Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
File:                     evOlFiiU19GsKvgy16vPHb4RCuE.mft (raw, json)
Hash identifier:          3BGgtyBBP3zDGHjB5R/Gm8pMm7VGYWhNDMjY3xb3AZE=
Subject key identifier:   F2:E2:15:96:3F:97:98:B8:26:74:01:D5:09:BD:C2:DF:DA:32:37:FE
Authority key identifier: 7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1
Certificate issuer:       /CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
Certificate serial:       019D25BA4B1ABDD2444AFBB553DA98E61798
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
Manifest number:          06E9
Signing time:             Wed 25 Mar 2026 16:00:58 +0000
Manifest this update:     Wed 25 Mar 2026 16:00:58 +0000
Manifest next update:     Thu 26 Mar 2026 16:00:58 +0000
Files and hashes:         1: evOlFiiU19GsKvgy16vPHb4RCuE.crl (hash: iaLpXC4S4qhqGv8mjDzkVahVI27FAVRSlwdfYWYzOR8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:4b:1a:bd:d2:44:4a:fb:b5:53:da:98:e6:17:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
        Validity
            Not Before: Mar 25 16:00:58 2026 GMT
            Not After : Mar 26 16:00:58 2026 GMT
        Subject: CN=f2e215963f9798b8267401d509bdc2dfda3237fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:d1:47:ec:d9:17:a3:48:aa:31:16:33:6c:
                    de:c5:46:d5:ce:99:3a:f2:56:c5:66:f9:26:ef:78:
                    da:a5:7a:0b:c1:67:7b:fd:0f:0a:74:82:6d:62:bd:
                    7a:78:ee:fa:87:7f:14:f0:68:12:53:fd:39:df:9a:
                    4c:68:53:bf:90:c1:b6:30:72:42:ae:51:bc:d4:dc:
                    7b:b1:d3:c3:0f:36:2f:c6:7d:1b:af:9a:7d:c4:04:
                    99:20:59:2d:9a:16:96:54:87:e5:9a:a7:1c:ff:cb:
                    de:00:a7:b8:78:b5:fc:91:c2:d9:63:8b:40:6a:86:
                    2b:16:90:7e:75:1f:d4:59:51:d6:f7:42:75:39:ac:
                    8a:78:f5:5c:32:c2:b1:78:20:59:7e:72:dd:39:17:
                    2d:7f:35:60:af:d5:3e:ad:be:a9:a0:00:08:9f:41:
                    96:2f:43:b2:44:8d:71:ae:d9:49:5d:32:07:c2:b1:
                    05:72:6f:a9:43:03:2f:be:fe:ae:05:93:32:d3:31:
                    cc:d2:9b:8a:09:5d:fb:f9:0d:17:46:a5:9a:12:de:
                    21:58:95:90:2c:f7:25:bc:e8:4a:6e:19:f9:df:8c:
                    ce:58:b1:10:bb:23:7e:c0:72:cc:83:a2:61:5c:30:
                    c0:c4:25:25:d4:97:e8:c8:5d:69:ea:68:3a:42:ed:
                    27:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E2:15:96:3F:97:98:B8:26:74:01:D5:09:BD:C2:DF:DA:32:37:FE
            X509v3 Authority Key Identifier:
                keyid:7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:6e:41:c9:a8:7a:71:ed:ac:b0:f0:f5:aa:c3:09:ac:7d:69:
         e8:8f:16:58:31:f7:76:93:27:76:6c:6a:64:a3:af:1a:4a:47:
         07:b0:b2:86:16:44:70:06:78:a1:e3:f0:a7:c9:2a:90:5a:9e:
         a4:05:da:b6:5d:8d:1e:fa:75:ea:29:66:de:46:30:12:2a:f8:
         2d:f3:28:47:24:a9:97:d3:76:29:e3:7b:5a:e4:8b:db:c5:71:
         13:25:4f:a0:d4:32:69:fd:10:25:4a:af:a2:c7:b2:1c:63:76:
         a1:61:8e:de:79:46:17:98:ca:06:03:b1:63:1d:75:22:75:6b:
         33:53:4d:98:67:cd:b4:cf:f9:e3:93:1c:4f:2c:43:fb:7e:d5:
         ee:8f:e3:fb:4b:b5:89:3a:70:25:af:0f:b0:0d:85:0b:1c:f4:
         39:15:3e:aa:8a:b1:9e:da:41:88:07:11:3b:83:84:ab:ea:d4:
         2e:84:72:cd:5c:d1:c9:66:fb:8d:49:73:ad:b2:5e:23:24:89:
         20:6c:57:eb:4c:f2:9c:4b:89:c9:71:78:4b:07:ec:b0:85:36:
         de:06:6d:09:78:f2:78:e0:b5:22:5d:9e:93:1a:d9:34:cd:40:
         70:86:e6:59:89:0c:ee:82:db:24:cd:c9:e3:c2:8f:cd:62:8e:
         2d:b9:bc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:30 2026 by rpki-client