Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
File:                     evOlFiiU19GsKvgy16vPHb4RCuE.mft (raw, json)
Hash identifier:          hWrqZAK9hKZA1JWTjtJp3Nf/nJcp95q6L4v3FiNHd/o=
Subject key identifier:   BC:8D:0A:D0:48:49:E0:82:4C:93:0D:4B:A6:9D:60:12:C5:94:4C:40
Authority key identifier: 7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1
Certificate issuer:       /CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
Certificate serial:       0198D54E2982CB9C55165C9594EADCACD5DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
Manifest number:          04AD
Signing time:             Sat 23 Aug 2025 05:02:06 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:06 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:06 +0000
Files and hashes:         1: evOlFiiU19GsKvgy16vPHb4RCuE.crl (hash: SgERAWim01+jjYsrnLzYwUyaGxQ1TmuIal+HdhlUd/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:29:82:cb:9c:55:16:5c:95:94:ea:dc:ac:d5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
        Validity
            Not Before: Aug 23 05:02:06 2025 GMT
            Not After : Aug 24 05:02:06 2025 GMT
        Subject: CN=bc8d0ad04849e0824c930d4ba69d6012c5944c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:14:fa:45:bc:59:51:ec:c9:ce:ee:a2:d4:
                    b7:35:47:23:85:06:6f:cb:6a:ac:18:9e:5f:23:39:
                    b3:13:48:e9:2c:f9:3e:6c:9b:62:1a:07:24:0a:fe:
                    26:7b:a2:36:9b:33:0f:e5:a8:97:2c:15:07:e1:0f:
                    51:49:dc:e7:b3:d6:7a:80:16:64:1f:97:8b:cc:15:
                    ac:62:d6:91:3d:4a:f1:07:e9:69:86:50:3b:56:20:
                    be:54:58:42:cf:b3:db:1a:7a:49:1e:34:4e:26:08:
                    21:98:f8:48:b4:0c:0e:67:13:65:b2:17:20:d4:0c:
                    7f:fe:52:2a:0d:2d:8d:01:32:bd:d1:21:aa:4b:72:
                    7d:65:71:09:6e:53:5c:c2:2e:3d:9f:96:b6:12:f8:
                    7d:de:51:b8:e5:a7:ef:b5:66:1e:9a:38:cf:79:af:
                    d8:ee:48:13:84:e9:0e:36:e8:5e:b4:67:eb:62:bb:
                    2a:59:99:8c:5a:08:21:bb:31:63:83:2b:be:1e:87:
                    73:ae:d3:7f:33:08:49:54:a8:29:4f:3f:41:6e:9d:
                    0b:fe:0d:e9:e1:fa:ca:2e:83:f0:59:bd:52:00:40:
                    59:85:c6:27:9e:c0:a7:3b:b7:b0:eb:80:38:f3:ee:
                    3c:f9:85:23:33:b4:87:9e:85:98:3a:22:24:37:da:
                    9d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8D:0A:D0:48:49:E0:82:4C:93:0D:4B:A6:9D:60:12:C5:94:4C:40
            X509v3 Authority Key Identifier:
                keyid:7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:70:f2:84:8c:4b:1c:a5:45:8d:0c:a0:e6:52:bc:70:26:7b:
         ec:23:25:a5:fe:9d:59:76:d5:8e:b1:79:f1:61:a2:ea:28:cc:
         18:af:52:3c:83:c9:48:bb:f0:e1:f1:e8:d6:08:6f:e9:12:af:
         4c:5b:b7:01:82:a4:d7:ff:af:62:84:3b:b2:3b:c2:3a:1c:f2:
         18:25:b2:bb:92:cb:05:61:d4:25:c4:cf:0a:c8:d3:8c:6f:7a:
         7d:f9:2d:61:fe:3c:35:eb:8c:13:1e:ab:96:9e:35:2f:df:ef:
         56:fa:f8:b4:a6:65:ed:d3:59:74:65:61:a6:c2:c1:15:08:a1:
         c1:a9:a5:14:75:2b:84:51:6e:b0:c7:78:78:1a:74:01:93:13:
         35:72:87:c7:47:71:a8:8d:62:7d:f1:91:10:59:f0:db:8b:ea:
         1f:ef:3b:9d:8f:94:c4:27:f4:34:2e:13:88:94:c2:49:9e:2a:
         1a:6c:19:df:ab:88:e2:27:b2:95:5c:d2:95:33:46:a3:b6:95:
         c6:64:6c:fe:f8:1b:78:af:29:a0:c6:98:53:0b:27:14:d5:38:
         ab:9d:32:3c:cb:92:0c:3f:06:b3:04:76:ba:ab:9d:fa:57:54:
         03:3a:f6:73:03:9d:dc:ca:7a:b9:f2:82:5f:1b:b8:7a:61:42:
         29:8e:5c:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTimCy5xVFlyVlOrcrNXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjNhNTE2Mjg5NGQ3ZDFhYzJhZjgzMmQ3YWJjZjFkYmUx
MTBhZTEwHhcNMjUwODIzMDUwMjA2WhcNMjUwODI0MDUwMjA2WjAzMTEwLwYDVQQD
EyhiYzhkMGFkMDQ4NDllMDgyNGM5MzBkNGJhNjlkNjAxMmM1OTQ0YzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYgU+kW8WVHsyc7uotS3NUcjhQZv
y2qsGJ5fIzmzE0jpLPk+bJtiGgckCv4me6I2mzMP5aiXLBUH4Q9RSdzns9Z6gBZk
H5eLzBWsYtaRPUrxB+lphlA7ViC+VFhCz7PbGnpJHjROJgghmPhItAwOZxNlshcg
1Ax//lIqDS2NATK90SGqS3J9ZXEJblNcwi49n5a2Evh93lG45afvtWYemjjPea/Y
7kgThOkONuhetGfrYrsqWZmMWgghuzFjgyu+HodzrtN/MwhJVKgpTz9Bbp0L/g3p
4frKLoPwWb1SAEBZhcYnnsCnO7ew64A48+48+YUjM7SHnoWYOiIkN9qd+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyNCtBISeCCTJMNS6adYBLFlExAMB8GA1UdIwQY
MBaAFHrzpRYolNfRrCr4Mterzx2+EQrhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZPbEZpaVUxOUdzS3ZneTE2dlBIYjRSQ3VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81Y2Y1N2QtNTdmYS00ZjcxLWJmOTIt
NzVkNTRiMTAzMDljLzEvZXZPbEZpaVUxOUdzS3ZneTE2dlBIYjRSQ3VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS81Y2Y1N2QtNTdmYS00ZjcxLWJmOTItNzVkNTRiMTAzMDlj
LzEvZXZPbEZpaVUxOUdzS3ZneTE2dlBIYjRSQ3VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXDyhIxL
HKVFjQyg5lK8cCZ77CMlpf6dWXbVjrF58WGi6ijMGK9SPIPJSLvw4fHo1ghv6RKv
TFu3AYKk1/+vYoQ7sjvCOhzyGCWyu5LLBWHUJcTPCsjTjG96ffktYf48NeuMEx6r
lp41L9/vVvr4tKZl7dNZdGVhpsLBFQihwamlFHUrhFFusMd4eBp0AZMTNXKHx0dx
qI1iffGREFnw24vqH+87nY+UxCf0NC4TiJTCSZ4qGmwZ36uI4ieylVzSlTNGo7aV
xmRs/vgbeK8poMaYUwsnFNU4q50yPMuSDD8GswR2uqud+ldUAzr2cwOd3Mp6ufKC
Xxu4emFCKY5cfA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:57 2025 by rpki-client