Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
File:                     EVYEuolej7O0mix4CI6f8v-XCgg.mft (raw, json)
Hash identifier:          VkaYvgzMOqZ12Ifrdqj3hcWWS2baSHfpdBuDOrZBcQs=
Subject key identifier:   DC:70:89:B1:39:40:9F:95:33:8E:97:80:09:1C:2D:04:01:91:99:7E
Authority key identifier: 11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08
Certificate issuer:       /CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
Certificate serial:       019D2772332651EC526305B25CC0DAD7099C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
Manifest number:          1819
Signing time:             Thu 26 Mar 2026 00:01:28 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:28 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:28 +0000
Files and hashes:         1: D2oqUhdf6v322Kq7aCwzoafCx3U.roa (hash: CzJPEN/QpFx29CuMxUcoUKMypFWDJ3GADlvAaNhlIkc=)
                          2: EVYEuolej7O0mix4CI6f8v-XCgg.crl (hash: g9XeI5Fp0JUp7q5mGTe4btgpkD18eew7oLD7op5Fvow=)
                          3: RE-y5UWae9kc6ojVIH56XxmACr0.roa (hash: j/z24dExP/WvDCtL8Orm37v2PbHsD3oP4PyBU5DcPnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:33:26:51:ec:52:63:05:b2:5c:c0:da:d7:09:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
        Validity
            Not Before: Mar 26 00:01:28 2026 GMT
            Not After : Mar 27 00:01:28 2026 GMT
        Subject: CN=dc7089b139409f95338e9780091c2d040191997e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:02:aa:82:e3:eb:ef:97:d8:b8:d6:d1:e5:ff:
                    41:68:e4:87:6c:ab:49:76:50:79:94:40:ac:fe:66:
                    9f:c2:b0:ad:74:07:d9:74:80:09:67:f1:30:f1:f6:
                    90:53:1e:be:b4:89:8c:44:0f:4f:a2:bf:64:92:96:
                    59:3d:0d:f9:62:8d:00:6e:f6:b7:9f:06:a3:09:88:
                    ae:66:d4:06:ec:bb:4b:2f:6e:c7:1a:6d:58:2a:e1:
                    74:98:ff:e1:c1:ea:77:cd:56:9a:af:a4:38:ae:c3:
                    33:8d:71:f8:31:8d:7e:c7:04:a1:10:dd:3a:b6:e9:
                    54:0c:3f:81:71:64:9f:14:79:b7:55:c7:4e:bf:c5:
                    3d:03:02:c3:d8:c3:30:57:13:76:d9:8e:43:d6:e3:
                    8d:08:d2:55:10:0f:ae:f0:e2:90:d1:a5:ec:76:2a:
                    1a:73:fb:10:5d:6a:35:80:7c:8f:46:d1:9b:c1:ef:
                    88:0b:1e:b2:4b:ca:9c:41:30:46:a5:0e:c9:25:82:
                    5d:f5:9a:d1:73:6b:88:17:0e:37:43:35:45:f4:80:
                    d0:a6:68:36:09:2b:58:5b:0e:be:0c:65:5b:8f:ce:
                    f3:f3:6b:11:37:af:bb:0d:e4:5d:1a:df:2c:8d:86:
                    e6:a4:83:dc:b1:51:d0:39:d6:72:77:4d:4f:da:06:
                    0a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:70:89:B1:39:40:9F:95:33:8E:97:80:09:1C:2D:04:01:91:99:7E
