Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
File:                     evGnv3QoXbLoIJH79GOi7vbjpXg.mft (raw, json)
Hash identifier:          LtnOzXS67Nyvd2HyuoCsmRXmQdXXt1FQdi5WKNbl3sE=
Subject key identifier:   61:0A:F4:EE:28:24:B4:D8:21:AD:17:8A:67:BE:57:DE:B6:1F:87:94
Authority key identifier: 7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78
Certificate issuer:       /CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
Certificate serial:       019DA3AF3B10552124F3D35B0848DE789EC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
Manifest number:          0602
Signing time:             Sun 19 Apr 2026 03:01:03 +0000
Manifest this update:     Sun 19 Apr 2026 03:01:03 +0000
Manifest next update:     Mon 20 Apr 2026 03:01:03 +0000
Files and hashes:         1: LFUS6tQiGpmjI6ItUVw2MpTAETI.roa (hash: FEu4LPnIRepU4N89SAmjCCbg/lOypjW1gLoZTKRnXmE=)
                          2: evGnv3QoXbLoIJH79GOi7vbjpXg.crl (hash: 3nqntNB7+vR5WbfT1aRUxHP/jEFwQ4pF0s0MAwiHYi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:af:3b:10:55:21:24:f3:d3:5b:08:48:de:78:9e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af1a7bf74285db2e82091fbf463a2eef6e3a578
        Validity
            Not Before: Apr 19 03:01:03 2026 GMT
            Not After : Apr 20 03:01:03 2026 GMT
        Subject: CN=610af4ee2824b4d821ad178a67be57deb61f8794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f5:cd:77:2c:2b:fe:58:b3:55:8a:6d:38:27:
                    6a:7f:c4:5b:30:63:a9:38:08:0a:93:d9:bb:6b:38:
                    37:c6:2c:ee:8b:4b:ba:c5:74:16:ea:61:98:45:47:
                    8a:85:b9:73:a8:50:b1:cb:90:ee:6e:e2:e4:52:39:
                    ec:32:75:6c:89:67:5d:e4:a7:f1:e4:41:b2:8a:b8:
                    e2:79:3a:a1:d7:69:45:b4:a4:a2:1f:24:18:ba:f8:
                    71:2a:fe:35:e0:78:aa:e3:66:31:8e:4d:77:f5:14:
                    99:a8:2e:f2:9e:0a:e0:5d:7c:ce:6f:4d:fd:57:b3:
                    0e:b7:0e:e2:7d:dd:47:2d:0b:d7:72:4a:0f:d5:61:
                    6f:57:48:a6:85:03:57:f7:65:ad:98:05:05:61:3a:
                    77:52:c0:0d:c5:7c:1c:98:4a:ca:82:50:8a:3b:1c:
                    59:57:fd:4b:5f:99:7c:05:52:bb:d1:0c:78:d2:7e:
                    ed:9b:0f:1d:3d:42:ca:5f:c0:94:b2:92:8e:77:a5:
                    ac:41:8e:4c:6e:b0:27:93:37:ef:2f:41:7b:84:46:
                    48:1e:a1:00:0b:05:57:51:a3:09:ed:f6:cf:c7:fe:
                    ea:66:00:3e:fa:3e:81:96:44:b8:f8:f6:b6:04:9a:
                    d8:12:89:dc:25:3d:fd:01:ba:e6:cb:8e:31:82:99:
                    38:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0A:F4:EE:28:24:B4:D8:21:AD:17:8A:67:BE:57:DE:B6:1F:87:94
            X509v3 Authority Key Identifier:
                keyid:7A:F1:A7:BF:74:28:5D:B2:E8:20:91:FB:F4:63:A2:EE:F6:E3:A5:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evGnv3QoXbLoIJH79GOi7vbjpXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/058435-a1c6-4436-95a2-b7114b69f84c/1/evGnv3QoXbLoIJH79GOi7vbjpXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b3:d0:11:bc:14:9c:3d:84:9a:2b:dd:36:fa:d4:cb:36:3a:
         ef:37:4e:d8:67:ad:05:ac:dc:9e:ed:61:ff:42:b0:e0:ee:35:
         17:00:8c:9b:ec:08:76:4c:41:8c:b6:1a:86:58:40:ad:3c:ff:
         f4:df:74:84:58:d0:63:51:6a:57:60:19:17:99:13:dd:43:fd:
         5c:a5:85:aa:4c:c7:98:b4:76:b7:0b:40:ac:93:48:4a:e2:b4:
         10:bc:60:bd:20:8e:96:6f:6f:50:ee:67:3a:31:a0:fb:89:6c:
         04:a5:be:15:c0:db:91:93:17:ba:f3:f4:f3:a1:f7:e9:5d:a4:
         92:4e:0f:9e:a1:d6:be:86:60:eb:56:77:2a:f6:cf:cf:87:f5:
         e2:89:7f:1d:63:27:65:55:0b:ba:60:d7:67:ab:72:fd:53:75:
         73:3e:d6:f1:99:f2:0b:eb:75:dc:30:8c:4d:80:83:ed:77:36:
         b8:f2:44:0a:7c:52:94:60:c7:7a:4c:ec:fc:b9:8a:ac:33:d7:
         de:00:90:99:3b:62:12:30:f3:18:b6:23:b4:8d:fa:2f:37:2d:
         44:4f:c9:b9:fe:8c:3b:d5:4b:78:10:12:a0:54:bc:ff:64:43:
         78:1b:88:6c:48:bb:4a:33:cc:e2:f8:f6:17:24:fb:f6:fd:dd:
         71:0b:ab:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:53 2026 by rpki-client