Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
File:                     Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft (raw, json)
Hash identifier:          t5U6Kdwg+LJAq4tJuPsfAFvX1oW/dM/zZW0RqqBxqz0=
Subject key identifier:   8F:81:96:35:19:2D:3F:88:C3:CD:A1:A6:F4:49:90:AD:E0:71:12:A1
Authority key identifier: 12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57
Certificate issuer:       /CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
Certificate serial:       0199FB461AA170BFA9AF6F1153D139D44CCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
Manifest number:          0DC1
Signing time:             Sun 19 Oct 2025 07:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:39 +0000
Files and hashes:         1: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl (hash: bgbp0IZXivNgvT9YdB4epWyqXVnNLaeTAOtXpYXybs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:1a:a1:70:bf:a9:af:6f:11:53:d1:39:d4:4c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
        Validity
            Not Before: Oct 19 07:01:39 2025 GMT
            Not After : Oct 20 07:01:39 2025 GMT
        Subject: CN=8f819635192d3f88c3cda1a6f44990ade07112a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b5:a0:2a:3f:9b:37:61:2f:d6:f4:43:ee:dd:
                    35:00:82:df:f8:57:24:eb:6e:06:95:6d:15:29:6b:
                    75:94:9a:bc:ad:c0:63:de:61:b4:a3:6b:e2:bd:03:
                    3c:34:cc:45:a3:72:a6:df:aa:c9:6a:1a:2c:28:35:
                    f9:4f:5c:e7:b7:21:84:b8:f9:79:3c:05:7e:54:35:
                    6a:51:bf:98:ca:de:36:54:58:e7:b9:44:f9:bf:9d:
                    1a:ba:00:15:3c:4a:87:f9:e0:c4:ae:5b:76:e6:c0:
                    0f:6b:11:d9:75:01:f8:95:38:70:cb:07:e8:bc:fc:
                    4a:b5:1d:29:dc:c6:38:78:bb:a2:31:1a:03:37:53:
                    cf:60:93:c3:e7:ec:3a:77:fc:2c:d5:0f:bb:11:c4:
                    7a:4b:02:1a:5a:2c:dd:a9:41:ad:33:85:3e:c7:cf:
                    a2:8b:db:c6:9c:59:4a:ad:a8:73:96:b0:af:71:22:
                    fb:45:cb:a3:3f:1e:8d:bb:d5:8a:32:15:26:6c:d9:
                    5f:d0:1f:73:ab:a0:3c:cc:1e:01:58:80:cb:a4:15:
                    c0:4a:46:23:b6:1b:84:a1:65:62:fa:03:aa:66:48:
                    b7:c4:e9:d9:a3:8e:58:0f:4f:26:67:2c:b8:f5:18:
                    15:94:ff:db:21:1f:39:56:42:b5:75:02:7c:03:87:
                    da:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:81:96:35:19:2D:3F:88:C3:CD:A1:A6:F4:49:90:AD:E0:71:12:A1
            X509v3 Authority Key Identifier:
                keyid:12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9d:f5:f6:b9:ff:a6:f9:fb:b1:2d:3f:86:2a:e5:96:87:67:
         9d:72:d5:3e:94:02:c0:78:99:56:8c:10:c2:54:1d:41:86:58:
         1a:71:9c:a6:f2:6e:63:de:cf:e1:7f:f9:50:68:fd:cf:37:92:
         29:aa:88:65:03:85:ec:b9:6a:e7:02:9e:cb:80:66:d8:c2:9b:
         48:61:5b:d5:c8:db:0f:14:4f:7a:99:bd:1e:f8:b8:aa:60:ca:
         9c:9a:a2:20:f6:cf:7b:51:8a:16:91:04:ae:34:16:99:d5:0e:
         90:1e:b5:24:75:ae:16:be:c1:88:69:18:92:26:be:3f:67:ff:
         15:7b:74:5a:65:ca:2f:2e:0d:ec:fb:35:24:33:40:08:fe:4e:
         d1:33:3b:70:fd:cc:05:ce:fe:86:2f:41:20:7f:00:91:ff:d8:
         c7:c0:22:87:6f:b8:06:7e:3a:9f:71:32:64:ae:09:cb:e8:34:
         6b:9c:06:44:d6:b8:cd:93:3d:21:f1:cf:04:1a:6a:63:2d:f0:
         60:2c:15:30:30:b2:53:1d:dc:47:38:05:2e:b4:e5:45:cb:5e:
         b2:7e:66:24:a0:49:fd:14:ed:b6:31:ec:80:f2:c3:65:e1:24:
         a5:9a:a9:1d:6e:84:71:5c:76:dd:ec:30:cf:02:df:54:e6:49:
         0e:f0:6d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:15 2025 by rpki-client