Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
File:                     EVGkgRFI99BZj1_wIdrdOhDl8pw.mft (raw, json)
Hash identifier:          p1RhBaASoBFIi9sAXG2wiKZddUK3JlGCrjK/OThPBgk=
Subject key identifier:   E3:2F:06:EF:D4:02:1C:EE:25:C6:9E:B6:7F:D5:50:7B:17:1F:63:9F
Authority key identifier: 11:51:A4:81:11:48:F7:D0:59:8F:5F:F0:21:DA:DD:3A:10:E5:F2:9C
Certificate issuer:       /CN=1151a4811148f7d0598f5ff021dadd3a10e5f29c
Certificate serial:       019EC0DAA4BA722DEEDB8B0D87AA175595B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 12:00:14 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:14 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:14 +0000
Files and hashes:         1: EVGkgRFI99BZj1_wIdrdOhDl8pw.crl (hash: 3yAjgw9loi1eFrlSctXBBbYYrufimHwqWhwH7ZF/a3k=)
                          2: KQTIjNE7caGv_nviIPZ5cZuy8Q8.roa (hash: cSvFuOqXXAj2/wAYTIAfYAtvVPOOu2ZhX591QT1TiQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 12:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:a4:ba:72:2d:ee:db:8b:0d:87:aa:17:55:95:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1151a4811148f7d0598f5ff021dadd3a10e5f29c
        Validity
            Not Before: Jun 13 12:00:14 2026 GMT
            Not After : Jun 14 12:00:14 2026 GMT
        Subject: CN=e32f06efd4021cee25c69eb67fd5507b171f639f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a3:03:f0:e6:24:d1:b4:eb:26:78:06:20:b8:
                    2b:2f:09:88:70:2a:c2:91:b0:57:49:27:89:d1:73:
                    84:8e:a1:7f:1f:05:ba:1e:86:48:5a:5e:91:00:01:
                    75:d4:89:38:42:ab:c3:21:e7:04:8f:f8:64:df:8e:
                    82:11:ec:f3:49:2b:3e:55:f4:63:0e:83:f4:57:c6:
                    c8:8a:c7:8e:64:ac:3d:a5:4b:89:0e:5e:90:33:28:
                    6c:e2:e6:31:7c:ce:a3:4e:72:5d:0a:b9:c1:f2:33:
                    5a:8b:ec:bf:bd:5f:d3:95:13:28:58:fa:26:89:76:
                    5b:38:98:a1:37:16:a5:5b:af:56:b3:ba:83:58:52:
                    ac:7c:2d:f1:70:22:9e:8d:02:7d:66:55:57:fa:26:
                    dd:08:c7:8e:d9:84:da:a7:f6:a8:58:56:02:6c:6f:
                    53:a1:4a:ef:56:81:a0:f0:6b:f0:91:38:ae:93:b6:
                    08:0b:90:37:9e:e5:ea:53:9c:7b:86:73:71:23:e3:
                    d6:38:2e:3d:5c:25:35:93:4d:e7:db:23:ee:d5:a4:
                    a7:0e:aa:46:3d:81:26:57:ed:75:a4:1d:e1:ad:2d:
                    e1:21:ce:42:80:0b:a8:df:61:ec:7a:cc:23:b3:b5:
                    9e:7a:22:77:2f:ef:ee:5a:50:10:37:29:bd:83:38:
                    a7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2F:06:EF:D4:02:1C:EE:25:C6:9E:B6:7F:D5:50:7B:17:1F:63:9F
            X509v3 Authority Key Identifier:
                keyid:11:51:A4:81:11:48:F7:D0:59:8F:5F:F0:21:DA:DD:3A:10:E5:F2:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVGkgRFI99BZj1_wIdrdOhDl8pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2d0dae-d2bc-49d1-8115-34cb9d5c9432/1/EVGkgRFI99BZj1_wIdrdOhDl8pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:65:a3:96:44:88:a0:71:9f:52:39:94:e7:da:de:75:6b:8f:
         55:8f:52:56:db:d8:99:24:14:86:16:1d:a2:9c:17:29:cc:0b:
         06:00:68:6e:ff:36:9b:83:5f:92:53:17:f5:c0:e6:73:56:e2:
         a0:9a:83:a3:79:a5:8c:50:0e:93:6b:22:97:a4:ab:17:35:94:
         ad:45:59:04:f1:21:5a:25:38:1e:d1:24:b5:88:2d:48:5a:cb:
         a6:32:73:d0:68:9f:4d:a8:68:1a:19:7c:d5:4b:dc:44:ef:23:
         5d:e0:da:b8:8a:72:5c:af:8a:e0:5a:47:a8:b6:59:34:75:d1:
         6e:97:a6:40:bf:8b:2e:0b:d7:c9:b0:e3:a9:c7:98:84:42:9f:
         28:e7:fe:10:14:b5:58:9a:aa:3f:1c:1c:1f:76:76:be:1d:4f:
         b0:b3:d3:b5:ca:eb:1c:e1:9e:00:62:6c:0f:b0:67:72:9c:dc:
         15:e4:10:e8:62:26:d1:cd:4f:9a:3b:41:0f:d3:43:2f:7b:72:
         d5:60:b8:70:f9:6b:0a:50:26:e5:f7:2e:17:2c:d8:5c:09:b2:
         99:ff:60:39:7b:7a:a0:4d:9b:f2:9c:99:fe:31:89:e8:0c:a1:
         0b:27:36:e2:82:94:b4:0c:52:f0:01:d4:58:92:76:13:ba:24:
         e8:d7:fe:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:24:50 2026 by rpki-client