Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.mft
File:                     evj4jBlvHAgVNQlOinGiRuhjitg.mft (raw, json)
Hash identifier:          DqvSIKhOLvBdwWpRWZPppU4usJ/fnwE+2yCnI2o6brE=
Subject key identifier:   55:97:C9:DE:F0:A9:D8:BE:2D:4D:FE:40:C2:EB:76:C5:9E:B3:BF:F8
Authority key identifier: 7A:F8:F8:8C:19:6F:1C:08:15:35:09:4E:8A:71:A2:46:E8:63:8A:D8
Certificate issuer:       /CN=7af8f88c196f1c081535094e8a71a246e8638ad8
Certificate serial:       0198D54E187B8176D5AD99ED837015D6A52C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evj4jBlvHAgVNQlOinGiRuhjitg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.mft
Manifest number:          1518
Signing time:             Sat 23 Aug 2025 05:02:01 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:01 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:01 +0000
Files and hashes:         1: evj4jBlvHAgVNQlOinGiRuhjitg.crl (hash: LeQTCZkjUq4n1/Ufe7a7keQzB5c8QSMXbWdpMFrwEuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evj4jBlvHAgVNQlOinGiRuhjitg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:18:7b:81:76:d5:ad:99:ed:83:70:15:d6:a5:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af8f88c196f1c081535094e8a71a246e8638ad8
        Validity
            Not Before: Aug 23 05:02:01 2025 GMT
            Not After : Aug 24 05:02:01 2025 GMT
        Subject: CN=5597c9def0a9d8be2d4dfe40c2eb76c59eb3bff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cd:69:a1:52:f0:4c:fd:93:4c:73:1f:97:1c:
                    7b:ae:77:f3:ee:46:a0:88:92:b9:45:26:a5:9d:68:
                    ab:41:95:76:1d:7e:e5:dd:4c:2a:ac:16:33:a5:1e:
                    41:99:52:cf:be:d3:b6:ac:ca:0c:67:9b:41:cd:8b:
                    46:61:b6:6a:f7:20:f3:cc:be:7c:08:5d:25:c5:d0:
                    fb:ba:90:04:a6:69:d4:a5:0c:6b:91:35:38:b1:07:
                    98:4c:aa:65:a6:8d:56:c6:8f:e1:29:20:58:bc:28:
                    46:25:40:93:84:c1:1d:0f:94:af:ec:9a:45:35:08:
                    65:23:53:fa:ae:aa:5e:5b:66:a0:c7:32:43:5a:f2:
                    46:dd:15:05:39:10:90:d9:13:07:4c:6a:ef:40:97:
                    6d:de:a6:a6:c3:84:16:a4:df:dd:42:db:4f:23:31:
                    9c:8f:e9:95:ca:eb:98:d4:8c:fd:dd:de:90:a7:43:
                    f0:55:a4:74:b2:5d:00:b0:6f:d4:7c:ce:32:16:d7:
                    5a:5a:6d:89:29:b9:55:db:40:7e:77:b5:1b:71:f7:
                    df:87:c3:cd:30:3e:11:8f:b9:e9:05:ec:54:cc:6d:
                    ca:e0:3e:7b:1c:9b:4f:c8:1d:ec:2a:9f:cd:22:60:
                    ac:83:5b:b7:e6:40:6f:91:07:4c:58:1a:50:c4:80:
                    2a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:97:C9:DE:F0:A9:D8:BE:2D:4D:FE:40:C2:EB:76:C5:9E:B3:BF:F8
            X509v3 Authority Key Identifier:
                keyid:7A:F8:F8:8C:19:6F:1C:08:15:35:09:4E:8A:71:A2:46:E8:63:8A:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evj4jBlvHAgVNQlOinGiRuhjitg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f3:d5:63:0f:99:ce:ce:85:69:4e:3c:8c:e3:cd:3a:53:86:
         d9:0b:1c:f9:a1:18:96:72:93:71:34:93:9c:47:87:a5:be:4e:
         ec:aa:7f:28:68:52:c8:0d:59:64:a2:3c:42:a7:73:27:2e:af:
         69:cd:04:38:52:4d:45:4c:29:7a:88:ef:70:89:0e:8f:87:0f:
         f6:e2:b8:32:98:2c:95:29:2e:fb:5f:39:31:4e:38:23:6e:af:
         6a:f4:ed:9f:c5:97:c5:6d:25:33:b7:08:19:fa:96:be:08:5f:
         bd:9c:1e:8b:53:2f:ad:b1:21:cb:00:d1:ee:64:81:57:27:aa:
         d5:ac:1d:20:33:81:f3:ad:e7:5a:b8:d8:33:68:7c:9c:38:4b:
         ca:f8:f7:a3:e8:64:aa:b9:55:1a:5f:97:73:8e:e7:7c:49:e3:
         32:31:27:99:97:fd:b8:ef:ae:ca:b7:f2:f6:e0:5a:82:40:64:
         ea:8f:66:ba:c5:74:68:71:3c:06:a8:d7:e4:07:58:6a:98:57:
         90:84:eb:96:65:62:12:77:38:b2:68:a2:ce:ce:2b:92:61:fc:
         24:f6:85:70:8b:6a:58:b6:c8:d5:bf:eb:3e:3e:fe:97:f8:b6:
         e6:0d:28:30:6d:1e:a7:72:c2:f1:1e:ed:d3:3f:37:36:84:ea:
         5b:97:50:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:49:22 2025 by rpki-client