Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
File:                     Ev1VimTpdYakPcfuUKjWspI2W2A.mft (raw, json)
Hash identifier:          o0EwJCZ0MlKIbflQ6awI1PeEQi4tH18xA1mJDaZCE9U=
Subject key identifier:   12:4B:33:1F:9F:65:63:6D:BE:1B:62:67:DD:F6:2F:F3:60:C6:43:02
Authority key identifier: 12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60
Certificate issuer:       /CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
Certificate serial:       019DC0DD813264433D502990E9655F53FA34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
Manifest number:          18F1
Signing time:             Fri 24 Apr 2026 19:00:35 +0000
Manifest this update:     Fri 24 Apr 2026 19:00:35 +0000
Manifest next update:     Sat 25 Apr 2026 19:00:35 +0000
Files and hashes:         1: Ev1VimTpdYakPcfuUKjWspI2W2A.crl (hash: Nve7PmJWbFuJ6Q7cMtouM1c0AYh9J2KJGnRjDygGLus=)
                          2: _DUQvzCHi4TjgwrtIlsWotmeAkk.roa (hash: ANEvAKdTGhIs8TP4Hdyx04j79Xu2tvxw7I5FqurjlJA=)
                          3: hIbrwFSisf2h-dr2yXD0dZ8eyb4.roa (hash: M3Mtg3zx7J5utY91jrM2A9ukNWuOabpf3WxUFDwDfrs=)
                          4: o3XtkSdw3aKJG2sRUhkSBnXsAtg.roa (hash: xUAHGYxE9dwSZ85RWRaN4oQ+XDM/Xaw4ialmewEiRi8=)
                          5: qORWtxjZi9lt_BScasY49cJmDXc.roa (hash: Mi06Ddfs1bfJJ0aXxmmQMn2zwSuj1l36dIcHPxE6r0U=)
                          6: wUrse7e0uVL1xNA23Yfsfg_-PZg.roa (hash: GKtwNbEa19rz8r44r6wfkdAxRFh4u/hNQmkbpTbo8c8=)
                          7: zG23siPxwccz9AWJE2u__LckVWI.roa (hash: 1ysfWd+KX/B4oSm7PZzff5dqWDcJuakt5XzDu78maXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Apr 2026 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:c0:dd:81:32:64:43:3d:50:29:90:e9:65:5f:53:fa:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fd558a64e97586a43dc7ee50a8d6b292365b60
        Validity
            Not Before: Apr 24 19:00:35 2026 GMT
            Not After : Apr 25 19:00:35 2026 GMT
        Subject: CN=124b331f9f65636dbe1b6267ddf62ff360c64302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9d:b9:30:24:05:19:e0:f0:81:8e:4d:26:30:
                    ff:6e:13:b8:e3:6e:94:cb:6e:cc:1a:f6:b0:b1:c3:
                    39:06:7b:63:b5:cf:3e:de:de:e0:42:2e:9a:22:8e:
                    99:d6:77:0b:7c:6a:b6:b3:34:52:27:da:42:2b:dd:
                    af:f9:bc:e7:23:a6:ab:f7:93:3e:ec:93:9f:8d:d6:
                    5b:d3:b6:43:ce:65:32:cd:cd:82:0d:83:d1:a1:4e:
                    87:cf:c2:c0:05:b9:4c:9e:b4:74:4f:d1:8b:06:62:
                    1c:9b:8f:c1:2d:52:67:9d:4e:e5:38:3d:cc:ab:79:
                    0e:4a:5a:30:e9:0f:38:ba:26:5e:16:8e:5b:ea:e5:
                    8d:32:b3:a2:e4:38:06:d5:aa:ef:c8:18:71:9d:95:
                    2d:99:9d:1c:c0:61:2e:ba:23:1f:f4:a7:f5:64:c1:
                    e0:1b:13:a2:fc:6b:9f:2b:ae:bd:08:35:a1:16:3f:
                    41:fb:9d:83:fc:a3:ea:d0:aa:a9:a2:5e:d3:ae:b6:
                    c0:2a:48:93:ae:65:0e:1f:1e:4f:ce:f2:77:a9:9b:
                    c1:32:98:1a:50:0f:7c:2f:80:dc:c2:31:a6:98:13:
