Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
File:                     eVoYZBqRazBgdNHhH9CxDp39xDA.mft (raw, json)
Hash identifier:          igpYruLZnkoqOp9BSN6RNrVbxqZiJ+Pml4gKURxAsWc=
Subject key identifier:   C8:09:41:C2:58:39:A3:14:2C:BF:8C:3F:D2:86:27:23:69:95:25:EA
Authority key identifier: 79:5A:18:64:1A:91:6B:30:60:74:D1:E1:1F:D0:B1:0E:9D:FD:C4:30
Certificate issuer:       /CN=795a18641a916b306074d1e11fd0b10e9dfdc430
Certificate serial:       019D2B4E9C89A7487A0CD4F06C31C3AB7772
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
Manifest number:          0A8E
Signing time:             Thu 26 Mar 2026 18:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 18:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 18:01:05 +0000
Files and hashes:         1: NSff8QmOR5QMbXmvv0vT3cO30Vo.roa (hash: 9Im0oh/WcFti35mYlpYTmDh/TqslAAcAQyxVVkByg1w=)
                          2: eVoYZBqRazBgdNHhH9CxDp39xDA.crl (hash: tEITpeGjwnSqXLr1vvZolyr1rDVomz5UjqHOgIdUyuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:9c:89:a7:48:7a:0c:d4:f0:6c:31:c3:ab:77:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795a18641a916b306074d1e11fd0b10e9dfdc430
        Validity
            Not Before: Mar 26 18:01:05 2026 GMT
            Not After : Mar 27 18:01:05 2026 GMT
        Subject: CN=c80941c25839a3142cbf8c3fd2862723699525ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2f:c8:10:6b:05:b6:6a:65:42:e0:c4:39:bc:
                    1c:a9:8c:72:42:83:a3:7b:9d:f9:59:c0:df:9b:56:
                    09:ba:8c:89:de:c9:10:50:be:f0:67:56:d8:6a:4e:
                    85:83:b6:4f:e1:6a:2b:20:43:79:46:2b:8c:1c:27:
                    3c:ad:75:86:2a:1b:50:31:2e:a6:08:4a:7c:f4:6f:
                    14:a3:53:c5:0c:4d:e6:61:dc:51:0b:e2:18:f5:8e:
                    1d:f3:07:70:62:21:28:68:fa:ff:b9:82:23:f2:32:
                    40:90:1e:ef:0a:50:1f:6e:6e:a1:5d:6b:26:c5:83:
                    c6:0b:27:a9:00:4b:a2:85:5f:01:34:95:4c:47:89:
                    c9:cd:22:4c:43:b2:dc:b3:66:22:f9:bb:9a:98:ff:
                    9f:3a:c2:07:d9:b1:fb:10:3b:61:cd:c6:06:a4:2a:
                    e5:1b:36:1c:bf:61:f1:9a:84:80:4f:cc:b2:f1:cb:
                    f2:ae:44:75:56:7d:02:d7:77:8b:19:37:91:37:fa:
                    4a:c7:fe:d9:43:7a:5b:26:69:59:37:dc:02:5e:db:
                    46:fe:a1:48:6a:bc:93:7e:ed:d7:1b:11:c8:e5:d1:
                    af:f0:ad:f6:63:70:6f:27:a7:0a:8a:37:34:a8:0b:
                    10:4a:2e:d0:06:41:2b:2f:b9:8e:04:fc:09:7d:25:
                    b0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:09:41:C2:58:39:A3:14:2C:BF:8C:3F:D2:86:27:23:69:95:25:EA
            X509v3 Authority Key Identifier:
                keyid:79:5A:18:64:1A:91:6B:30:60:74:D1:E1:1F:D0:B1:0E:9D:FD:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVoYZBqRazBgdNHhH9CxDp39xDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e42ba4-7a84-4226-afa7-09fb8fe72f4a/1/eVoYZBqRazBgdNHhH9CxDp39xDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8e:59:a5:a6:18:a6:01:c5:98:0a:83:43:4d:e5:da:ac:d0:
         c3:de:32:6a:ef:d9:13:81:43:65:45:48:84:02:0f:a4:29:c8:
         04:b0:05:29:c9:2c:b1:74:68:27:e4:b3:22:63:03:84:5e:2d:
         4a:77:0a:ee:4c:79:04:33:60:24:d8:cd:2b:bd:6a:d7:f7:12:
         76:db:c7:85:8d:62:1d:d8:f7:4f:89:fd:02:aa:df:4d:24:b7:
         fb:ca:1f:8a:16:d8:12:27:cd:fd:97:4e:99:b4:f0:ba:78:5b:
         93:5b:5c:7b:e4:80:ac:3c:2f:f9:81:8d:09:51:db:b4:91:77:
         6b:ef:61:56:a6:c6:ed:fa:6d:42:55:4d:e3:68:bf:96:49:d4:
         9c:07:34:9e:37:e2:cb:22:ad:bc:63:87:41:a6:03:42:f8:67:
         29:6d:dd:99:ff:d6:93:ea:46:1e:01:08:25:4b:f9:d7:31:cc:
         89:89:0f:18:ef:be:0e:f5:78:76:3b:0d:57:81:b4:70:dd:48:
         06:5b:8d:4c:ef:2e:0a:6a:f3:5f:da:70:2f:c8:e2:b6:4d:4d:
         14:6b:19:a4:19:b4:83:65:81:8e:c6:f6:b5:64:f2:e2:36:9b:
         1a:6b:d2:d8:c3:81:53:b3:ef:48:bb:e2:e6:b4:9b:99:bf:f9:
         89:d5:7a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:55 2026 by rpki-client