Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
File:                     1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json)
Hash identifier:          C1SoBed1VvZOzeNRDPPjdSHJ1OHus2isAqTN8xRcgIw=
Subject key identifier:   D8:21:50:DF:65:19:7E:55:79:80:90:9C:AB:CF:29:AC:9F:E8:CC:0E
Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
Certificate issuer:       /CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Certificate serial:       01A11A507A9C6E6BE22DC6613844D03BA98C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
Manifest number:          1A92
Signing time:             Thu 08 Oct 2026 07:00:44 +0000
Manifest this update:     Thu 08 Oct 2026 07:00:44 +0000
Manifest next update:     Fri 09 Oct 2026 07:00:44 +0000
Files and hashes:         1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: CyEdj2TyQ+BLAUZpfEi5qbTczCfhrg1hNDD6VzE/o6Q=)
                          2: DyBrkSK4a6M3RlwftQhSDaHeKfM.roa (hash: h4xKh81GTCFolaSYT7/bVgNQm45KFUeIOt1K9PqX3Yc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:50:7a:9c:6e:6b:e2:2d:c6:61:38:44:d0:3b:a9:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0
        Validity
            Not Before: Oct  8 07:00:44 2026 GMT
            Not After : Oct  9 07:00:44 2026 GMT
        Subject: CN=d82150df65197e557980909cabcf29ac9fe8cc0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f6:ed:b5:8d:10:50:92:3e:45:57:f5:5d:76:
                    52:44:af:46:33:aa:9a:8b:d7:aa:80:cb:20:3f:38:
                    38:b9:41:2c:f2:ad:15:6e:4b:66:34:a5:4f:dc:b8:
                    80:fb:2d:77:e1:4c:4c:cd:17:36:35:67:d5:84:7b:
                    39:81:00:3a:b0:0a:69:c4:de:61:61:36:19:8d:1f:
                    46:df:46:7f:1e:bd:bd:e4:09:c3:4d:cd:43:fa:ff:
                    b6:0b:34:f4:a3:5d:fb:a3:7a:ed:e9:0d:29:5c:a9:
                    eb:43:1e:a5:f9:d8:ad:1a:9d:02:99:b5:bf:02:fd:
                    6d:44:54:ba:35:7e:4f:0b:2a:0f:b4:8d:b5:a6:fc:
                    80:dc:e6:26:68:5d:78:42:23:24:3b:8e:81:55:ef:
                    ed:52:03:20:9a:e7:73:9d:0a:68:95:72:48:93:f3:
                    34:6e:18:ea:1e:6d:ad:c6:92:91:5d:e3:67:c5:b2:
                    e3:68:10:c9:53:85:7a:7b:0d:24:46:b0:c0:c6:13:
                    09:38:76:41:08:11:d7:1d:d5:52:87:92:05:f6:81:
                    e0:d8:82:9b:d2:bb:5c:91:28:6f:55:a0:b3:f7:4d:
                    cc:33:6d:45:0e:9d:f9:05:0f:a4:cc:f1:88:93:23:
                    0c:b0:0a:e9:32:93:53:41:18:9d:97:4a:89:01:db:
                    96:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:21:50:DF:65:19:7E:55:79:80:90:9C:AB:CF:29:AC:9F:E8:CC:0E
            X509v3 Authority Key Identifier:
                keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:91:bb:63:4b:27:f0:8a:3d:a8:f9:21:f7:1a:61:5b:bd:f7:
         fe:54:f4:e7:a4:2f:82:3d:7e:70:06:38:87:59:47:1d:d0:43:
         3a:69:f7:65:67:04:4a:f0:ac:94:b9:13:9f:7d:74:4f:f1:4b:
         2a:29:8d:86:ef:61:ae:e3:6c:bf:18:11:85:19:e2:29:74:90:
         81:f3:36:fc:81:c8:e3:28:8c:69:af:14:ee:be:b5:73:1b:e1:
         44:86:be:95:f7:ab:75:f5:23:76:01:71:2e:46:83:8d:ac:ce:
         2a:f9:45:9a:cf:20:3e:a2:9a:56:62:df:b3:5e:92:21:12:31:
         97:a8:be:e6:9e:1f:6d:72:d8:0d:e8:00:6c:67:ce:af:c0:f2:
         27:aa:50:2f:91:2b:4b:2c:58:5d:bd:03:d2:1a:52:63:30:2c:
         20:ff:23:cb:99:58:f2:df:60:25:4f:35:05:08:c1:24:49:52:
         75:06:57:89:f4:40:d5:d7:d6:d5:aa:bf:b1:04:7d:80:49:4b:
         2a:df:9a:13:6c:ca:c9:fb:67:bb:e5:32:88:ad:25:60:17:a2:
         2f:20:19:a6:37:a9:26:0a:fb:d6:9c:e0:92:c1:76:ed:a3:79:
         6c:88:f4:d2:c0:82:69:3e:18:d8:ad:a0:57:88:34:a8:27:e9:
         bc:60:c4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:26:33 2026 by rpki-client