Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
File:                     EVNfj6S19RUz1yTq-Q26mXFfxvw.mft (raw, json)
Hash identifier:          k7cgN7vrFSyiNh81++Al7eLkPNMfUllEl0p8SXTio3c=
Subject key identifier:   C9:F5:EA:4C:66:E6:87:EB:6B:31:31:24:91:86:77:CA:6C:09:5D:64
Authority key identifier: 11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC
Certificate issuer:       /CN=11535f8fa4b5f51533d724eaf90dba99715fc6fc
Certificate serial:       0198D73AF8C48ABBC1E2B82E85C9B86B1206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 14:00:22 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:22 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:22 +0000
Files and hashes:         1: EVNfj6S19RUz1yTq-Q26mXFfxvw.crl (hash: LdA6S2Uoa11QBZC3HHPVydLBMpCgcHuZ01RsBX0BNU0=)
                          2: Qpu6vaOAY5n2mIT4E3Vh72x5kkE.roa (hash: P0y6XucznI/69rbHwQvBGeYNmc4RVWARo9Yt1RUz3AY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3a:f8:c4:8a:bb:c1:e2:b8:2e:85:c9:b8:6b:12:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11535f8fa4b5f51533d724eaf90dba99715fc6fc
        Validity
            Not Before: Aug 23 14:00:22 2025 GMT
            Not After : Aug 24 14:00:22 2025 GMT
        Subject: CN=c9f5ea4c66e687eb6b313124918677ca6c095d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ea:02:00:ab:e5:32:8b:cc:6e:5c:bd:a8:ce:
                    09:47:a5:79:d2:c3:0e:42:a6:5e:64:b4:63:7e:c4:
                    f9:75:f5:28:c8:dd:a9:b8:42:85:2e:aa:1e:9b:f6:
                    15:ed:f7:5c:3d:f0:94:c7:e8:2d:b9:63:34:91:72:
                    cd:7a:dd:1c:10:7f:74:05:8d:46:32:b3:47:44:0b:
                    31:e9:36:c4:4a:47:e2:fa:42:e0:87:6f:c8:5a:68:
                    d5:73:2f:2f:24:bd:d6:19:e6:63:2b:d4:27:96:eb:
                    59:12:8b:39:c4:66:d5:da:09:c4:e5:af:95:f4:9c:
                    a4:b9:b9:13:b3:7a:5d:27:68:1d:ee:a1:19:a6:f8:
                    e4:ec:85:d6:79:ad:4b:2d:cd:75:4b:6e:be:dc:75:
                    51:ef:05:21:4f:b8:57:30:13:d8:71:80:68:f3:5f:
                    af:c1:dd:fd:d6:e0:c5:76:a9:53:c5:72:b7:1c:59:
                    be:c5:d5:23:29:aa:13:8f:84:cc:dc:3f:35:bc:d3:
                    7e:a7:55:d2:4e:e5:b9:01:fe:f0:f6:e8:47:0b:d5:
                    3c:80:93:0c:1f:15:c6:45:25:db:50:b4:dd:36:cf:
                    d2:0c:fd:19:e4:42:d8:b0:0d:96:18:69:8f:13:22:
                    1b:0e:1b:60:e2:8d:55:c8:67:0a:a5:55:f4:24:2f:
                    20:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F5:EA:4C:66:E6:87:EB:6B:31:31:24:91:86:77:CA:6C:09:5D:64
            X509v3 Authority Key Identifier:
                keyid:11:53:5F:8F:A4:B5:F5:15:33:D7:24:EA:F9:0D:BA:99:71:5F:C6:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVNfj6S19RUz1yTq-Q26mXFfxvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/06d683-5a55-42ad-91d9-5f2ee5ce4581/1/EVNfj6S19RUz1yTq-Q26mXFfxvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:db:3a:37:27:f7:96:f2:c4:db:45:c3:a7:95:50:36:bc:0a:
         91:20:64:a0:6d:0b:4a:5b:ef:77:61:88:4a:af:a8:ed:8d:b3:
         71:ec:a0:82:20:d9:37:0b:0e:15:ff:5c:c4:91:f4:c2:10:a6:
         fb:28:72:22:c9:31:41:89:e4:c5:a6:c2:9b:a4:87:8c:2d:9a:
         d2:94:ba:36:28:3d:87:97:b8:6d:3c:cd:39:6b:f1:cf:ab:7a:
         63:7a:cb:23:67:2b:3c:9f:df:c4:55:f9:ad:74:78:d0:60:bb:
         d0:0f:92:5e:c9:33:de:f1:f3:37:5f:10:9d:f2:76:46:de:6f:
         e5:cf:f8:d2:6e:c4:bb:48:e2:7e:bd:5f:08:1c:72:e2:f6:64:
         15:5f:77:82:f3:d9:7f:4b:a5:50:05:98:2e:36:41:19:c8:37:
         12:19:a4:61:7f:05:9e:3c:81:4e:d8:58:e7:0c:2f:0d:6f:c9:
         42:5f:ff:1b:13:67:4e:5b:45:e2:5c:48:43:14:89:a6:92:6a:
         72:82:b2:57:c4:ce:5e:97:f3:93:cb:be:88:f0:2b:5c:8a:ef:
         99:66:61:52:96:a1:9f:f2:0c:48:48:16:cf:41:f3:b5:19:ab:
         4b:7a:e4:65:c7:62:c9:5b:be:14:da:76:33:0f:ff:a7:a6:a5:
         47:0b:e3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:24:36 2025 by rpki-client