Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
File:                     EVYEuolej7O0mix4CI6f8v-XCgg.mft (raw, json)
Hash identifier:          ywgfFAztQ7fxMSRVKsK4MYUT82PON3LAJ57uVELSEfQ=
Subject key identifier:   2C:CF:EA:45:F9:0E:5C:E8:74:5D:72:7E:46:9F:53:92:4C:C7:E5:EE
Authority key identifier: 11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08
Certificate issuer:       /CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
Certificate serial:       019DA4F90A6E2CBE266E2C6B5001032E295D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
Manifest number:          185A
Signing time:             Sun 19 Apr 2026 09:01:17 +0000
Manifest this update:     Sun 19 Apr 2026 09:01:17 +0000
Manifest next update:     Mon 20 Apr 2026 09:01:17 +0000
Files and hashes:         1: D2oqUhdf6v322Kq7aCwzoafCx3U.roa (hash: CzJPEN/QpFx29CuMxUcoUKMypFWDJ3GADlvAaNhlIkc=)
                          2: EVYEuolej7O0mix4CI6f8v-XCgg.crl (hash: hmc3ISISRGJ4F6cUYCc15CZlow6kDzYr5hNqT0eDU58=)
                          3: RE-y5UWae9kc6ojVIH56XxmACr0.roa (hash: j/z24dExP/WvDCtL8Orm37v2PbHsD3oP4PyBU5DcPnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:f9:0a:6e:2c:be:26:6e:2c:6b:50:01:03:2e:29:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
        Validity
            Not Before: Apr 19 09:01:17 2026 GMT
            Not After : Apr 20 09:01:17 2026 GMT
        Subject: CN=2ccfea45f90e5ce8745d727e469f53924cc7e5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e9:ba:5a:5c:cf:30:4c:b2:0a:df:da:0f:81:
                    7e:af:b3:10:ad:a7:8b:d4:97:61:0c:ea:72:1c:27:
                    ba:d0:af:fd:d7:1c:40:f9:28:7d:ed:4e:d0:9e:16:
                    83:2b:bc:02:9b:bf:5a:b3:fd:1f:3c:93:23:4b:67:
                    39:0b:e9:13:ba:82:c6:1d:10:a0:bf:5e:8c:47:ae:
                    cd:e8:19:d0:41:00:d9:80:fb:37:0a:30:d7:d3:86:
                    d4:c1:b8:2b:be:3a:85:92:58:f9:2e:17:8b:f1:91:
                    e8:e1:71:b3:4f:d1:fd:30:72:2d:95:5c:f9:83:b9:
                    7f:46:be:3f:92:5b:9b:22:5f:70:39:b8:d0:ff:32:
                    3b:c9:4c:c3:cb:9a:52:b2:84:f3:4c:05:0d:76:aa:
                    fd:f2:d9:a5:ac:16:67:12:05:06:05:a0:e5:27:3a:
                    f5:32:a4:a9:c7:f3:7e:0c:48:1c:a8:e4:60:08:93:
                    2f:44:68:8d:53:bc:cc:04:67:65:f8:e0:8b:0b:2f:
                    e2:d4:ed:9c:0c:26:e0:29:8c:7a:68:54:63:2f:b1:
                    99:3e:45:e4:82:95:f8:8b:1d:0b:aa:fb:1e:da:fd:
                    0e:17:e3:c3:9b:ca:c5:ef:45:8c:f8:95:1c:5c:c4:
                    7a:4d:a6:b3:89:52:93:2f:74:fa:40:c1:b4:ce:83:
                    31:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CF:EA:45:F9:0E:5C:E8:74:5D:72:7E:46:9F:53:92:4C:C7:E5:EE
