Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
File:                     egvN7ozoOcTSBBPIYkI8ygT9xgo.mft (raw, json)
Hash identifier:          X2TjllfliYnoh1IhI+jmDwjrchoQtLb4bWW5SesAXD0=
Subject key identifier:   A1:AC:8D:F5:A8:F8:6F:41:9B:24:E1:2D:53:36:11:B6:E1:D7:22:9C
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Certificate issuer:       /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial:       019DCF75F6508D97196DA868ACDC5D233006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
Manifest number:          123F
Signing time:             Mon 27 Apr 2026 15:01:47 +0000
Manifest this update:     Mon 27 Apr 2026 15:01:47 +0000
Manifest next update:     Tue 28 Apr 2026 15:01:47 +0000
Files and hashes:         1: 53H4kGtC_SbzrsI-Vzd9TCGN8wY.roa (hash: rLB3dTRqcK5WY3gJz81sl+g0PUHVo5VwKbPsiJ+N2Ok=)
                          2: EP-EAgqiDi1Uxc1mLP43RrvoWe0.roa (hash: kIJAbYf7/TAQT5Y3mOwU5/SUvXYx6069NZi8uJFH8FY=)
                          3: E_XmM5IBFyFELEnknKVAb_189qw.roa (hash: Mlub1KTpnHaSVLTaB/n4LoTON1L2ATvKiA1EUAmQpUg=)
                          4: OIq2o5hKdaMH_2PTUWzIlIKfs2g.roa (hash: gefzhJXJU82C+eFShlNs7p/wt0aYa1LR779QRT2gD0A=)
                          5: c0q33XIOQrm5W1qjd8fw_F2VySw.roa (hash: PxSJmR26K9n2xvyDwPVrN57pqz+8nMCKwGzKiK0FnUE=)
                          6: egvN7ozoOcTSBBPIYkI8ygT9xgo.crl (hash: dVXAAl4A/RHM9HSqFzNtGhxbEzBYArqpL2TBSsdRcwY=)
                          7: oIFu7Vss_FsSg6ba6OZTOOzWH40.roa (hash: Om63+Vuo/DpGh5dNs3H906zkOfMO055KyU7UPPEoe9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 14:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:75:f6:50:8d:97:19:6d:a8:68:ac:dc:5d:23:30:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
        Validity
            Not Before: Apr 27 15:01:47 2026 GMT
            Not After : Apr 28 15:01:47 2026 GMT
        Subject: CN=a1ac8df5a8f86f419b24e12d533611b6e1d7229c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:a4:93:8a:68:d6:1e:6f:94:dd:f6:05:20:
                    58:a6:5c:14:4b:bd:1c:32:aa:47:b6:1d:16:e5:4a:
                    c3:cf:58:0d:8c:ef:a0:a3:99:0a:77:ed:ce:8b:e0:
                    d6:78:39:82:6a:1e:79:63:32:bf:d2:27:d9:d9:44:
                    3b:26:5e:4f:4c:4d:ed:03:89:3a:a8:61:6a:d3:73:
                    a8:24:54:5b:3a:7d:31:51:8f:25:99:9c:f1:d1:10:
                    fd:7b:84:a7:3e:5f:6f:63:5c:3c:c5:a1:52:6f:a0:
                    2e:a8:60:9f:8e:d3:9b:ae:78:5d:90:3d:0e:29:4d:
                    dc:2a:cf:c4:2f:2c:7f:03:62:d0:ea:7f:27:83:2d:
                    c2:22:73:e7:9d:af:dc:23:a1:1c:88:12:12:19:d3:
                    6e:f7:bf:23:68:cc:c7:67:23:4f:00:23:74:bf:12:
                    7f:1b:32:a5:07:de:fb:7a:e4:93:12:57:78:26:58:
                    a0:9b:e1:a2:55:5d:a5:3e:0a:76:e8:99:68:d6:99:
                    7b:2b:e1:41:32:f2:25:33:ad:43:24:f7:20:76:7f:
                    4e:c8:84:3b:ec:08:32:e3:89:56:0d:6c:57:ac:eb:
                    22:72:7e:f7:b5:02:c7:99:05:4e:c9:41:fa:51:45:
                    11:66:88:88:58:8f:d0:6c:ff:f8:9b:a7:2f:4b:ed:
                    55:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AC:8D:F5:A8:F8:6F:41:9B:24:E1:2D:53:36:11:B6:E1:D7:22:9C
            X509v3 Authority Key Identifier:
                keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:fe:da:fc:7c:ba:3a:48:95:28:e9:85:87:28:af:4d:3a:05:
         19:1d:eb:9c:54:92:27:1a:b9:04:77:18:f2:73:ec:a1:d2:0a:
         90:c3:d4:55:65:52:1c:c0:1d:04:62:5b:e2:04:b3:0a:fc:ba:
         99:f7:20:72:14:7e:48:68:3e:56:f5:77:2a:35:6a:d9:7d:0b:
         93:f6:e5:d5:51:ec:cb:fe:3a:5d:1b:75:17:7d:ee:82:5e:55:
         90:ec:2d:6d:8b:92:4f:32:c9:db:05:35:93:13:52:32:71:9b:
         da:02:2c:4f:51:30:ff:67:94:e9:b5:06:49:f2:c8:93:f0:8f:
         73:81:38:bf:99:3f:37:99:4c:90:82:36:4a:d7:8d:8b:b8:32:
         64:47:1f:44:a0:ff:93:86:e4:10:5e:5f:c0:a6:86:78:b5:82:
         36:63:9a:0d:c0:2a:70:a8:55:79:29:f1:9e:de:78:fb:83:5f:
         7f:2a:37:31:aa:ac:44:10:02:61:ae:c7:60:25:58:03:40:5f:
         39:91:4d:8a:78:aa:db:a3:2b:84:8f:f4:7d:b4:21:bf:a9:f2:
         ae:2a:8d:b3:73:e6:32:95:ec:d2:e2:04:03:76:0d:f3:c5:76:
         01:9f:66:e7:5f:01:89:09:58:1e:86:09:a7:97:0d:bc:a2:2e:
         64:23:81:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PdfZQjZcZbahorNxdIzAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMGJjZGVlOGNlODM5YzRkMjA0MTNjODYyNDIzY2NhMDRm
ZGM2MGEwHhcNMjYwNDI3MTUwMTQ3WhcNMjYwNDI4MTUwMTQ3WjAzMTEwLwYDVQQD
EyhhMWFjOGRmNWE4Zjg2ZjQxOWIyNGUxMmQ1MzM2MTFiNmUxZDcyMjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCWkk4po1h5vlN32BSBYplwUS70c
MqpHth0W5UrDz1gNjO+go5kKd+3Oi+DWeDmCah55YzK/0ifZ2UQ7Jl5PTE3tA4k6
qGFq03OoJFRbOn0xUY8lmZzx0RD9e4SnPl9vY1w8xaFSb6AuqGCfjtObrnhdkD0O
KU3cKs/ELyx/A2LQ6n8ngy3CInPnna/cI6EciBISGdNu978jaMzHZyNPACN0vxJ/
GzKlB977euSTEld4Jligm+GiVV2lPgp26Jlo1pl7K+FBMvIlM61DJPcgdn9OyIQ7
7Agy44lWDWxXrOsicn73tQLHmQVOyUH6UUURZoiIWI/QbP/4m6cvS+1VrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGsjfWo+G9BmyThLVM2Ebbh1yKcMB8GA1UdIwQY
MBaAFHoLze6M6DnE0gQTyGJCPMoE/cYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NGU5MTItYjUwMy00NTRjLWE0MzMt
NGRlZjU3MzY1MTY5LzEvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC81NGU5MTItYjUwMy00NTRjLWE0MzMtNGRlZjU3MzY1MTY5
LzEvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANv7a/Hy6
OkiVKOmFhyivTToFGR3rnFSSJxq5BHcY8nPsodIKkMPUVWVSHMAdBGJb4gSzCvy6
mfcgchR+SGg+VvV3KjVq2X0Lk/bl1VHsy/46XRt1F33ugl5VkOwtbYuSTzLJ2wU1
kxNSMnGb2gIsT1Ew/2eU6bUGSfLIk/CPc4E4v5k/N5lMkII2SteNi7gyZEcfRKD/
k4bkEF5fwKaGeLWCNmOaDcAqcKhVeSnxnt54+4Nffyo3MaqsRBACYa7HYCVYA0Bf
OZFNiniq26MrhI/0fbQhv6nyriqNs3PmMpXs0uIEA3YN88V2AZ9m518BiQlYHoYJ
p5cNvKIuZCOB0g==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:30:17 2026 by rpki-client