Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
File:                     Ev1VimTpdYakPcfuUKjWspI2W2A.mft (raw, json)
Hash identifier:          oQ+Nnm9L8ytpP7uQ0OC/3M+zGjcLVkD8crpQsErBeFM=
Subject key identifier:   E6:C2:78:E5:8A:88:9A:B9:13:DF:D0:1F:5D:BF:97:7F:21:2B:27:6F
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Certificate issuer:       /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial:       019D2093F41BADE8433523D5EE3194002D65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
Manifest number:          189E
Signing time:             Tue 24 Mar 2026 16:01:00 +0000
Manifest this update:     Tue 24 Mar 2026 16:01:00 +0000
Manifest next update:     Wed 25 Mar 2026 16:01:00 +0000
Files and hashes:         1: Ev1VimTpdYakPcfuUKjWspI2W2A.crl (hash: JZDyu9Fngzd9awvJ4r3rZJaORwZVsb/doTrUiI4nGyc=)
                          2: _DUQvzCHi4TjgwrtIlsWotmeAkk.roa (hash: ANEvAKdTGhIs8TP4Hdyx04j79Xu2tvxw7I5FqurjlJA=)
                          3: hIbrwFSisf2h-dr2yXD0dZ8eyb4.roa (hash: M3Mtg3zx7J5utY91jrM2A9ukNWuOabpf3WxUFDwDfrs=)
                          4: o3XtkSdw3aKJG2sRUhkSBnXsAtg.roa (hash: xUAHGYxE9dwSZ85RWRaN4oQ+XDM/Xaw4ialmewEiRi8=)
                          5: qORWtxjZi9lt_BScasY49cJmDXc.roa (hash: Mi06Ddfs1bfJJ0aXxmmQMn2zwSuj1l36dIcHPxE6r0U=)
                          6: wUrse7e0uVL1xNA23Yfsfg_-PZg.roa (hash: GKtwNbEa19rz8r44r6wfkdAxRFh4u/hNQmkbpTbo8c8=)
                          7: zG23siPxwccz9AWJE2u__LckVWI.roa (hash: 1ysfWd+KX/B4oSm7PZzff5dqWDcJuakt5XzDu78maXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 25 Mar 2026 15:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:20:93:f4:1b:ad:e8:43:35:23:d5:ee:31:94:00:2d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
        Validity
            Not Before: Mar 24 16:01:00 2026 GMT
            Not After : Mar 25 16:01:00 2026 GMT
        Subject: CN=e6c278e58a889ab913dfd01f5dbf977f212b276f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:34:a1:69:34:95:96:10:b3:c5:af:d6:18:41:
                    1a:5d:d6:ec:3b:77:76:ba:1f:90:0e:b4:08:bb:4f:
                    ca:c5:0c:0d:34:f1:ad:11:7b:5b:e8:42:08:71:5b:
                    39:5f:4f:9f:5c:eb:4c:24:48:20:03:3c:95:da:00:
                    53:a0:26:fb:f3:5d:a1:5b:63:d3:b8:88:c2:88:bc:
                    f2:23:e1:ac:bd:3e:22:c4:a0:2a:23:61:c4:d0:ef:
                    c0:3f:48:8c:2b:9b:4d:4d:90:0a:70:5a:50:40:7e:
                    0b:0b:4f:35:92:29:8f:ff:20:82:b8:f2:dd:bb:e8:
                    02:54:90:06:20:db:36:09:fe:ea:4c:ef:d5:b8:f4:
                    14:93:d5:83:d2:95:ce:f2:2a:d5:8a:49:d0:3e:0f:
                    ee:69:00:b7:cd:51:0b:38:8e:ac:8c:e9:7b:22:37:
                    26:06:a4:99:a2:a3:40:df:1d:6b:8f:fc:d6:30:8c:
                    52:6e:91:e2:f5:57:3d:b0:31:fc:7b:03:41:f7:8a:
                    ae:72:6e:c0:1e:5a:84:8d:ee:9e:04:b9:d6:e4:e5:
                    c7:a2:d3:7b:9d:d3:e3:91:2f:ec:5e:18:87:76:c1:
                    f8:39:13:df:f2:09:92:ad:5a:0d:72:3b:57:09:73:
                    7e:de:b8:2b:a1:b7:08:9b:d6:72:a9:94:ec:df:e6:
                    b5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C2:78:E5:8A:88:9A:B9:13:DF:D0:1F:5D:BF:97:7F:21:2B:27:6F
            X509v3 Authority Key Identifier:
                keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:30:05:11:6d:11:24:89:25:5c:7e:cd:bd:de:ec:40:45:12:
         90:c7:7a:91:1d:58:44:6d:97:2e:31:32:e3:d2:ef:93:9a:69:
         c3:57:60:79:70:6b:95:d8:fa:83:07:a3:a5:9f:cd:9e:fa:44:
         5d:0e:40:af:ce:0b:59:63:e8:ce:1a:90:6f:fd:aa:f2:51:a6:
         4f:36:63:75:7d:9e:cc:90:f2:e9:7e:7c:40:d0:14:07:22:2d:
         b1:d4:f3:18:c3:eb:c8:7f:1b:0d:59:a7:7f:22:ec:d4:e0:f5:
         af:fc:2f:14:1d:3c:e1:41:98:af:bf:0c:2a:a6:c5:58:90:80:
         86:ed:f1:85:13:11:b1:32:1d:07:0e:ad:68:bc:d9:e1:c6:bf:
         76:2d:02:6e:e3:bb:fb:cf:6e:17:dd:1c:81:7f:9d:aa:57:41:
         78:29:8b:1d:13:70:11:6b:9e:36:68:1f:47:6b:c1:3a:3c:92:
         a7:08:f1:de:ea:b0:38:6a:c8:97:d7:12:78:7f:4f:f8:52:83:
         59:72:59:1f:98:e7:fe:90:cf:75:4e:25:eb:b5:19:9a:82:f6:
         85:41:50:e2:06:5d:ef:04:d6:76:5c:22:15:26:68:ba:12:ae:
         73:0f:f9:cd:f2:88:12:6b:67:6c:c3:cc:b9:1e:a2:75:2a:6c:
         4d:32:9c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 21:15:39 2026 by rpki-client