            X509v3 Authority Key Identifier:
                keyid:11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ca:f8:9e:d7:b9:1b:e1:bb:82:ff:b5:01:12:1c:96:25:42:
         f3:bb:43:8c:13:75:d9:4c:27:b7:e6:80:e2:a6:ff:3b:9c:63:
         75:51:4e:bf:68:33:1f:f4:5c:02:73:1b:80:4f:52:28:a0:fd:
         9f:8a:b2:8d:08:a7:38:8f:01:18:88:30:37:1c:ad:62:2d:05:
         b1:bd:6e:a9:26:de:b5:ad:d8:5d:1e:e0:a8:a7:0e:7e:3a:3c:
         b4:8c:3d:3b:5b:62:7d:6c:15:82:1a:db:a5:b1:17:70:f4:90:
         b8:ac:b8:84:97:b2:8e:b9:9a:e1:a0:6f:2b:cd:a6:3e:3b:39:
         68:1a:15:21:b5:2f:15:27:b4:a9:20:dd:c7:b0:7d:8c:da:2a:
         a5:4a:96:c7:a6:98:cb:a9:02:51:01:21:3e:28:d1:59:58:97:
         7a:66:d5:be:cd:aa:27:fb:72:3a:a2:ea:63:41:c0:71:12:00:
         59:0f:fd:ae:9d:bf:22:a7:1c:e1:28:d0:b2:69:fd:36:3f:b1:
         21:6c:4f:c0:24:b0:98:e1:a2:0f:7c:e0:ef:0c:c7:a1:4b:7b:
         c5:b0:4e:e1:6d:d4:24:04:cc:a4:d0:1b:1a:a2:6a:26:70:9b:
         f8:5a:02:ef:e0:cf:42:5e:c7:90:21:7f:a4:12:a4:20:7a:ea:
         3a:ae:2e:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2k+QpuLL4mbixrUAEDLildMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNTYwNGJhODk1ZThmYjNiNDlhMmM3ODA4OGU5ZmYyZmY5
NzBhMDgwHhcNMjYwNDE5MDkwMTE3WhcNMjYwNDIwMDkwMTE3WjAzMTEwLwYDVQQD
EygyY2NmZWE0NWY5MGU1Y2U4NzQ1ZDcyN2U0NjlmNTM5MjRjYzdlNWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4em6WlzPMEyyCt/aD4F+r7MQraeL
1JdhDOpyHCe60K/91xxA+Sh97U7QnhaDK7wCm79as/0fPJMjS2c5C+kTuoLGHRCg
v16MR67N6BnQQQDZgPs3CjDX04bUwbgrvjqFklj5LheL8ZHo4XGzT9H9MHItlVz5
g7l/Rr4/klubIl9wObjQ/zI7yUzDy5pSsoTzTAUNdqr98tmlrBZnEgUGBaDlJzr1
MqSpx/N+DEgcqORgCJMvRGiNU7zMBGdl+OCLCy/i1O2cDCbgKYx6aFRjL7GZPkXk
gpX4ix0Lqvse2v0OF+PDm8rF70WM+JUcXMR6TaaziVKTL3T6QMG0zoMxuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzP6kX5DlzodF1yfkafU5JMx+XuMB8GA1UdIwQY
MBaAFBFWBLqJXo+ztJoseAiOn/L/lwoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVZZRXVvbGVqN08wbWl4NENJNmY4di1YQ2dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jNDJiMzctZDQ0OC00Y2YzLWJmZWMt
MTY5MmZjOGJiYTE1LzEvRVZZRXVvbGVqN08wbWl4NENJNmY4di1YQ2dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jNDJiMzctZDQ0OC00Y2YzLWJmZWMtMTY5MmZjOGJiYTE1
LzEvRVZZRXVvbGVqN08wbWl4NENJNmY4di1YQ2dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8r4nte5
G+G7gv+1ARIcliVC87tDjBN12Uwnt+aA4qb/O5xjdVFOv2gzH/RcAnMbgE9SKKD9
n4qyjQinOI8BGIgwNxytYi0Fsb1uqSbeta3YXR7gqKcOfjo8tIw9O1tifWwVghrb
pbEXcPSQuKy4hJeyjrma4aBvK82mPjs5aBoVIbUvFSe0qSDdx7B9jNoqpUqWx6aY
y6kCUQEhPijRWViXembVvs2qJ/tyOqLqY0HAcRIAWQ/9rp2/Iqcc4SjQsmn9Nj+x
IWxPwCSwmOGiD3zg7wzHoUt7xbBO4W3UJATMpNAbGqJqJnCb+FoC7+DPQl7HkCF/
pBKkIHrqOq4u2A==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:19:00 2026 by rpki-client