Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
File:                     EVYEuolej7O0mix4CI6f8v-XCgg.mft (raw, json)
Hash identifier:          UM1PDth09u2EI5+8SLpRY7EMo2oqn4vf3ceEN0ISwTM=
Subject key identifier:   65:0F:9B:38:7A:8F:71:64:E0:9C:20:7A:2A:F2:69:0B:5C:33:D1:8E
Authority key identifier: 11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08
Certificate issuer:       /CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
Certificate serial:       019CADC829BA80E11463ED4B9A58A8A50048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
Manifest number:          17DA
Signing time:             Mon 02 Mar 2026 09:01:42 +0000
Manifest this update:     Mon 02 Mar 2026 09:01:42 +0000
Manifest next update:     Tue 03 Mar 2026 09:01:42 +0000
Files and hashes:         1: D2oqUhdf6v322Kq7aCwzoafCx3U.roa (hash: CzJPEN/QpFx29CuMxUcoUKMypFWDJ3GADlvAaNhlIkc=)
                          2: EVYEuolej7O0mix4CI6f8v-XCgg.crl (hash: njVTFuvpC0umutvD6FvvRqX3Ncj3CY1t9190U6mV6g4=)
                          3: RE-y5UWae9kc6ojVIH56XxmACr0.roa (hash: j/z24dExP/WvDCtL8Orm37v2PbHsD3oP4PyBU5DcPnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c8:29:ba:80:e1:14:63:ed:4b:9a:58:a8:a5:00:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115604ba895e8fb3b49a2c78088e9ff2ff970a08
        Validity
            Not Before: Mar  2 09:01:42 2026 GMT
            Not After : Mar  3 09:01:42 2026 GMT
        Subject: CN=650f9b387a8f7164e09c207a2af2690b5c33d18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:33:9c:73:83:4c:ac:6d:be:49:c7:02:8c:
                    39:4d:c5:b0:ca:67:bf:4c:07:b2:2e:01:a6:07:b6:
                    76:08:8d:9c:cd:09:55:de:e9:0d:c1:35:5e:27:8f:
                    30:a1:5f:2e:1d:6a:ce:5a:e8:eb:62:9c:3b:fc:55:
                    ca:1c:66:68:b5:22:10:8e:48:d5:7d:c3:dd:36:ba:
                    52:ee:85:ca:66:a2:69:b1:9f:2c:a1:31:78:0c:85:
                    9e:6e:c4:89:2f:7a:d5:72:3e:48:f6:76:64:7e:2d:
                    0d:c8:76:bf:4a:fa:08:d4:02:6d:bb:91:63:52:52:
                    47:ba:f1:f3:2b:aa:30:98:af:ab:5f:46:c7:99:81:
                    54:42:b6:5e:bd:11:b0:a8:40:0e:c0:6a:72:3a:8f:
                    4c:98:e5:5f:d2:39:8f:47:ba:fc:c8:0a:7b:67:c1:
                    97:06:41:c2:e9:51:35:11:30:46:43:d4:83:41:57:
                    90:df:ab:d8:de:12:84:e4:b2:32:80:84:9c:82:00:
                    87:95:43:08:f8:9c:cb:17:00:a0:ba:d3:d1:dd:21:
                    42:cc:0f:02:18:89:9f:b3:9a:0b:ba:90:7f:da:15:
                    64:14:d7:c5:00:b4:cb:06:1c:ad:13:0f:97:0b:f7:
                    b5:08:78:23:09:07:77:c7:49:77:73:d6:53:f1:87:
                    ce:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0F:9B:38:7A:8F:71:64:E0:9C:20:7A:2A:F2:69:0B:5C:33:D1:8E
            X509v3 Authority Key Identifier:
                keyid:11:56:04:BA:89:5E:8F:B3:B4:9A:2C:78:08:8E:9F:F2:FF:97:0A:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVYEuolej7O0mix4CI6f8v-XCgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/EVYEuolej7O0mix4CI6f8v-XCgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:af:88:5f:c4:7d:5c:7d:ef:40:c2:57:80:e5:a5:0d:6e:bf:
         7c:1a:41:6d:90:a8:de:12:fc:57:60:05:25:ef:d6:3b:32:46:
         84:64:11:df:c4:0b:e4:b7:c8:e7:8c:ab:37:53:87:4c:ef:e8:
         c4:56:29:53:a1:d1:22:f4:73:0e:09:02:3b:5e:84:b5:b3:ad:
         8a:15:b2:87:36:b2:be:d5:90:c3:50:43:b3:35:5e:01:a2:8f:
         90:5b:91:57:d0:3a:7e:bf:6c:0e:78:f3:e0:6c:52:69:fd:ad:
         5a:ea:1f:4e:b8:db:af:16:59:f2:7d:16:dc:1d:43:69:aa:e1:
         45:7d:62:26:17:ae:c7:65:7d:28:ae:19:f0:88:11:9e:db:fe:
         56:33:05:48:b4:ff:b6:07:fd:c5:32:01:61:ff:39:0c:65:ec:
         d4:92:81:36:db:ca:1e:35:7f:11:76:14:bf:43:d5:d4:37:5b:
         ea:48:4c:44:b3:bd:05:a0:7d:f3:25:42:b6:d8:f0:51:6f:f4:
         97:ce:d9:16:4c:00:fc:e0:58:60:f8:e0:1c:04:00:16:f6:ff:
         e9:49:19:ee:0f:46:51:9a:32:58:2e:5e:ea:4c:0c:8a:d2:07:
         e9:9b:73:4e:f4:12:00:75:92:6b:3b:50:6e:4c:d3:d7:58:29:
         26:9a:60:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:42 2026 by rpki-client