            X509v3 Authority Key Identifier:
                keyid:11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:fc:01:0e:e8:69:7f:d8:81:a4:f5:87:5e:8d:ef:ed:ce:b5:
         6c:2a:05:a5:23:85:29:69:a6:ed:be:ed:54:ff:4d:5d:73:6f:
         04:b8:5c:37:e9:71:c4:15:2a:8a:8b:4f:54:10:82:e5:d2:a9:
         20:cc:09:1b:0a:d0:b6:4e:1b:38:8d:cf:24:bd:3b:1d:da:b6:
         ef:61:51:ac:0d:02:cf:1f:7d:2f:af:2d:c3:92:c7:ec:10:94:
         a1:67:a9:a8:df:b0:a3:07:98:50:de:e8:6c:b5:34:1f:bc:c5:
         8c:15:79:37:94:af:d7:e6:9d:3f:1e:d9:55:8b:23:59:4a:aa:
         c0:c2:5c:3b:99:5b:94:17:92:e2:66:3f:9a:df:3b:21:13:53:
         54:b8:65:dc:ce:52:35:da:9a:34:39:c3:c1:90:3f:d2:f8:72:
         34:24:42:5a:ab:86:3f:35:f8:65:b7:9e:a0:21:21:ec:db:dd:
         ed:8d:88:7a:f3:66:25:11:3b:44:d6:04:ee:ef:95:e8:0d:1b:
         0e:0a:dd:07:0b:d7:5a:0d:93:9d:ec:85:fa:55:d3:f3:ab:cd:
         61:cf:7c:fb:2a:8e:cc:c6:7e:2c:e7:f2:97:30:b7:fd:5f:61:
         00:73:5e:4c:f6:58:81:65:12:91:62:b5:e2:36:15:b8:37:52:
         e6:78:8c:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncjMmUexSYwWyXMDa1wmcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNTYwNGJhODk1ZThmYjNiNDlhMmM3ODA4OGU5ZmYyZmY5
NzBhMDgwHhcNMjYwMzI2MDAwMTI4WhcNMjYwMzI3MDAwMTI4WjAzMTEwLwYDVQQD
EyhkYzcwODliMTM5NDA5Zjk1MzM4ZTk3ODAwOTFjMmQwNDAxOTE5OTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAKqguPr75fYuNbR5f9BaOSHbKtJ
dlB5lECs/mafwrCtdAfZdIAJZ/Ew8faQUx6+tImMRA9Por9kkpZZPQ35Yo0Abva3
nwajCYiuZtQG7LtLL27HGm1YKuF0mP/hwep3zVaar6Q4rsMzjXH4MY1+xwShEN06
tulUDD+BcWSfFHm3VcdOv8U9AwLD2MMwVxN22Y5D1uONCNJVEA+u8OKQ0aXsdioa
c/sQXWo1gHyPRtGbwe+ICx6yS8qcQTBGpQ7JJYJd9ZrRc2uIFw43QzVF9IDQpmg2
CStYWw6+DGVbj87z82sRN6+7DeRdGt8sjYbmpIPcsVHQOdZyd01P2gYKbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNxwibE5QJ+VM46XgAkcLQQBkZl+MB8GA1UdIwQY
MBaAFBFWBLqJXo+ztJoseAiOn/L/lwoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVZZRXVvbGVqN08wbWl4NENJNmY4di1YQ2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jNDJiMzctZDQ0OC00Y2YzLWJmZWMt
MTY5MmZjOGJiYTE1LzEvRVZZRXVvbGVqN08wbWl4NENJNmY4di1YQ2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jNDJiMzctZDQ0OC00Y2YzLWJmZWMtMTY5MmZjOGJiYTE1
LzEvRVZZRXVvbGVqN08wbWl4NENJNmY4di1YQ2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfwBDuhp
f9iBpPWHXo3v7c61bCoFpSOFKWmm7b7tVP9NXXNvBLhcN+lxxBUqiotPVBCC5dKp
IMwJGwrQtk4bOI3PJL07Hdq272FRrA0Czx99L68tw5LH7BCUoWepqN+woweYUN7o
bLU0H7zFjBV5N5Sv1+adPx7ZVYsjWUqqwMJcO5lblBeS4mY/mt87IRNTVLhl3M5S
NdqaNDnDwZA/0vhyNCRCWquGPzX4ZbeeoCEh7Nvd7Y2IevNmJRE7RNYE7u+V6A0b
DgrdBwvXWg2TneyF+lXT86vNYc98+yqOzMZ+LOfylzC3/V9hAHNeTPZYgWUSkWK1
4jYVuDdS5niMGQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:10:54 2026 by rpki-client