Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
File:                     1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft (raw, json)
Hash identifier:          yr1IbadtKncRbdG+u2SRKgRtxY6AkNbAgMRI6RcCyGE=
Subject key identifier:   F8:3D:FB:98:99:28:FB:CA:D2:8C:5C:0C:91:C0:34:1B:78:48:CD:0B
Authority key identifier: F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17
Certificate issuer:       /CN=f8456292d85a0b86c4e2534b27d26b47bfe04317
Certificate serial:       019D37C009945A7C9B294886B4E458922631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
Manifest number:          0E97
Signing time:             Sun 29 Mar 2026 04:00:25 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:25 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:25 +0000
Files and hashes:         1: 1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl (hash: F9gr81r/PKQ8NwgSW38iVEvLuzSuXmmx9s/8HwZMuaU=)
                          2: LjyKQnoqZ5RymbjzsonMI_FvadE.roa (hash: fUfxxZQ9bErMyThXgB9Vm8HXoJC9cjybZ/MiJy6eLxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:09:94:5a:7c:9b:29:48:86:b4:e4:58:92:26:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8456292d85a0b86c4e2534b27d26b47bfe04317
        Validity
            Not Before: Mar 29 04:00:25 2026 GMT
            Not After : Mar 30 04:00:25 2026 GMT
        Subject: CN=f83dfb989928fbcad28c5c0c91c0341b7848cd0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ea:cf:8d:86:60:f5:23:fd:dd:f9:14:e3:9f:
                    1f:a6:30:ff:cd:24:84:0d:41:b2:3d:55:a1:af:7b:
                    ce:2f:d8:60:b8:79:2c:d9:79:20:78:cb:f1:25:7b:
                    f0:28:c7:3d:69:21:97:6b:e0:f2:9f:f5:46:15:a9:
                    f0:a2:48:8a:fe:22:68:f4:70:2e:1e:f2:16:b7:67:
                    b9:5c:88:40:05:1d:08:ce:8d:b3:de:68:f9:7a:e4:
                    3f:d6:3e:50:49:95:b0:f2:36:08:d0:31:d6:3e:8e:
                    42:7d:2a:0c:b9:c8:e8:56:70:44:e9:4b:cd:89:c4:
                    53:c6:2f:cc:ef:14:71:1a:1a:2a:b9:95:28:b5:e3:
                    e3:85:ca:fa:d1:45:26:b3:f3:55:85:91:a9:0d:7b:
                    cc:d9:48:58:6c:2f:c0:d2:37:4d:85:fc:3a:88:fd:
                    5f:2e:1f:06:78:e3:93:65:d2:fb:84:cf:4b:8a:07:
                    7e:cd:99:21:ad:e9:44:03:ea:13:b3:16:b6:45:46:
                    91:87:c5:a9:6d:0e:7f:c7:80:fb:e4:5e:0a:cb:82:
                    b0:26:8c:03:19:53:27:f7:26:75:b9:a6:19:2f:b9:
                    2e:a5:1a:1d:05:77:9c:2b:1d:3d:8c:19:53:ee:f2:
                    69:2e:8d:b8:be:78:68:f2:07:ef:21:a7:f9:3e:3e:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3D:FB:98:99:28:FB:CA:D2:8C:5C:0C:91:C0:34:1B:78:48:CD:0B
            X509v3 Authority Key Identifier:
                keyid:F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ab:5a:9e:43:09:b0:70:bb:89:45:e7:9e:aa:59:a4:3f:0b:
         a3:0e:e3:66:4e:59:11:b6:d7:bc:dd:e5:53:fe:a7:cf:69:19:
         76:1e:c9:1e:df:30:c4:ca:85:f6:82:aa:c4:74:13:7f:4f:65:
         e2:c3:ac:f0:02:7a:e3:47:97:ad:79:9c:de:7f:31:fd:52:c8:
         1b:00:5e:92:af:8c:fc:a5:aa:b2:29:a1:d8:6e:d5:66:62:3b:
         3d:d3:e9:7c:99:af:8b:08:f8:c6:2d:0e:45:d4:6e:62:c4:50:
         37:d2:c9:39:c3:d9:2e:56:06:b3:4a:44:10:a3:ad:66:57:d5:
         0e:94:9e:5d:3a:88:ec:5f:21:87:40:60:da:c4:2b:16:4b:a5:
         3e:8f:db:1a:50:7e:fc:08:8a:e8:f4:f4:20:fd:bf:9b:30:5b:
         56:df:d8:a1:75:05:a8:b5:2b:fe:80:e0:f8:91:ca:d7:1b:19:
         5c:74:3b:a7:3e:5e:e3:5e:51:54:f9:c4:ce:e1:b3:24:76:db:
         bc:2c:a6:79:9c:81:a6:0b:f9:04:eb:98:b6:e0:95:c8:a1:3d:
         84:b3:39:81:d5:8c:66:b6:43:d1:1f:f3:7e:cf:ab:e2:4b:23:
         3b:d7:50:33:55:ef:50:a2:cb:0c:a9:12:0c:db:60:a6:28:d3:
         a8:45:0b:86
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ03wAmUWnybKUiGtORYkiYxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NDU2MjkyZDg1YTBiODZjNGUyNTM0YjI3ZDI2YjQ3YmZl
MDQzMTcwHhcNMjYwMzI5MDQwMDI1WhcNMjYwMzMwMDQwMDI1WjAzMTEwLwYDVQQD
EyhmODNkZmI5ODk5MjhmYmNhZDI4YzVjMGM5MWMwMzQxYjc4NDhjZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOrPjYZg9SP93fkU458fpjD/zSSE
DUGyPVWhr3vOL9hguHks2XkgeMvxJXvwKMc9aSGXa+Dyn/VGFanwokiK/iJo9HAu
HvIWt2e5XIhABR0Izo2z3mj5euQ/1j5QSZWw8jYI0DHWPo5CfSoMucjoVnBE6UvN
icRTxi/M7xRxGhoquZUotePjhcr60UUms/NVhZGpDXvM2UhYbC/A0jdNhfw6iP1f
Lh8GeOOTZdL7hM9Ligd+zZkhrelEA+oTsxa2RUaRh8WpbQ5/x4D75F4Ky4KwJowD
GVMn9yZ1uaYZL7kupRodBXecKx09jBlT7vJpLo24vnho8gfvIaf5Pj5WsQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPg9+5iZKPvK0oxcDJHANBt4SM0LMB8GA1UdIwQY
MBaAFPhFYpLYWguGxOJTSyfSa0e/4EMXMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1FVmlrdGhhQzRiRTRsTkxKOUpyUjdfZ1F4Yy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNzQ2NzY3LWVmNWYtNDM2Yy1iZDVk
LThlOGI3OTkyNmFhMy8xLzEtRVZpa3RoYUM0YkU0bE5MSjlKclI3X2dReGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M1Lzc0Njc2Ny1lZjVmLTQzNmMtYmQ1ZC04ZThiNzk5MjZh
YTMvMS8xLUVWaWt0aGFDNGJFNGxOTEo5SnJSN19nUXhjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6ta
nkMJsHC7iUXnnqpZpD8Low7jZk5ZEbbXvN3lU/6nz2kZdh7JHt8wxMqF9oKqxHQT
f09l4sOs8AJ640eXrXmc3n8x/VLIGwBekq+M/KWqsimh2G7VZmI7PdPpfJmviwj4
xi0ORdRuYsRQN9LJOcPZLlYGs0pEEKOtZlfVDpSeXTqI7F8hh0Bg2sQrFkulPo/b
GlB+/AiK6PT0IP2/mzBbVt/YoXUFqLUr/oDg+JHK1xsZXHQ7pz5e415RVPnEzuGz
JHbbvCymeZyBpgv5BOuYtuCVyKE9hLM5gdWMZrZD0R/zfs+r4ksjO9dQM1XvUKLL
DKkSDNtgpijTqEULhg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:24 2026 by rpki-client