Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
File:                     evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft (raw, json)
Hash identifier:          NBfHcg3N3Dk5hXpwoB0CZjHXvyTCpaxvX1EnkUZ68vo=
Subject key identifier:   57:D8:67:AE:10:53:5F:E4:A5:B5:86:20:EE:5B:E2:C9:C7:53:2E:80
Authority key identifier: 7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA
Certificate issuer:       /CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
Certificate serial:       01A01FE77ADACC22C629A63B222713C42C25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
Manifest number:          09C4
Signing time:             Thu 20 Aug 2026 16:00:58 +0000
Manifest this update:     Thu 20 Aug 2026 16:00:58 +0000
Manifest next update:     Fri 21 Aug 2026 16:00:58 +0000
Files and hashes:         1: V66HJYFriZ5IsLfzQnEEiBV4Qd8.roa (hash: 8XPaW6i45AJEe25djtC6P54qz+Rb4g3K7vpBnD6+9v4=)
                          2: XASNzZ7eNfFZgvbJT8Q1lC9Tw84.roa (hash: pBgoU7wOpw4nY7mOMS9Fl6YvITNZqmO4sxUzQmgNOCY=)
                          3: evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl (hash: pdMMAkRVvtlACs24XokrDl0MxE0CQKpS+Xe485jQNUw=)
                          4: x8rtYvoQZMNut6lhRb4aMkAq0js.roa (hash: nUuWeYtzWwss47rmzR4BBXj/AZGrFJGMJoFw56T6Rv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1f:e7:7a:da:cc:22:c6:29:a6:3b:22:27:13:c4:2c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afb5441d8ef8e41aa28dd51cdde925943aef7fa
        Validity
            Not Before: Aug 20 16:00:58 2026 GMT
            Not After : Aug 21 16:00:58 2026 GMT
        Subject: CN=57d867ae10535fe4a5b58620ee5be2c9c7532e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:fc:7d:2e:f7:19:46:02:f1:05:b1:c1:db:
                    48:09:22:cb:f7:71:d7:e7:d3:c5:02:1a:4d:3b:a4:
                    e7:ad:03:56:46:3b:94:06:d4:24:35:83:f2:c2:df:
                    91:fa:7d:74:42:e7:a3:92:23:92:b5:89:de:0a:e6:
                    43:e0:ab:1e:de:49:a0:3b:1b:0f:4f:c1:14:7d:23:
                    cd:38:bf:c2:ca:3d:fe:94:ba:9d:40:b9:61:76:87:
                    b4:d2:c7:c5:d1:55:30:61:2b:5e:fd:27:0b:41:d1:
                    8f:c6:eb:e7:b2:0a:66:6f:84:23:de:c7:99:85:9f:
                    ae:f4:bf:09:42:e2:8e:d5:a7:80:fc:b9:3c:72:fa:
                    76:91:f8:3a:80:1f:28:63:55:b4:ba:fd:7a:80:d1:
                    21:e1:33:58:69:ba:6c:d1:32:41:50:e3:eb:0e:f8:
                    71:2c:fd:06:69:3d:18:75:d6:59:1e:3c:d6:dd:36:
                    1c:bc:e3:5f:46:d6:b1:22:44:d8:c3:ca:2f:52:b3:
                    df:88:f2:3d:cd:c7:3f:30:e6:8f:ca:ee:49:4c:10:
                    28:0a:90:cb:ed:a1:3c:28:4a:a1:e0:28:d7:08:0c:
                    2b:29:e0:26:dc:a6:d1:34:10:9d:e3:67:ac:f7:32:
                    24:2a:ca:ba:87:01:a8:5f:38:c3:b2:97:25:20:70:
                    60:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D8:67:AE:10:53:5F:E4:A5:B5:86:20:EE:5B:E2:C9:C7:53:2E:80
            X509v3 Authority Key Identifier:
                keyid:7A:FB:54:41:D8:EF:8E:41:AA:28:DD:51:CD:DE:92:59:43:AE:F7:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evtUQdjvjkGqKN1Rzd6SWUOu9_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4d76f5-42ec-453e-8992-d8973acaf41d/1/evtUQdjvjkGqKN1Rzd6SWUOu9_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0a:be:18:31:fb:4e:20:62:90:37:09:12:13:c2:f8:18:d5:
         6b:f2:34:99:48:ad:a4:1e:39:b1:39:67:7d:3e:92:0a:3b:cb:
         af:bc:b8:91:3f:27:7f:66:ec:af:43:79:c2:80:e0:d5:96:4c:
         48:3a:90:d7:d0:c4:52:4f:88:e3:d1:e7:6e:c0:36:e4:aa:71:
         13:a1:84:cc:55:37:96:94:1b:7e:04:30:9a:90:bd:29:f8:37:
         fd:80:1d:73:c2:6a:76:21:8a:04:1e:0d:48:88:63:60:1d:ae:
         a2:13:e0:d0:3f:d9:52:f0:cd:b2:fd:52:77:12:2c:01:2f:10:
         57:02:bb:16:48:e0:76:83:ad:4b:fb:4d:86:95:e5:8e:39:88:
         15:34:e4:12:e1:97:50:c6:4d:f6:e3:2f:61:a4:22:a2:29:4d:
         77:44:c7:4c:f6:55:3a:d0:8a:9e:4a:7f:13:fc:99:13:f7:c3:
         db:f3:50:e6:9c:63:f6:20:de:4c:0f:e1:dc:d7:fc:63:7c:11:
         b6:e3:46:f7:b8:7a:55:9d:e2:0e:29:ed:2d:bd:5e:1b:f2:3e:
         10:fe:90:ba:86:26:21:8f:ae:4a:7f:14:f5:15:7a:cd:9c:30:
         bb:53:88:f4:a8:1d:a5:66:3c:45:58:2c:d1:6e:ec:5c:30:99:
         cf:7b:88:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:36:01 2026 by rpki-client