                    d3:66:4d:be:10:cd:d1:e6:bb:0f:12:e2:bf:27:92:
                    62:77:9b:84:a2:4b:b2:7e:a2:e6:27:f0:63:de:5c:
                    a5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4B:33:1F:9F:65:63:6D:BE:1B:62:67:DD:F6:2F:F3:60:C6:43:02
            X509v3 Authority Key Identifier:
                keyid:12:FD:55:8A:64:E9:75:86:A4:3D:C7:EE:50:A8:D6:B2:92:36:5B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev1VimTpdYakPcfuUKjWspI2W2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/Ev1VimTpdYakPcfuUKjWspI2W2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:6c:fc:d5:45:f2:0b:3a:3f:92:a3:b8:32:9d:8f:91:2d:a5:
         d3:13:50:2a:e5:61:d2:69:27:6d:04:6f:0f:f2:b0:b3:15:0e:
         61:e7:35:b4:e0:65:70:4e:8d:49:5c:fc:16:55:0f:ed:76:21:
         08:1b:ac:d9:4b:90:3b:7f:ea:f7:03:39:7e:a9:e8:fc:04:1a:
         50:e3:ba:f2:88:71:e8:95:29:57:5b:ca:38:b0:73:89:28:30:
         1f:41:32:55:8f:8f:76:b7:dc:cf:f0:0e:50:f6:e6:95:f9:7c:
         b3:b7:6f:c1:5d:f2:a6:2c:0f:89:98:6d:66:19:cd:29:0d:a0:
         80:dd:06:2e:97:05:17:c7:1c:79:93:86:08:f2:ea:3f:02:35:
         ef:b1:3d:e3:c5:7b:06:da:b9:59:f0:49:61:b2:80:1c:ad:56:
         60:23:9f:e4:94:20:fb:0d:2a:df:eb:ef:53:9f:55:db:7b:e8:
         4e:59:67:07:85:21:88:bf:4f:2e:6a:74:d7:78:f6:50:3a:09:
         94:d9:a3:cc:ac:8c:af:02:e1:3c:e6:2a:59:4d:ee:32:41:9c:
         8f:1c:e3:67:c4:52:e1:b1:65:bb:1b:75:fe:ba:69:bb:7c:85:
         5c:e4:1c:bb:42:cb:0f:7a:15:dd:da:aa:44:fc:4c:d8:70:d6:
         76:36:0e:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3A3YEyZEM9UCmQ6WVfU/o0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZmQ1NThhNjRlOTc1ODZhNDNkYzdlZTUwYThkNmIyOTIz
NjViNjAwHhcNMjYwNDI0MTkwMDM1WhcNMjYwNDI1MTkwMDM1WjAzMTEwLwYDVQQD
EygxMjRiMzMxZjlmNjU2MzZkYmUxYjYyNjdkZGY2MmZmMzYwYzY0MzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk525MCQFGeDwgY5NJjD/bhO4426U
y27MGvawscM5Bntjtc8+3t7gQi6aIo6Z1ncLfGq2szRSJ9pCK92v+bznI6ar95M+
7JOfjdZb07ZDzmUyzc2CDYPRoU6Hz8LABblMnrR0T9GLBmIcm4/BLVJnnU7lOD3M
q3kOSlow6Q84uiZeFo5b6uWNMrOi5DgG1arvyBhxnZUtmZ0cwGEuuiMf9Kf1ZMHg
GxOi/GufK669CDWhFj9B+52D/KPq0Kqpol7TrrbAKkiTrmUOHx5PzvJ3qZvBMpga
UA98L4DcwjGmmBPTZk2+EM3R5rsPEuK/J5Jid5uEokuyfqLmJ/Bj3lylGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJLMx+fZWNtvhtiZ932L/NgxkMCMB8GA1UdIwQY
MBaAFBL9VYpk6XWGpD3H7lCo1rKSNltgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMt
MjRkOGU3NDdjMzhmLzEvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMtMjRkOGU3NDdjMzhm
LzEvRXYxVmltVHBkWWFrUGNmdVVLaldzcEkyVzJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmz81UXy
Czo/kqO4Mp2PkS2l0xNQKuVh0mknbQRvD/KwsxUOYec1tOBlcE6NSVz8FlUP7XYh
CBus2UuQO3/q9wM5fqno/AQaUOO68ohx6JUpV1vKOLBziSgwH0EyVY+Pdrfcz/AO
UPbmlfl8s7dvwV3ypiwPiZhtZhnNKQ2ggN0GLpcFF8cceZOGCPLqPwI177E948V7
Btq5WfBJYbKAHK1WYCOf5JQg+w0q3+vvU59V23voTllnB4UhiL9PLmp013j2UDoJ
lNmjzKyMrwLhPOYqWU3uMkGcjxzjZ8RS4bFluxt1/rppu3yFXOQcu0LLD3oV3dqq
RPxM2HDWdjYOug==
-----END CERTIFICATE-----
Generated at Sat Apr 25 04:21:05 2026 by rpki-client