Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
File:                     EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft (raw, json)
Hash identifier:          2iek8Y/rgTMGR3AgQFxZXE72lGWbdZ9Yo7p1LEZZlLg=
Subject key identifier:   C0:CC:D8:67:1E:54:46:8E:5F:96:50:9C:67:87:36:56:9A:72:B6:F1
Authority key identifier: 12:E7:04:57:EB:DE:E5:94:B0:71:44:20:44:54:70:6C:EA:AF:6B:F6
Certificate issuer:       /CN=12e70457ebdee594b07144204454706ceaaf6bf6
Certificate serial:       019CAA582B19477B8362DD195288485F6C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
Manifest number:          0951
Signing time:             Sun 01 Mar 2026 17:00:30 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:30 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:30 +0000
Files and hashes:         1: EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl (hash: GW1hJqXhvD5rR5R9VMYpleLSxaXqZb2BYzjg51WVFfc=)
                          2: zZdSLGf8-CA1bGc-n1O6CqM7-HQ.roa (hash: tdInVQA16KIJ2c6yzbrG5mOVLk/lIll+zBd2ysIwH4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:2b:19:47:7b:83:62:dd:19:52:88:48:5f:6c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12e70457ebdee594b07144204454706ceaaf6bf6
        Validity
            Not Before: Mar  1 17:00:30 2026 GMT
            Not After : Mar  2 17:00:30 2026 GMT
        Subject: CN=c0ccd8671e54468e5f96509c678736569a72b6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:56:37:a1:ed:8a:a0:63:73:50:41:52:d2:49:
                    c7:b2:6e:17:79:77:ef:af:b5:5c:d9:02:ec:bd:5c:
                    7c:5d:35:6b:3f:bf:80:e6:e7:29:18:dc:23:9c:10:
                    08:cc:4f:10:b8:1b:0f:f3:ce:d0:76:df:1e:6a:b5:
                    4e:a4:f0:d0:0f:bc:51:eb:b7:18:fc:7b:e4:cf:52:
                    f7:9d:36:f5:e6:7d:31:f4:c1:04:51:77:eb:6a:e9:
                    de:18:b7:6d:8c:c8:69:66:84:29:57:28:45:ba:79:
                    28:05:24:26:5c:35:c1:d1:59:d9:ea:bf:34:5f:4c:
                    a0:b0:bd:fe:06:20:38:6d:fb:26:77:0d:78:3b:08:
                    21:7d:65:b0:87:2e:ad:0b:5f:7e:74:f0:ad:8a:17:
                    66:f4:f6:91:46:dc:91:26:d8:13:8a:cb:08:8f:b2:
                    4a:76:6c:1e:f9:c6:ec:61:52:2f:94:ab:47:4d:93:
                    c0:af:f0:8b:73:f7:1e:83:b0:71:aa:28:17:f0:d1:
                    cf:4b:92:a0:ef:92:46:8f:12:98:d7:f7:31:24:98:
                    b0:08:d0:45:7e:95:98:fe:fe:38:81:30:d5:50:b5:
                    51:f0:80:fa:fd:7b:9e:40:86:49:7f:c7:a2:c3:10:
                    f2:de:04:10:3c:bf:44:d4:43:e2:51:6b:b4:4a:e2:
                    29:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:CC:D8:67:1E:54:46:8E:5F:96:50:9C:67:87:36:56:9A:72:B6:F1
            X509v3 Authority Key Identifier:
                keyid:12:E7:04:57:EB:DE:E5:94:B0:71:44:20:44:54:70:6C:EA:AF:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EucEV-ve5ZSwcUQgRFRwbOqva_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2c0b8e-c726-4000-8dfe-9518daa17ae7/1/EucEV-ve5ZSwcUQgRFRwbOqva_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:c8:b6:5b:6b:0b:fc:f6:39:ed:35:03:7d:20:17:18:66:46:
         51:77:5f:ad:3a:09:f6:b5:51:86:80:06:21:da:d0:c5:79:5f:
         70:98:44:c8:f8:c7:a6:37:45:8f:59:89:39:36:be:2e:e8:97:
         4a:07:ab:ba:cb:a0:24:17:e3:b1:a0:57:d9:79:8e:68:70:15:
         22:07:a3:a4:c4:f6:49:03:da:b8:5b:24:dd:3c:79:ce:2f:0f:
         d1:5a:07:45:3c:9c:8e:23:c5:8d:62:67:04:c3:67:42:16:b9:
         23:0e:a4:f1:77:42:a3:a0:f7:5b:d4:56:83:8d:7b:f9:dd:11:
         b1:8d:ff:9f:27:c5:84:88:e9:3d:c1:e9:82:3e:ff:c9:87:3a:
         f8:c1:2c:f0:28:c6:ba:3e:c9:ab:60:db:61:d9:ec:ab:75:65:
         9c:c9:12:4d:83:b0:78:9e:d6:f0:67:54:ff:8f:31:7d:a7:1e:
         53:54:ed:1f:47:2e:58:0b:06:92:6f:4e:27:87:7d:19:60:92:
         5e:22:89:8b:c9:15:98:21:06:5d:49:e5:94:29:e4:5e:c9:fb:
         2c:3a:5d:10:a3:35:06:11:5f:36:10:a3:8e:79:39:93:18:ba:
         e6:39:94:68:6d:31:81:bd:13:8b:a9:10:07:d2:09:95:fd:b4:
         f8:7a:fa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:41 2026 by rpki-client