Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
File:                     Ev1VimTpdYakPcfuUKjWspI2W2A.mft (raw, json)
Hash identifier:          jTgGdIsOeySr5Uy4NLCuxCfQqaytoRdEzTkNJSYKp/k=
Subject key identifier:   18:52:CB:1E:07:D5:F6:FD:C9:FB:78:3E:D5:56:97:D1:7F:A6:77:BF
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Certificate issuer:       /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial:       019DA3E64AB00F1AD7CB62246391846B7FA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
Manifest number:          18E2
Signing time:             Sun 19 Apr 2026 04:01:11 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:11 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:11 +0000
Files and hashes:         1: Ev1VimTpdYakPcfuUKjWspI2W2A.crl (hash: WNZssnIvNfe8BkybPY5To8z7v8p8HuZ2QuZU7yohOK4=)
                          2: _DUQvzCHi4TjgwrtIlsWotmeAkk.roa (hash: ANEvAKdTGhIs8TP4Hdyx04j79Xu2tvxw7I5FqurjlJA=)
                          3: hIbrwFSisf2h-dr2yXD0dZ8eyb4.roa (hash: M3Mtg3zx7J5utY91jrM2A9ukNWuOabpf3WxUFDwDfrs=)
                          4: o3XtkSdw3aKJG2sRUhkSBnXsAtg.roa (hash: xUAHGYxE9dwSZ85RWRaN4oQ+XDM/Xaw4ialmewEiRi8=)
                          5: qORWtxjZi9lt_BScasY49cJmDXc.roa (hash: Mi06Ddfs1bfJJ0aXxmmQMn2zwSuj1l36dIcHPxE6r0U=)
                          6: wUrse7e0uVL1xNA23Yfsfg_-PZg.roa (hash: GKtwNbEa19rz8r44r6wfkdAxRFh4u/hNQmkbpTbo8c8=)
                          7: zG23siPxwccz9AWJE2u__LckVWI.roa (hash: 1ysfWd+KX/B4oSm7PZzff5dqWDcJuakt5XzDu78maXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:4a:b0:0f:1a:d7:cb:62:24:63:91:84:6b:7f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
        Validity
            Not Before: Apr 19 04:01:11 2026 GMT
            Not After : Apr 20 04:01:11 2026 GMT
        Subject: CN=1852cb1e07d5f6fdc9fb783ed55697d17fa677bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:69:0e:be:50:05:cc:8e:58:d4:fe:8e:5f:af:
                    d7:05:0a:a8:f3:80:bc:98:bb:07:b9:df:36:f5:36:
                    54:ad:5b:6d:d0:cc:eb:de:9a:4e:0f:78:79:26:d4:
                    0d:09:78:97:38:3d:f6:fd:5e:a6:8b:03:a1:55:01:
                    d3:19:3a:26:e1:26:44:b7:21:d9:d1:65:f8:97:ee:
                    d9:65:0f:04:7e:97:99:55:c8:3f:df:dc:18:6b:df:
                    69:a1:6a:17:66:63:c8:e4:80:2d:90:2f:db:59:55:
                    57:1e:29:ae:bf:91:72:07:a1:98:f4:25:b4:15:b2:
                    c9:d8:38:58:bf:93:ff:fc:6f:01:74:88:bf:5b:6d:
                    37:4a:50:c2:c8:53:1f:a0:e2:f7:93:a2:fc:ed:0c:
                    69:b7:1a:c5:62:c3:4b:b6:34:38:b2:c4:72:f5:24:
                    e9:c3:d4:77:ec:de:37:5c:79:a7:0f:9e:6e:76:06:
                    a1:b3:0f:d0:3a:2a:d7:02:3c:bc:a3:ab:81:0b:56:
                    f4:b8:8e:77:e0:44:b5:41:d4:27:cc:45:94:e1:3e:
                    39:ad:89:2a:53:6a:2c:da:90:5e:06:05:ab:17:96:
                    8c:2e:12:3b:4e:3c:84:71:59:9d:2a:11:dd:37:f4:
                    c2:dc:69:b7:2d:d2:8c:7f:c5:04:d3:f5:9d:22:09:
                    83:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:52:CB:1E:07:D5:F6:FD:C9:FB:78:3E:D5:56:97:D1:7F:A6:77:BF
            X509v3 Authority Key Identifier:
                keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:5c:85:2b:5e:22:2e:1e:5d:3a:26:10:f5:2d:76:8b:52:4d:
         86:34:96:a8:b3:cd:7b:aa:49:1a:1f:00:f2:7c:fd:83:74:31:
         f8:d1:26:63:4c:1d:a2:51:0b:bb:99:15:9a:da:8d:d1:97:46:
         53:6f:a7:23:59:de:81:ee:f7:29:dd:0e:cf:b6:f3:a1:f9:9b:
         4e:6a:e4:57:88:bb:f1:a1:af:d8:6f:a1:d9:93:02:52:8e:9c:
         85:7a:6c:58:86:f4:60:c3:0b:36:44:4b:f8:43:9b:68:03:cf:
         20:96:0c:45:96:1e:b2:8f:7a:c4:c4:95:cb:10:22:f7:4d:9f:
         93:e0:af:6f:d5:f7:49:50:ee:96:a9:10:c1:11:fd:6d:46:62:
         94:93:4d:c2:53:13:84:fd:fe:6b:89:88:7b:99:ac:bc:02:1d:
         b0:14:65:56:b8:cb:0b:0f:b1:d8:30:31:b1:28:c8:7b:12:f4:
         6d:26:48:75:a9:bc:d8:27:7d:d3:20:24:7f:5d:0c:6a:f0:20:
         5a:62:9e:8f:5b:71:51:6b:8e:e7:7f:98:7f:b3:64:48:90:5c:
         42:36:4c:b6:32:4a:f5:cd:f4:6f:0b:1c:5e:46:16:28:72:b5:
         35:7d:16:aa:25:45:ca:ea:42:82:21:bf:c5:50:9b:c5:94:4f:
         4b:c9:d0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:42:42 2026 by rpki-client