Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/17fb42-c49c-40ee-96ec-8349e20102f6/1/ev9BmQaNfb0IHzU2_CwteBAzbXk.mft
File:                     ev9BmQaNfb0IHzU2_CwteBAzbXk.mft (raw, json)
Hash identifier:          qfkXTBZQcaRQEJrJxkVvK3hP282sfYcVqejC/c7AUWc=
Subject key identifier:   19:0F:73:BE:0B:9E:16:25:AB:CE:71:55:27:62:AD:F2:F4:B3:84:83
Authority key identifier: 7A:FF:41:99:06:8D:7D:BD:08:1F:35:36:FC:2C:2D:78:10:33:6D:79
Certificate issuer:       /CN=7aff4199068d7dbd081f3536fc2c2d7810336d79
Certificate serial:       019D39780421AFCB9B421A52A0B316EC9223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ev9BmQaNfb0IHzU2_CwteBAzbXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/17fb42-c49c-40ee-96ec-8349e20102f6/1/ev9BmQaNfb0IHzU2_CwteBAzbXk.mft
Manifest number:          82
Signing time:             Sun 29 Mar 2026 12:00:59 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:59 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:59 +0000
Files and hashes:         1: ev9BmQaNfb0IHzU2_CwteBAzbXk.crl (hash: tQMDkKvhBB6TsOygQoOoI3SHx1TJZCF6w+5n3MH3yrM=)
                          2: fzPceL1lvbDYl84vLbJt7u3dpX0.roa (hash: 4Pq/RlgA7v524hKtLDA2REIV5ykIY00EX9IWuD3lLn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/17fb42-c49c-40ee-96ec-8349e20102f6/1/ev9BmQaNfb0IHzU2_CwteBAzbXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/17fb42-c49c-40ee-96ec-8349e20102f6/1/ev9BmQaNfb0IHzU2_CwteBAzbXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ev9BmQaNfb0IHzU2_CwteBAzbXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:78:04:21:af:cb:9b:42:1a:52:a0:b3:16:ec:92:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aff4199068d7dbd081f3536fc2c2d7810336d79
        Validity
            Not Before: Mar 29 12:00:59 2026 GMT
            Not After : Mar 30 12:00:59 2026 GMT
        Subject: CN=190f73be0b9e1625abce71552762adf2f4b38483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:83:ee:0c:37:75:d2:15:3c:40:7a:03:ff:24:
                    c1:97:92:16:b6:86:85:a4:75:fb:3a:92:b6:53:1d:
                    2a:b9:6d:c2:a5:08:15:10:39:dd:12:ac:81:14:00:
                    46:8a:60:15:d9:0a:61:4a:7b:c3:32:77:cb:40:59:
                    3c:41:91:86:80:be:63:98:48:b2:bb:d1:d9:b6:13:
                    a1:65:df:65:16:57:af:97:c0:14:61:57:3c:dc:be:
                    5d:2c:c5:8f:93:18:31:54:dc:3e:8d:7d:72:d7:1d:
                    84:cd:44:23:07:22:79:eb:3d:6e:e3:55:e6:a5:19:
                    e6:22:84:08:e7:32:4e:f5:4a:82:8b:9d:77:31:1f:
                    c6:80:e6:83:d2:4c:83:df:22:06:66:11:a9:fe:92:
                    96:c0:85:e0:68:2f:bf:e5:45:51:2e:71:f7:c9:29:
                    9c:f3:8f:5a:8c:4a:f4:46:7e:7a:a9:2a:00:b0:1c:
                    9b:01:b8:3c:52:9d:b2:13:2d:1f:93:83:9d:f6:8d:
                    3f:8a:b4:26:0b:e5:c0:ac:7d:d5:5c:ac:a5:86:a6:
                    bc:25:96:77:ed:56:99:cf:4c:ea:58:7f:5f:cb:b7:
                    51:11:de:02:8b:fa:3b:26:f5:1c:ff:d1:3e:49:04:
                    2e:97:a8:f6:48:34:3a:99:af:7c:9b:c7:73:92:42:
                    bc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:0F:73:BE:0B:9E:16:25:AB:CE:71:55:27:62:AD:F2:F4:B3:84:83
            X509v3 Authority Key Identifier:
                keyid:7A:FF:41:99:06:8D:7D:BD:08:1F:35:36:FC:2C:2D:78:10:33:6D:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ev9BmQaNfb0IHzU2_CwteBAzbXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/17fb42-c49c-40ee-96ec-8349e20102f6/1/ev9BmQaNfb0IHzU2_CwteBAzbXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/17fb42-c49c-40ee-96ec-8349e20102f6/1/ev9BmQaNfb0IHzU2_CwteBAzbXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:9b:8b:bd:d0:93:dc:8f:a3:87:08:f7:53:97:8a:ec:a5:19:
         67:74:c0:ea:db:28:aa:46:92:1d:65:4e:24:1a:a9:53:23:17:
         43:a8:1c:95:db:cc:aa:66:04:04:3c:2f:1c:c6:e2:83:0c:f8:
         9a:01:e1:b1:7f:fd:bd:d8:f3:b4:40:81:1f:7a:b3:e7:d0:c4:
         71:31:11:2c:44:76:b3:69:91:1c:0b:bc:e3:72:f9:69:71:07:
         d5:df:f8:df:f8:c0:a4:0d:3d:1b:81:f5:9d:3d:23:d2:dd:3f:
         45:c5:25:5f:e3:d4:18:31:33:e7:13:e1:d9:43:c7:f1:b5:df:
         2d:c3:ee:b2:d5:94:f8:41:ae:78:69:4e:c9:40:ed:98:90:b8:
         16:86:5e:60:7e:dd:0d:9b:2e:aa:78:47:ad:ac:2a:4e:a8:06:
         be:51:e3:eb:b4:75:e7:09:3c:13:0c:16:c2:28:e3:83:1d:83:
         ee:5e:73:a7:a3:7d:12:7f:f9:65:3a:ac:7c:4d:c5:22:61:d6:
         bb:5d:39:f9:0c:96:70:90:f6:eb:dd:d3:2e:4c:b5:d7:1c:da:
         2a:f0:71:a8:47:46:a6:bf:d9:1d:b8:40:eb:0d:33:54:72:fa:
         5b:9e:17:58:5d:40:5b:37:05:6c:f3:0d:33:03:40:70:4c:68:
         f1:53:af:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:35 2026 by rpki-client