Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft
File:                     EVFSIzgprv1GebUUcXmN68mCN-8.mft (raw, json)
Hash identifier:          qVTLpw1Z3LebEh4rTiAIxE/Of8SHWHoQX+5KyZAVwIc=
Subject key identifier:   78:DC:61:1E:AE:F3:54:E4:D3:C9:11:DE:80:5D:69:BC:D4:B0:DB:E7
Authority key identifier: 11:51:52:23:38:29:AE:FD:46:79:B5:14:71:79:8D:EB:C9:82:37:EF
Certificate issuer:       /CN=115152233829aefd4679b51471798debc98237ef
Certificate serial:       019DD61C1E8BDB41FC8F1D58D9BFAF54D4CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft
Manifest number:          1517
Signing time:             Tue 28 Apr 2026 22:01:00 +0000
Manifest this update:     Tue 28 Apr 2026 22:01:00 +0000
Manifest next update:     Wed 29 Apr 2026 22:01:00 +0000
Files and hashes:         1: EVFSIzgprv1GebUUcXmN68mCN-8.crl (hash: e3yacgkC9hI6Q2rsIO81WbVFPPCnlJJIuEHuZHAWHC4=)
                          2: h-ewiio_U2p3mUUWndK3k3zz3Vw.roa (hash: 1O1XnImjXBP+2O+z+QkG0b8OYhePZKOFLAMqAL+lS3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Apr 2026 14:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d6:1c:1e:8b:db:41:fc:8f:1d:58:d9:bf:af:54:d4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115152233829aefd4679b51471798debc98237ef
        Validity
            Not Before: Apr 28 22:01:00 2026 GMT
            Not After : Apr 29 22:01:00 2026 GMT
        Subject: CN=78dc611eaef354e4d3c911de805d69bcd4b0dbe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3a:ff:18:07:36:fd:a0:f7:f4:91:71:3f:80:
                    8f:7b:0e:78:89:b1:36:38:5c:57:38:95:92:99:72:
                    a6:b0:83:96:c2:63:80:5d:9c:a9:5f:76:43:dd:d1:
                    5b:bc:27:68:9f:c4:45:b6:d0:af:1a:f6:cf:af:6b:
                    06:83:5b:9b:20:eb:64:3a:c2:8a:d4:03:65:27:19:
                    72:49:05:18:8a:11:d7:fd:77:dd:09:e2:52:b9:f9:
                    b2:c2:e7:b4:d4:ce:68:71:68:b2:6d:06:03:67:ae:
                    af:a6:2f:b8:74:7d:f1:04:a9:86:04:7d:90:85:91:
                    bd:65:61:a0:aa:7f:2a:be:93:b0:50:04:e8:14:d1:
                    2d:65:17:aa:76:81:ba:ab:97:a1:7b:30:4e:33:e1:
                    ed:24:32:ff:ae:84:62:d5:24:73:63:78:d8:a4:1e:
                    8c:d4:b4:b8:0b:f9:d3:43:2a:33:f1:66:44:c9:b6:
                    1d:d9:ae:0a:f5:5a:0c:b2:b6:dc:58:a6:f3:92:dc:
                    7b:9a:34:9e:d4:9b:20:33:f0:f9:bc:d1:6d:d8:b0:
                    0f:4f:ab:6f:39:b9:3a:3d:38:7d:58:eb:1b:19:6d:
                    0b:06:99:73:45:ac:ba:ef:96:9d:b9:48:66:35:92:
                    d3:c2:6b:8b:f0:09:ee:6e:f3:a0:56:6e:b7:ce:81:
                    dc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:DC:61:1E:AE:F3:54:E4:D3:C9:11:DE:80:5D:69:BC:D4:B0:DB:E7
            X509v3 Authority Key Identifier:
                keyid:11:51:52:23:38:29:AE:FD:46:79:B5:14:71:79:8D:EB:C9:82:37:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:30:22:32:0e:54:8d:e1:43:32:a4:8c:da:ca:dd:a1:29:cf:
         e8:7f:40:a7:42:1b:e0:b5:8b:27:32:30:da:64:24:01:d7:a4:
         d8:50:bf:b9:01:8c:ce:0f:a6:23:df:e8:4b:5c:9d:d9:b6:07:
         50:83:c8:62:df:df:50:17:53:9e:49:33:fb:4a:1e:7d:e5:ac:
         69:c2:3d:75:ab:5c:ff:67:83:1a:a3:5e:2f:ed:ea:5e:37:75:
         2b:d6:85:79:aa:27:d7:25:36:fd:37:cc:d9:92:d4:2b:00:95:
         90:cc:c5:ec:70:e2:c6:93:4b:84:01:db:e0:58:4b:bc:32:e8:
         ba:e0:29:9a:04:71:b6:cb:ac:0b:09:3b:d0:3a:74:ca:07:ef:
         df:8f:14:f7:fa:2a:49:8b:b4:d3:65:bc:cb:b3:f4:56:38:56:
         46:0c:c5:db:7a:d8:cb:02:6a:3f:f7:b7:a9:3c:59:44:09:d3:
         b1:96:c5:05:45:24:4d:41:32:43:ce:d8:1a:19:34:65:33:7d:
         29:55:c9:6f:c4:28:32:c7:82:98:6d:8b:df:ab:54:f5:4c:c5:
         57:1d:59:21:3f:8d:8e:b8:16:c2:19:73:d7:9b:8c:00:7c:f9:
         a6:c0:64:c7:63:ba:a1:f2:44:b0:68:ac:1f:2a:70:52:56:b8:
         28:af:27:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 00:00:12 2026 by rpki-client