Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
File:                     evUSKXc6-RV-MXFg-dyADzgeCys.mft (raw, json)
Hash identifier:          +lRv/jpqFS4tpE+vNQIGr4Edaa5fRlSXpoUxjQRBJMk=
Subject key identifier:   D9:3E:88:DA:DA:07:D2:82:D6:58:02:85:71:B2:94:71:C4:5F:B9:1A
Authority key identifier: 7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
Certificate issuer:       /CN=7af51229773af9157e317160f9dc800f381e0b2b
Certificate serial:       01A0BFC32FF2DE417DC853E60C5B7D102627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
Manifest number:          0311
Signing time:             Sun 20 Sep 2026 17:00:35 +0000
Manifest this update:     Sun 20 Sep 2026 17:00:35 +0000
Manifest next update:     Mon 21 Sep 2026 17:00:35 +0000
Files and hashes:         1: 0JXzPsfQiwnhkAPuwUcoZ4TksqU.roa (hash: PLw1g8tEdu8DohzHWXzHrIGYzVNggXd55nUqO0fw1fA=)
                          2: HLXrwT45MTMa_mhCV00Hv0aHA2k.roa (hash: rkZE6mPZWfH9GMHGmnUqFvkyHWkjWIxlqyhyBnTw+1k=)
                          3: Kv2Ob7_hFEbgI_ftySsGnX4M3XQ.roa (hash: s+/q4sVi5Ud8SeTEnpw7PXXetnDgzT/C+VQ7Whvxsmw=)
                          4: LvZoa6Dyn3b8TsOgucX2IIHA2DU.roa (hash: txHAgVDu8eC+tRA2fpR62W+UF+dAIZZl7YAt2C2To5c=)
                          5: QcxSXFyqidHUk327u_nSMoqZheg.roa (hash: 4xwfEjK2GS0Bj8Odb8CMpXnbw4DAt7dP8ep7zLWLlyw=)
                          6: TGFfC8MsVtioSptjBohz0xvP3A0.roa (hash: Mv1j9mh4sO8DAuKoAT6/I6dcEMRxG28gweD0Pzi0ZKQ=)
                          7: VBa7pmCn8ime4P1CWdu0-bHF6pU.roa (hash: Zu7orNKKN0lHI4UfSn3mVOtovclqiBwC91Fgfm2M6m8=)
                          8: bGG4QXxgUzwoqqwAgB5WAK-Uxto.roa (hash: TEYIeaNaWOf9ouUEps9+2mmWqssPfLKwLjfKOLn+W1s=)
                          9: evUSKXc6-RV-MXFg-dyADzgeCys.crl (hash: 02W5T4J0qfQaza7hhLAU+oCRmBEDDEyzIIvpPwWM8tU=)
                          10: r-_3l2QQDk49Rp0j80drAiEu4kU.roa (hash: 0nT9J9nUi2CAiLfvcK69CvCos9Ne+xvHeMLkDsNE+kg=)
                          11: vcGQBCURbj2L-uTMuaODdad6bpM.roa (hash: 8edgli6gjAqsAbbauaZPwf+GB5AGSQnsq/FwGpi7vQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 17:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:c3:2f:f2:de:41:7d:c8:53:e6:0c:5b:7d:10:26:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af51229773af9157e317160f9dc800f381e0b2b
        Validity
            Not Before: Sep 20 17:00:35 2026 GMT
            Not After : Sep 21 17:00:35 2026 GMT
        Subject: CN=d93e88dada07d282d658028571b29471c45fb91a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f4:a6:6c:ff:9e:18:19:f4:e0:59:7a:f0:40:
                    ff:04:1f:cc:73:79:37:8a:93:30:a9:b2:67:90:9b:
                    f1:c9:ea:de:0b:66:4d:99:aa:13:37:be:79:b1:b1:
                    14:08:48:7c:45:b3:a3:ec:94:c2:70:c3:5a:fa:1d:
                    83:35:d9:54:1c:03:9c:94:38:eb:d9:bd:23:98:64:
                    84:8c:fc:a4:8c:3f:59:11:31:7a:d8:47:fd:e8:d4:
                    a1:6d:1e:d8:09:c0:7b:f4:0b:c4:f3:15:67:fb:13:
                    aa:78:29:a3:7c:86:38:8f:13:c2:e2:49:a6:15:35:
                    63:bd:9a:f3:f0:72:7e:79:06:d8:73:48:c2:69:90:
                    0d:79:cf:43:50:a4:62:2b:cd:f0:57:2e:65:d3:88:
