roa (hash: rkZE6mPZWfH9GMHGmnUqFvkyHWkjWIxlqyhyBnTw+1k=)
                          3: Kv2Ob7_hFEbgI_ftySsGnX4M3XQ.roa (hash: s+/q4sVi5Ud8SeTEnpw7PXXetnDgzT/C+VQ7Whvxsmw=)
                          4: LvZoa6Dyn3b8TsOgucX2IIHA2DU.roa (hash: txHAgVDu8eC+tRA2fpR62W+UF+dAIZZl7YAt2C2To5c=)
                          5: QcxSXFyqidHUk327u_nSMoqZheg.roa (hash: 4xwfEjK2GS0Bj8Odb8CMpXnbw4DAt7dP8ep7zLWLlyw=)
                          6: TGFfC8MsVtioSptjBohz0xvP3A0.roa (hash: Mv1j9mh4sO8DAuKoAT6/I6dcEMRxG28gweD0Pzi0ZKQ=)
                          7: VBa7pmCn8ime4P1CWdu0-bHF6pU.roa (hash: Zu7orNKKN0lHI4UfSn3mVOtovclqiBwC91Fgfm2M6m8=)
                          8: bGG4QXxgUzwoqqwAgB5WAK-Uxto.roa (hash: TEYIeaNaWOf9ouUEps9+2mmWqssPfLKwLjfKOLn+W1s=)
                          9: evUSKXc6-RV-MXFg-dyADzgeCys.crl (hash: VufWv+oncbYoVghoL2l1TRlqvOeNzkKOP4XZS3FmsR0=)
                          10: r-_3l2QQDk49Rp0j80drAiEu4kU.roa (hash: 0nT9J9nUi2CAiLfvcK69CvCos9Ne+xvHeMLkDsNE+kg=)
                          11: vcGQBCURbj2L-uTMuaODdad6bpM.roa (hash: 8edgli6gjAqsAbbauaZPwf+GB5AGSQnsq/FwGpi7vQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:47:a9:06:b3:aa:84:62:da:66:e9:68:5b:da:d4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af51229773af9157e317160f9dc800f381e0b2b
        Validity
            Not Before: Sep 23 08:00:20 2026 GMT
            Not After : Sep 24 08:00:20 2026 GMT
        Subject: CN=04029f28b0e1f5204fe7ee17b08f9cf6c32314f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1f:c1:0b:77:dd:7a:b6:e3:db:6f:e1:38:8b:
                    e2:9c:7d:a1:bc:db:a8:9d:c3:a7:78:ca:7f:57:b2:
                    17:de:a6:cd:e0:54:19:5d:0f:20:ba:ae:ce:18:5f:
                    48:1d:4c:5d:5d:d5:76:1a:6b:a9:f5:a7:1e:c4:5c:
                    ef:5b:23:19:52:0c:50:64:38:b1:1d:44:45:05:82:
                    67:b9:fb:b3:24:f8:93:8c:ec:b6:b3:f4:30:4d:de:
                    93:0e:b4:62:bd:80:73:7e:8a:a9:d9:b0:3d:70:93:
                    53:6d:a0:fe:dd:0f:3f:fc:8f:83:dd:f3:6f:67:10:
                    1f:7f:13:41:2d:85:97:26:27:54:c9:53:98:82:9b:
                    a6:19:f9:40:d6:9d:2b:15:22:1a:04:21:46:2a:87:
                    f3:be:cc:c7:7a:df:16:64:3b:51:8b:58:a0:45:68:
                    a1:ac:84:d8:10:2b:2a:af:e8:3c:2e:7d:16:9d:91:
                    74:88:df:12:ef:2e:58:6e:76:f0:4f:0b:92:ee:91:
                    97:e2:cb:d8:9f:a1:d7:0d:da:73:77:d0:c2:7f:84:
                    51:89:07:65:bf:75:dc:60:b8:4a:6d:d7:04:bf:ef:
                    6d:f2:00:61:83:cd:8e:5a:9f:d3:e3:22:2c:8a:7e:
                    b8:95:89:f5:7b:eb:5f:69:56:b4:d6:63:d3:5b:78:
                    5c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:02:9F:28:B0:E1:F5:20:4F:E7:EE:17:B0:8F:9C:F6:C3:23:14:F1
            X509v3 Authority Key Identifier:
                keyid:7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:fa:c9:ce:50:ea:5b:e6:6b:b6:cb:56:81:02:ed:f1:cf:70:
         e0:42:82:c2:56:26:51:18:b5:fd:a0:ad:6a:bb:81:d4:85:fb:
         b1:60:e8:7c:f4:95:5b:3b:b5:9c:5f:eb:a8:00:b1:35:23:92:
         49:76:07:1d:52:54:2d:25:e1:00:3e:0e:ad:57:75:f9:e9:19:
         9a:cb:0a:6f:ae:be:e7:48:c6:38:09:1a:bd:86:3e:8d:59:ca:
         9c:5c:9c:57:ae:81:a8:03:3b:d1:99:b7:08:41:31:ba:39:c3:
         72:c9:67:2b:52:83:7b:82:7a:8b:61:4f:cc:4a:82:6c:a0:e9:
         cf:11:27:ca:13:6a:ea:01:82:c8:41:ea:e6:b8:d7:dc:75:5f:
         5c:d4:aa:b1:9a:07:e4:56:96:0c:a5:7f:c5:1f:d3:3d:fd:d3:
         c1:01:fe:11:6c:9e:8c:10:b1:60:13:89:58:5c:7e:31:51:76:
         23:0b:c6:7e:49:e1:9c:39:80:9e:36:6a:7e:ed:f1:63:ca:1a:
         99:e8:8e:19:d9:31:9f:80:40:06:69:91:35:31:73:f9:d0:71:
         41:75:ae:a3:36:2e:f4:65:e1:98:c3:8a:af:3d:5e:57:65:a9:
         38:f1:7e:f8:33:f6:68:64:94:8a:c2:8a:b6:a7:93:dd:c4:5f:
         e2:6c:31:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:13:11 2026 by rpki-client