Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
File:                     evUSKXc6-RV-MXFg-dyADzgeCys.mft (raw, json)
Hash identifier:          ObSzh2ajik9qiNdkx+xeFla+OZMqd2IR/8/zh8We4o4=
Subject key identifier:   23:AD:79:D7:99:8E:ED:3C:9E:4A:8F:5C:90:72:0C:7A:58:F4:81:B5
Authority key identifier: 7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
Certificate issuer:       /CN=7af51229773af9157e317160f9dc800f381e0b2b
Certificate serial:       019EEA7C2CD724420821D1441E4265EDB21B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
Manifest number:          021C
Signing time:             Sun 21 Jun 2026 14:01:06 +0000
Manifest this update:     Sun 21 Jun 2026 14:01:06 +0000
Manifest next update:     Mon 22 Jun 2026 14:01:06 +0000
Files and hashes:         1: HLXrwT45MTMa_mhCV00Hv0aHA2k.roa (hash: rkZE6mPZWfH9GMHGmnUqFvkyHWkjWIxlqyhyBnTw+1k=)
                          2: QcxSXFyqidHUk327u_nSMoqZheg.roa (hash: 4xwfEjK2GS0Bj8Odb8CMpXnbw4DAt7dP8ep7zLWLlyw=)
                          3: evUSKXc6-RV-MXFg-dyADzgeCys.crl (hash: sNUXyTZPNDI33xg3cMwpGTpjvllDXyXVSOJXw1DbttI=)
                          4: r-_3l2QQDk49Rp0j80drAiEu4kU.roa (hash: 0nT9J9nUi2CAiLfvcK69CvCos9Ne+xvHeMLkDsNE+kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 14:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ea:7c:2c:d7:24:42:08:21:d1:44:1e:42:65:ed:b2:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af51229773af9157e317160f9dc800f381e0b2b
        Validity
            Not Before: Jun 21 14:01:06 2026 GMT
            Not After : Jun 22 14:01:06 2026 GMT
        Subject: CN=23ad79d7998eed3c9e4a8f5c90720c7a58f481b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:32:75:c7:83:e7:ea:b0:ae:7e:b5:15:13:22:
                    ab:64:81:27:10:38:d4:78:db:88:4d:eb:91:64:0d:
                    7c:b5:74:f8:b4:3e:ed:9f:6e:9e:cd:a0:fc:bc:fe:
                    af:bd:6f:c2:b2:18:5d:f6:a1:81:39:c0:bc:34:e6:
                    10:94:55:cc:4d:7d:80:ee:dc:9d:75:59:9e:0e:d4:
                    01:e3:b1:ae:6e:11:89:af:10:0c:ac:bd:7b:d0:b0:
                    fc:ae:a5:8e:86:61:34:6f:7b:ad:dd:e9:23:45:b3:
                    f8:d8:4d:e1:f7:eb:45:94:8b:69:5e:f9:76:59:c6:
                    35:79:e2:58:4d:e1:5f:cc:21:91:4f:6c:4c:04:f9:
                    33:e1:b4:38:c3:2b:d0:10:3d:7b:5e:a2:68:a7:7d:
                    67:e7:61:62:65:cd:c6:3e:bf:93:2a:10:cf:13:56:
                    ad:12:10:06:f7:47:ea:3e:e4:e8:1f:50:1d:8d:64:
                    28:92:af:5c:ee:56:5e:7b:25:7c:ec:92:cc:bf:97:
                    71:26:12:e2:d0:d5:67:cc:c8:10:c5:f8:60:1d:f1:
                    1c:1a:00:7b:9f:30:f0:95:0c:5e:90:3f:18:a2:d0:
                    00:9b:8d:42:ab:bb:7c:b2:d0:3a:5c:c9:f8:30:ee:
                    e4:48:dd:b7:3d:f0:29:b1:af:50:d2:0c:00:63:bd:
                    56:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AD:79:D7:99:8E:ED:3C:9E:4A:8F:5C:90:72:0C:7A:58:F4:81:B5
            X509v3 Authority Key Identifier:
                keyid:7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:c7:97:51:8b:d2:cf:30:ca:0c:79:19:06:80:30:4b:9b:4a:
         ea:2a:db:f1:b8:f5:ba:83:7e:c0:4f:33:c5:a6:b5:68:f5:04:
         4d:0a:c2:ed:cb:68:af:88:d5:4d:a1:b9:93:b8:c7:00:44:8b:
         b0:73:a2:32:bf:16:cc:47:7f:2e:3a:ee:c7:83:ad:e3:26:de:
         50:94:cc:ae:e5:75:84:cd:72:58:67:13:56:19:47:fb:5e:6b:
         97:b3:4d:0a:d9:7e:ce:37:54:f8:08:84:db:a7:18:a4:cd:b2:
         a2:61:e5:4d:db:a6:75:3a:0c:de:53:2f:c9:de:ad:3c:cd:87:
         19:a0:91:0b:1d:2a:ad:af:b7:4f:1c:9e:31:46:b7:af:84:a9:
         c8:c6:fe:2c:41:5d:8b:f7:d1:35:2d:0e:0f:16:f4:22:48:20:
         77:6e:ef:ca:15:e2:4e:99:c0:45:9d:78:fc:5b:3f:64:4e:e3:
         cb:a3:a0:f8:62:8f:f1:77:bd:e3:be:f1:5d:cf:71:11:3f:ca:
         2e:d0:75:62:a5:bb:32:71:70:fa:85:0d:3c:73:40:88:c8:b5:
         02:97:9d:48:2c:0d:21:ac:97:93:95:87:43:23:51:c8:1d:17:
         33:9c:70:ff:7c:52:a4:52:cb:6f:cd:2b:28:c6:fc:57:84:28:
         51:19:e2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:34:59 2026 by rpki-client