Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft
File:                     evV91Sx1_OOf_ikVRp2eZW28uHM.mft (raw, json)
Hash identifier:          AHT/POchet2l1akeROe2pUhcE2IUM+zsxNqpUP0s7ps=
Subject key identifier:   40:FA:11:28:B5:9D:86:AC:46:18:C1:69:CC:3F:A1:EE:37:0D:68:16
Authority key identifier: 7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73
Certificate issuer:       /CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
Certificate serial:       019CABD99A50ADBA4293575E0B5F0075839F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft
Manifest number:          04B0
Signing time:             Mon 02 Mar 2026 00:01:30 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:30 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:30 +0000
Files and hashes:         1: OEQtUxhCqgRKgsQijA1Rf1Wanvc.roa (hash: ujBvPhT5RvPyeoGycZQuLI7qxEY9F3PhaV8bJw3z0uc=)
                          2: S82EbIGBPvrwBTr33L6baESNSh8.roa (hash: 08DqMUNy9twM3/MtGJYse80+j+yhAmD8ZoaDNcqSBuA=)
                          3: XRZNJmSwoCCruBvANXT6FCksdHk.roa (hash: CmfA35/pQKkqV1sK1fxh6Dc0ttmfjf56VM7KZgq5kNw=)
                          4: a-VcOFrW0mipdK5F6AKuemVIhSA.roa (hash: KxJlkPql6WwtVVIt8TNbKP2+cnBjbuiMr7nCAMGKWYk=)
                          5: evV91Sx1_OOf_ikVRp2eZW28uHM.crl (hash: K8dLVswfZSMQelTP/rcom06Qb6640sTLM9Sb0XaKbPs=)
                          6: xJlpiyff9JZ6gS3ySDUE7yUsTME.roa (hash: gSGRAeospXJ01runlvaUz1GWf0dKKl7ovgIv3++u1eA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:9a:50:ad:ba:42:93:57:5e:0b:5f:00:75:83:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af57dd52c75fce39ffe2915469d9e656dbcb873
        Validity
            Not Before: Mar  2 00:01:30 2026 GMT
            Not After : Mar  3 00:01:30 2026 GMT
        Subject: CN=40fa1128b59d86ac4618c169cc3fa1ee370d6816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:9f:cd:a9:6f:e4:74:92:7c:43:0d:f7:f7:
                    95:5e:ec:51:f8:2b:f8:51:df:8c:31:ea:11:4b:9c:
                    16:f8:17:9e:be:05:64:5b:4f:a6:bf:c0:6c:24:8c:
                    9e:49:0a:d4:d8:3a:97:de:9d:1e:de:ea:86:c5:83:
                    2e:b0:1a:a9:ed:32:09:4d:ce:28:c7:5d:bc:a4:f1:
                    75:af:8c:4e:cd:4c:6b:e9:7f:ab:1e:af:c8:c7:7f:
                    54:00:37:4a:e9:9a:98:9b:e3:3c:66:71:83:18:ea:
                    b6:4f:69:b6:2f:2d:42:c4:37:43:5e:00:6e:fa:50:
                    4c:d7:67:93:ba:bd:8a:d3:62:6d:3e:6f:74:b6:df:
                    cc:6e:3f:7c:56:4a:eb:43:78:0f:69:0d:a6:e7:f3:
                    83:4b:06:ff:79:28:13:81:f9:9c:cb:2a:57:c7:37:
                    86:1a:74:71:53:2a:2b:ee:56:4e:03:4c:9b:bb:c6:
                    5f:b8:3c:84:a5:40:5b:c5:ba:26:f6:c3:da:e2:01:
                    b3:9b:ce:99:e4:1a:80:82:cf:88:48:40:61:9f:c9:
                    b0:73:8b:e1:50:42:cc:5b:0f:de:dc:de:86:0f:e4:
                    36:74:44:1c:2d:0b:ec:5e:7e:5e:c5:41:46:71:c0:
                    3f:cb:53:43:08:68:3e:40:0c:a6:bd:65:a7:dd:ea:
                    02:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FA:11:28:B5:9D:86:AC:46:18:C1:69:CC:3F:A1:EE:37:0D:68:16
            X509v3 Authority Key Identifier:
                keyid:7A:F5:7D:D5:2C:75:FC:E3:9F:FE:29:15:46:9D:9E:65:6D:BC:B8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evV91Sx1_OOf_ikVRp2eZW28uHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8797de-3ae9-4e05-80ff-c2534096c60d/1/evV91Sx1_OOf_ikVRp2eZW28uHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:60:1f:df:e0:ee:39:b0:2a:8a:19:20:a0:80:4c:30:65:3e:
         73:33:a7:65:4c:80:1f:72:5e:8e:de:a1:18:5e:08:b0:9a:1b:
         bc:8a:8a:80:db:d1:fe:9c:52:5e:55:04:c6:cd:0d:a1:06:7f:
         3d:41:16:e3:5e:c7:43:93:6b:09:e5:19:76:79:13:57:96:c9:
         bf:b6:56:3e:5e:7e:81:ee:fc:60:9d:52:20:59:ff:e0:55:e6:
         c7:ad:55:99:ca:06:7c:48:a2:7f:44:98:a1:29:64:a1:dc:fb:
         b2:60:1a:02:a0:14:84:14:7e:04:22:a1:4b:7b:98:85:49:f0:
         67:68:df:44:52:35:f6:e3:38:5b:44:6b:88:bd:8a:22:30:0a:
         cc:35:19:40:34:89:d2:ec:fa:75:de:dd:96:96:f7:02:d0:ce:
         87:01:67:c9:aa:b7:07:bd:80:66:98:fa:ed:a8:30:53:e1:7e:
         e3:3a:84:26:d2:64:bc:f9:ae:19:5e:d6:df:18:62:81:78:1a:
         05:f1:1f:aa:3d:c8:a5:95:48:49:f4:2b:4e:f5:47:88:d7:51:
         d6:30:b8:a5:db:05:7a:40:dd:18:f6:67:0a:ff:b5:33:49:be:
         77:a4:f3:7f:e5:37:6e:da:ab:5d:51:fa:8d:90:ab:af:70:44:
         8e:85:d7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:55 2026 by rpki-client