Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft
File:                     EVFSIzgprv1GebUUcXmN68mCN-8.mft (raw, json)
Hash identifier:          lfzMwQ1vePCzx6osVFgZbvKvyhi21deFn3CxtuNnop0=
Subject key identifier:   CF:FA:BA:03:D5:AB:59:F0:41:C0:B3:18:C0:E9:52:DD:4D:6C:2A:D6
Authority key identifier: 11:51:52:23:38:29:AE:FD:46:79:B5:14:71:79:8D:EB:C9:82:37:EF
Certificate issuer:       /CN=115152233829aefd4679b51471798debc98237ef
Certificate serial:       0199FBEC10C7315FF3C184D043C2C6137190
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft
Manifest number:          1318
Signing time:             Sun 19 Oct 2025 10:02:55 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:55 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:55 +0000
Files and hashes:         1: 5kkVf_870fhOOfDeIGFPrWY70xg.roa (hash: ROQyaKbJ5nkK42jIPzQOsw/ZVScaPEl6b0UaumvaLJE=)
                          2: EVFSIzgprv1GebUUcXmN68mCN-8.crl (hash: xgXRd3Uzz2dAth4cIYlng2MMQXoxGtcgo/tO0XWCdRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:10:c7:31:5f:f3:c1:84:d0:43:c2:c6:13:71:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115152233829aefd4679b51471798debc98237ef
        Validity
            Not Before: Oct 19 10:02:55 2025 GMT
            Not After : Oct 20 10:02:55 2025 GMT
        Subject: CN=cffaba03d5ab59f041c0b318c0e952dd4d6c2ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2a:b4:2e:5c:ea:72:8b:54:7b:d7:e5:70:95:
                    a9:1a:c7:f9:61:2e:40:9d:d8:82:23:a0:9f:01:f9:
                    c2:be:d4:c6:7f:e1:5e:36:8a:e5:88:16:a2:4e:a1:
                    ad:d6:5c:c6:9c:06:a1:b2:de:6d:b8:59:20:fd:9a:
                    8e:d9:d4:42:a9:c0:41:b5:c8:b5:34:1f:a0:eb:55:
                    2b:e3:b6:04:15:ba:cf:e5:de:49:47:8e:2a:b9:75:
                    0e:ec:de:5f:1a:21:4e:b8:18:92:b2:32:ea:5d:63:
                    ac:ad:fd:f3:c0:5e:02:f6:e5:c3:1e:ec:56:d7:40:
                    f7:8f:fd:cf:6c:11:2d:2d:7b:12:20:59:cc:21:57:
                    67:b7:e1:a6:4e:fa:59:3b:ab:c5:db:92:09:8c:d1:
                    f0:1c:63:fb:a7:3f:cb:29:88:c0:7c:1c:03:31:09:
                    69:04:b9:b0:ff:21:3f:8d:91:ab:cc:70:71:0b:36:
                    9d:83:a9:cf:25:5c:fd:2b:1c:41:bb:9a:5b:e2:e5:
                    27:5b:8b:36:06:d5:e3:ac:ec:73:62:32:2d:c2:bd:
                    ea:66:92:d7:d9:5a:e1:b4:ee:11:13:61:59:1f:ce:
                    3b:8a:f3:da:c2:83:86:3d:80:f3:67:b5:a7:3c:90:
                    42:53:50:22:03:d9:20:7a:ef:7b:7a:89:dd:78:98:
                    fd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FA:BA:03:D5:AB:59:F0:41:C0:B3:18:C0:E9:52:DD:4D:6C:2A:D6
            X509v3 Authority Key Identifier:
                keyid:11:51:52:23:38:29:AE:FD:46:79:B5:14:71:79:8D:EB:C9:82:37:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5b:a7:b2:7f:8a:f3:d6:ec:83:af:f9:93:b1:c1:48:f7:b7:
         80:56:f6:41:6b:d8:2d:0e:bf:a7:74:f5:a5:d5:e7:0d:0f:02:
         47:52:e4:32:a1:73:6c:b7:40:62:30:87:a4:2d:bc:14:8d:cf:
         ef:85:7d:8f:ee:16:31:cd:a2:41:6e:79:c0:ba:34:20:cc:ef:
         9b:17:db:20:c0:c3:6c:df:1e:c9:1b:c3:85:4b:e6:41:57:ee:
         d2:29:0e:6d:80:f2:e8:b2:a6:32:d2:c9:47:b9:1d:67:c8:62:
         91:11:99:be:d6:7b:be:56:9e:7c:1d:7b:4c:f8:8d:a7:94:84:
         6e:9d:64:db:b6:e1:18:bd:1a:97:7a:b2:32:e6:64:61:66:18:
         26:ee:a6:43:d3:d6:c6:7b:92:dc:fe:6b:b5:c3:78:8e:0c:cd:
         e6:0d:a3:2e:02:8d:30:a6:90:26:06:1e:65:c7:5d:be:55:c2:
         82:85:18:78:2b:fc:34:5c:fe:63:36:c2:e9:23:a4:0c:40:13:
         80:57:09:ce:70:99:52:8a:dd:27:0f:15:4b:cf:43:9f:86:32:
         f2:cc:42:36:72:fb:08:c2:dd:7b:4d:49:c4:5f:fc:5f:ed:e5:
         3b:37:cd:67:02:d3:df:c2:00:5e:3e:ee:39:b6:f4:14:d7:f9:
         47:5c:8f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:22 2025 by rpki-client