Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
File:                     evUSKXc6-RV-MXFg-dyADzgeCys.mft (raw, json)
Hash identifier:          KgqybkL1KY6hPqp6oh3gj0bLqf5iLTWCqmZng7s2uLU=
Subject key identifier:   73:F6:96:0E:B8:46:A1:F1:D6:D2:3D:DC:D2:3F:8A:E5:D7:28:DC:21
Authority key identifier: 7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
Certificate issuer:       /CN=7af51229773af9157e317160f9dc800f381e0b2b
Certificate serial:       019D9C63691944845534CE63CF32520A9F9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
Manifest number:          016F
Signing time:             Fri 17 Apr 2026 17:00:53 +0000
Manifest this update:     Fri 17 Apr 2026 17:00:53 +0000
Manifest next update:     Sat 18 Apr 2026 17:00:53 +0000
Files and hashes:         1: HLXrwT45MTMa_mhCV00Hv0aHA2k.roa (hash: rkZE6mPZWfH9GMHGmnUqFvkyHWkjWIxlqyhyBnTw+1k=)
                          2: QcxSXFyqidHUk327u_nSMoqZheg.roa (hash: 4xwfEjK2GS0Bj8Odb8CMpXnbw4DAt7dP8ep7zLWLlyw=)
                          3: evUSKXc6-RV-MXFg-dyADzgeCys.crl (hash: FfVwsbV4SeGD809kpNrpvgcPU+lOzNZkcfk8mqEzAg8=)
                          4: r-_3l2QQDk49Rp0j80drAiEu4kU.roa (hash: 0nT9J9nUi2CAiLfvcK69CvCos9Ne+xvHeMLkDsNE+kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:63:69:19:44:84:55:34:ce:63:cf:32:52:0a:9f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af51229773af9157e317160f9dc800f381e0b2b
        Validity
            Not Before: Apr 17 17:00:53 2026 GMT
            Not After : Apr 18 17:00:53 2026 GMT
        Subject: CN=73f6960eb846a1f1d6d23ddcd23f8ae5d728dc21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9d:44:8e:9f:6d:06:de:2c:67:e4:82:57:ac:
                    43:88:22:32:14:0e:2f:30:43:d8:05:bd:ae:19:8c:
                    53:be:42:f0:da:dc:4a:9d:61:f4:bd:03:99:bf:bd:
                    f1:98:7a:aa:b7:5c:26:a4:7c:0c:cf:f4:79:9b:4c:
                    81:a9:86:d4:6b:44:bf:f3:9b:71:e0:34:f9:e4:05:
                    21:10:ee:21:93:51:fa:03:47:f8:b9:29:b4:53:59:
                    a5:1e:12:ab:f3:59:f0:ed:39:66:33:fa:48:84:92:
                    05:df:f1:55:70:7e:54:63:d1:d6:69:7f:cc:ba:16:
                    dd:5f:45:f2:50:4a:04:f1:02:61:95:3f:c1:dc:fb:
                    1e:5f:94:cb:db:5d:7c:c9:da:9e:58:8a:c3:f4:65:
                    d8:59:a9:9f:e4:19:d3:a7:4e:9a:5b:03:60:65:a8:
                    17:9a:e9:93:84:11:dd:ca:c8:8c:a1:61:93:df:e5:
                    ff:6b:05:39:67:39:55:0e:44:39:2b:b9:7b:07:9d:
                    d2:75:5d:d3:0f:36:34:cd:d8:e1:df:88:4a:3d:23:
                    c1:1f:3c:78:7a:d3:77:74:cd:9d:e9:90:f8:2e:04:
                    d8:72:e7:20:0d:13:96:1f:9a:49:e3:55:f3:a7:18:
                    86:79:9f:c7:40:08:71:24:a0:5a:99:98:63:fc:8a:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F6:96:0E:B8:46:A1:F1:D6:D2:3D:DC:D2:3F:8A:E5:D7:28:DC:21
            X509v3 Authority Key Identifier:
                keyid:7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:a2:a5:e8:7c:d3:ea:7a:bc:bb:bd:68:12:05:35:18:09:5a:
         e6:d7:b1:c6:72:7e:a8:58:b1:93:d9:d6:8f:fa:e9:1b:99:1a:
         67:1e:fb:26:e1:c8:2f:80:99:40:eb:e7:70:f0:3e:49:3e:47:
         f8:ab:2b:36:7a:bb:9d:13:c3:66:57:00:d5:15:39:8e:16:7c:
         3d:dd:e6:46:3e:8c:03:90:10:a0:67:45:c2:a7:93:89:0e:18:
         7b:2d:12:9d:bb:36:62:25:6e:ab:b4:31:e6:1a:8f:8c:fd:56:
         e5:56:1c:07:4d:61:c4:db:f6:37:56:5d:52:35:77:ca:cc:d7:
         10:ac:87:13:30:7a:17:36:b4:8c:90:77:2e:46:9e:b2:d6:c2:
         88:36:2a:c8:bb:a2:71:56:58:ca:71:c6:26:62:d7:97:02:ac:
         d1:69:df:8d:97:42:b9:4f:83:09:e0:82:f6:63:88:f8:29:bf:
         ba:cd:82:c1:92:f0:d7:76:6b:3e:5f:4e:39:d6:4d:d7:8c:41:
         ab:2e:b1:ed:e7:35:12:82:af:73:62:77:49:73:b7:8d:91:64:
         28:3c:64:ea:a5:7b:23:5a:8d:8f:a2:43:41:76:d5:5e:27:9f:
         30:2a:cb:0b:bf:5a:ef:81:07:f5:87:b0:c6:9d:0c:80:d5:5c:
         c2:b5:a8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:34 2026 by rpki-client