                    6e:dc:22:41:f0:54:16:d0:79:ad:28:04:37:5f:42:
                    47:f5:c9:35:41:03:c8:25:57:88:63:4d:49:32:a8:
                    21:e5:ea:81:6f:96:e3:5e:48:1e:3c:a4:d1:07:63:
                    10:f2:97:2b:24:be:07:98:37:f1:a9:70:29:15:e5:
                    66:62:ef:af:cc:08:13:7b:fb:7f:36:62:03:32:3a:
                    16:b7:35:1f:d8:79:d2:a2:16:95:30:2c:bb:74:40:
                    be:37:06:26:22:a3:09:40:ec:4d:fd:5d:2c:be:29:
                    e5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3E:88:DA:DA:07:D2:82:D6:58:02:85:71:B2:94:71:C4:5F:B9:1A
            X509v3 Authority Key Identifier:
                keyid:7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:63:be:fc:1a:17:5b:92:d0:34:d2:54:93:dd:9a:a4:30:6b:
         52:72:51:dc:2d:c4:73:0e:a9:47:6c:fd:1b:50:a4:97:f0:ff:
         9c:8e:e4:a3:3f:96:45:e3:2f:c9:0f:8d:a4:f0:7b:7f:d5:17:
         72:40:78:c7:20:88:d9:80:e1:a2:7d:e4:28:c4:d9:8b:a3:84:
         06:7f:25:ab:74:82:73:6d:b5:3f:e4:26:44:c9:20:8d:3f:8e:
         41:3c:77:6d:26:a1:1e:f6:66:0b:97:fe:96:c5:2f:c4:43:bb:
         24:fe:f5:58:60:a1:42:c2:71:f3:b9:21:f7:30:f7:45:45:32:
         67:5d:85:d1:4a:e9:5b:12:ba:4a:86:c8:2b:71:5b:a1:17:e3:
         3a:71:d9:27:bc:24:18:5b:4b:a8:8c:96:f3:2a:62:4b:ee:98:
         12:e2:1c:8c:a0:a7:96:6d:83:43:ab:1b:ce:41:07:52:ea:ed:
         78:d4:cf:22:e2:53:a1:8f:11:c4:f7:38:c6:0d:e8:b8:13:ad:
         c1:e6:0b:2c:7d:b5:a5:32:b6:52:2a:25:07:67:4c:81:b2:59:
         32:a4:00:75:db:9d:0e:77:0a:96:8b:d6:31:cb:bf:ce:01:14:
         eb:92:d7:ba:8d:1d:74:c0:7a:10:ce:d2:05:a1:eb:32:ce:19:
         7f:2c:f1:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/wy/y3kF9yFPmDFt9ECYnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjUxMjI5NzczYWY5MTU3ZTMxNzE2MGY5ZGM4MDBmMzgx
ZTBiMmIwHhcNMjYwOTIwMTcwMDM1WhcNMjYwOTIxMTcwMDM1WjAzMTEwLwYDVQQD
EyhkOTNlODhkYWRhMDdkMjgyZDY1ODAyODU3MWIyOTQ3MWM0NWZiOTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvSmbP+eGBn04Fl68ED/BB/Mc3k3
ipMwqbJnkJvxyereC2ZNmaoTN755sbEUCEh8RbOj7JTCcMNa+h2DNdlUHAOclDjr
2b0jmGSEjPykjD9ZETF62Ef96NShbR7YCcB79AvE8xVn+xOqeCmjfIY4jxPC4kmm
FTVjvZrz8HJ+eQbYc0jCaZANec9DUKRiK83wVy5l04hu3CJB8FQW0HmtKAQ3X0JH
9ck1QQPIJVeIY01JMqgh5eqBb5bjXkgePKTRB2MQ8pcrJL4HmDfxqXApFeVmYu+v
zAgTe/t/NmIDMjoWtzUf2HnSohaVMCy7dEC+NwYmIqMJQOxN/V0svinlQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNk+iNraB9KC1lgChXGylHHEX7kaMB8GA1UdIwQY
MBaAFHr1Eil3OvkVfjFxYPncgA84HgsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjIt
ZWUxZWE2MzZlZDRmLzEvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjItZWUxZWE2MzZlZDRm
LzEvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmO+/BoX
W5LQNNJUk92apDBrUnJR3C3Ecw6pR2z9G1Ckl/D/nI7koz+WReMvyQ+NpPB7f9UX
ckB4xyCI2YDhon3kKMTZi6OEBn8lq3SCc221P+QmRMkgjT+OQTx3bSahHvZmC5f+
lsUvxEO7JP71WGChQsJx87kh9zD3RUUyZ12F0UrpWxK6SobIK3FboRfjOnHZJ7wk
GFtLqIyW8ypiS+6YEuIcjKCnlm2DQ6sbzkEHUurteNTPIuJToY8RxPc4xg3ouBOt
weYLLH21pTK2UiolB2dMgbJZMqQAddudDncKlovWMcu/zgEU65LXuo0ddMB6EM7S
BaHrMs4ZfyzxJA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 05:07:47 2026 by rpki-client