Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
File:                     1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json)
Hash identifier:          ypkBlvEr4ArDVRl5hCqAGqutkBJQbFb+zKggiNBV41U=
Subject key identifier:   B0:E0:7B:6F:1E:9A:C6:A2:15:E4:BC:2A:C9:8F:AD:50:CC:D3:DF:9B
Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
Certificate issuer:       /CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Certificate serial:       019D39AE7593EADC360393B9F2DAAC800F44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 13:00:27 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:27 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:27 +0000
Files and hashes:         1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: GLf/Ry/kwBTYsV4SK9nhh6v06LNz0YXUVFlJ0S7JJk0=)
                          2: DyBrkSK4a6M3RlwftQhSDaHeKfM.roa (hash: h4xKh81GTCFolaSYT7/bVgNQm45KFUeIOt1K9PqX3Yc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 13:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:75:93:ea:dc:36:03:93:b9:f2:da:ac:80:0f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0
        Validity
            Not Before: Mar 29 13:00:27 2026 GMT
            Not After : Mar 30 13:00:27 2026 GMT
        Subject: CN=b0e07b6f1e9ac6a215e4bc2ac98fad50ccd3df9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a5:e7:01:ba:15:23:4e:48:0d:22:8f:8b:09:
                    fe:40:45:b0:b4:de:59:a3:47:41:ce:60:eb:16:ac:
                    3f:65:4e:13:6e:13:06:0f:7c:ad:be:2f:bd:80:51:
                    05:82:4d:11:f0:21:ab:b3:82:c1:03:8e:6d:b3:d2:
                    37:14:96:65:18:5b:90:ba:66:00:a8:6c:32:73:f2:
                    85:cd:75:7e:3a:3d:2e:f9:be:5c:4f:de:a3:cc:5b:
                    e4:8c:c7:26:58:ed:4d:ab:c8:37:f7:de:14:22:fc:
                    fb:d2:cf:08:a9:bd:0c:32:14:bf:8c:0a:f4:76:ac:
                    7c:e0:d7:46:ad:c3:94:80:f4:16:94:2f:63:ed:90:
                    93:30:70:45:7c:da:ba:8e:a9:8e:32:77:b5:6b:17:
                    4d:ad:50:42:10:3a:bc:2d:2a:d5:7b:bc:ae:04:0a:
                    04:e0:b9:84:ed:0c:66:0e:07:9c:5b:96:92:e1:e9:
                    b6:97:f8:e2:b0:d3:24:92:ea:90:23:a9:51:81:f4:
                    1c:96:4d:24:19:72:58:6d:33:68:45:82:d5:ad:48:
                    3d:1e:67:8b:24:01:ed:b7:c8:52:f8:bf:ad:09:58:
                    6e:9f:27:20:7f:85:36:38:b8:4e:bd:35:b6:d5:6b:
                    53:69:80:7e:11:1b:43:16:ab:5a:a6:c4:c8:d7:70:
                    c0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E0:7B:6F:1E:9A:C6:A2:15:E4:BC:2A:C9:8F:AD:50:CC:D3:DF:9B
            X509v3 Authority Key Identifier:
                keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:6b:cc:be:e1:10:c1:4b:65:85:0a:1b:af:12:52:08:73:7f:
         35:f5:70:1b:15:cc:57:b8:0c:dc:e8:7f:ac:21:79:43:02:5d:
         c5:3c:92:41:1f:cc:23:5e:f8:63:9e:e1:44:a2:87:63:f4:46:
         a4:23:ae:48:63:96:17:ae:8f:0f:dc:d1:2a:4e:16:ab:f6:53:
         dc:fc:bf:b8:23:ba:6d:91:69:dc:27:98:60:89:a9:ec:64:7b:
         c0:a1:52:dc:0c:bb:e2:13:9c:d5:3a:28:6d:c1:bd:ac:73:70:
         f1:a6:25:e0:dd:9d:20:97:50:c5:6a:1c:ee:5e:1e:d0:19:f7:
         07:c9:4c:b4:88:7d:7f:cf:03:82:30:20:91:32:e7:ad:bf:0c:
         df:32:36:5d:33:0f:86:63:56:ad:6e:aa:64:79:7b:dc:a0:e4:
         18:ac:e8:71:ff:9d:98:3e:0c:42:41:3d:c3:65:eb:85:1c:53:
         ef:75:5a:56:aa:ec:d3:f1:b2:9e:bc:13:56:9f:9b:d1:ec:88:
         db:19:a4:5b:2f:10:d7:22:0e:27:66:78:ea:5d:6c:d2:4c:81:
         c7:6e:44:f9:e6:9d:1d:75:e3:06:f8:ef:79:8e:f3:a3:d5:54:
         a9:5b:38:38:9e:8e:14:b4:6f:28:ba:d5:20:60:6b:2c:bd:13:
         82:bf:3b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:22:02 2026 by rpki-client