Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft
File:                     EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft (raw, json)
Hash identifier:          jF3OfAzbDYFgvZrjo9reku9WgpYzIhlZh0s/puXJSAg=
Subject key identifier:   E2:E6:F9:B2:04:DF:9E:16:3F:AF:DC:1F:A3:6F:C6:AD:17:74:AA:03
Authority key identifier: 12:F2:7A:7D:F2:07:6F:8D:1D:C7:95:27:7C:09:A0:10:7D:2B:DB:2A
Certificate issuer:       /CN=12f27a7df2076f8d1dc795277c09a0107d2bdb2a
Certificate serial:       0198D54DDF14AF83F88472EE202A153ED6BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft
Manifest number:          86
Signing time:             Sat 23 Aug 2025 05:01:46 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:46 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:46 +0000
Files and hashes:         1: EvJ6ffIHb40dx5UnfAmgEH0r2yo.crl (hash: IAZDj27v65mpZW1tPXhpJCXIZP85kQ+7qX7zXH3SZyw=)
                          2: cJMqlk4t_npV762YA6G1Urn8YC8.roa (hash: +q/bgqa1jjCMji99qFxLyo61sIU915VzUhks1PlXN30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:df:14:af:83:f8:84:72:ee:20:2a:15:3e:d6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12f27a7df2076f8d1dc795277c09a0107d2bdb2a
        Validity
            Not Before: Aug 23 05:01:46 2025 GMT
            Not After : Aug 24 05:01:46 2025 GMT
        Subject: CN=e2e6f9b204df9e163fafdc1fa36fc6ad1774aa03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4d:28:3c:5d:c5:6d:bc:61:48:e8:2e:32:5e:
                    87:57:97:19:63:6c:ab:0f:18:94:9b:e5:86:d5:75:
                    79:84:fc:ee:61:f3:fc:a5:3a:b4:23:03:a2:cd:76:
                    2a:f0:8a:2c:82:17:bf:09:94:2f:6d:66:50:e7:c0:
                    a6:04:6e:db:36:d6:26:cf:42:37:97:68:cd:45:1c:
                    a8:e8:64:c0:43:4a:f6:57:de:0a:44:15:6a:d4:af:
                    8b:34:b3:3b:3c:5a:79:9c:62:07:35:1b:dc:de:fe:
                    e3:71:d5:8a:3b:ea:aa:1b:cb:30:d4:8c:1f:9f:79:
                    a6:d6:f0:fa:07:c7:62:6f:b2:ef:54:ff:67:b5:b7:
                    36:21:55:72:1d:38:21:48:35:b8:79:98:6c:a3:a5:
                    91:b7:f4:6d:45:90:71:08:69:e9:77:bd:86:3f:9f:
                    a8:ab:5f:5e:07:08:be:9d:82:ed:dc:a2:b9:76:a5:
                    e8:0e:bd:0d:96:ba:9c:70:eb:2e:ef:b1:14:71:fe:
                    20:ca:90:d1:a7:24:ae:86:38:ac:3b:12:9c:7e:0d:
                    35:ea:92:1f:f2:e5:d2:49:d3:65:9c:64:7c:73:20:
                    df:63:86:61:0e:45:0b:0c:df:cc:ad:4c:79:62:42:
                    42:13:3c:cd:da:36:f1:e5:c7:81:2f:b4:6e:f9:30:
                    af:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E6:F9:B2:04:DF:9E:16:3F:AF:DC:1F:A3:6F:C6:AD:17:74:AA:03
            X509v3 Authority Key Identifier:
                keyid:12:F2:7A:7D:F2:07:6F:8D:1D:C7:95:27:7C:09:A0:10:7D:2B:DB:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EvJ6ffIHb40dx5UnfAmgEH0r2yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/eb94ad-7894-4b36-9246-08af74c1a50c/1/EvJ6ffIHb40dx5UnfAmgEH0r2yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c5:50:b5:d8:3a:f1:04:e1:ec:50:24:91:49:d0:f7:81:06:
         b5:00:2e:38:ed:81:77:84:fb:62:43:f9:35:ef:cb:8a:d9:19:
         16:db:46:d2:0b:e9:cd:69:97:18:92:69:fa:60:5a:0b:55:ac:
         1f:29:6e:bd:7c:e4:09:e2:28:27:c0:e6:75:f8:f6:ac:0f:5a:
         70:45:e9:50:93:15:5e:46:4a:84:8b:63:79:86:0a:9b:fa:77:
         8f:41:16:3c:28:30:aa:a1:ee:45:21:5d:03:bb:b4:f6:bf:f3:
         bd:23:c4:26:62:d0:48:f8:54:76:9a:a9:6b:93:6d:a1:1a:8c:
         f0:26:e3:75:9b:c3:ff:37:59:a9:14:55:c9:51:d5:52:a4:56:
         9e:bc:03:74:8b:cb:c6:c5:85:08:77:81:f1:30:33:2c:fa:7f:
         b9:ff:d0:62:8c:73:9d:49:d8:b2:de:f7:30:4e:73:af:74:5d:
         59:0d:5d:15:13:ac:58:f3:fe:51:98:65:87:fb:ee:ed:14:01:
         a7:c9:73:01:6b:37:0c:c2:f8:57:da:dd:06:2c:21:ae:e0:23:
         51:7b:1f:fa:79:ae:de:23:01:82:8b:1c:e6:45:2a:37:2b:58:
         04:ae:0e:aa:c3:7a:37:6c:49:f2:b7:03:d1:d8:91:63:ce:40:
         10:a7:d4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:53:04 2025 by rpki-client