Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
File:                     EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft (raw, json)
Hash identifier:          wG+R78VxPj8ZKBhvDuO+B8+yu+G5coIe+ka2cN9Mvs4=
Subject key identifier:   97:83:C3:9E:D4:D9:36:9B:44:D5:9A:06:FD:09:27:74:DA:C9:FF:62
Authority key identifier: 11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
Certificate issuer:       /CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Certificate serial:       0199FC5871DD0B3CC2C7909AC6055668E41D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
Manifest number:          10DA
Signing time:             Sun 19 Oct 2025 12:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:18 +0000
Files and hashes:         1: EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl (hash: 7I4FsoxtuAps25t7TwmLkWlU654uiWRtuzOwNHfFDvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:71:dd:0b:3c:c2:c7:90:9a:c6:05:56:68:e4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1155b16fa9db7bceeccb89d1fe252632c0972514
        Validity
            Not Before: Oct 19 12:01:18 2025 GMT
            Not After : Oct 20 12:01:18 2025 GMT
        Subject: CN=9783c39ed4d9369b44d59a06fd092774dac9ff62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:cf:e2:5c:00:81:cb:ba:40:99:14:a1:e0:
                    14:15:0e:f7:88:95:27:bd:6d:0a:50:9d:59:20:cf:
                    a7:b0:a8:09:ec:94:61:ff:93:ed:8c:95:c1:c1:41:
                    1a:0d:1b:df:d0:3f:71:a5:a9:1e:96:dc:57:58:fa:
                    69:a4:84:ba:64:d3:23:48:f9:73:6e:36:a8:78:6a:
                    82:5f:64:83:d8:f5:61:2e:10:4e:00:90:f2:00:c6:
                    ff:8f:da:36:66:cb:4c:6f:02:d7:7a:39:8a:7e:51:
                    8f:be:63:c9:17:32:3c:6d:27:2b:94:08:61:36:f3:
                    c9:52:fb:66:4d:00:a9:f9:1a:7c:86:f6:fd:8a:cd:
                    26:ba:40:63:a5:b0:e8:70:4c:f3:c6:5c:96:59:98:
                    f1:1b:09:87:11:43:d6:b9:86:ed:b3:59:89:43:ed:
                    bb:0d:b6:28:0d:f4:e9:43:d9:7e:fa:cc:af:bd:6f:
                    f7:80:2c:87:09:88:c5:8f:13:1a:bb:6a:29:16:5d:
                    2d:26:5f:44:61:54:4e:56:1d:95:16:e0:df:73:50:
                    dc:67:9e:56:14:30:89:10:67:7a:63:50:4a:d8:50:
                    db:2b:da:47:4a:6c:ce:2f:44:e6:80:23:f5:58:75:
                    01:d4:4b:82:ab:ec:62:aa:07:70:92:e2:13:16:38:
                    9a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:83:C3:9E:D4:D9:36:9B:44:D5:9A:06:FD:09:27:74:DA:C9:FF:62
            X509v3 Authority Key Identifier:
                keyid:11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e8:ad:e7:2c:22:4c:3d:73:94:a0:a1:34:77:61:ff:8c:2a:
         40:26:d0:96:6b:48:7a:02:55:15:68:ed:81:a2:96:d2:05:c9:
         4d:b3:16:b2:53:df:e3:9f:c5:61:98:09:04:d1:0a:88:a2:3a:
         ae:a9:78:58:d8:f0:86:8f:01:86:2b:ae:cf:fc:16:4d:9b:54:
         17:04:5f:73:c7:7e:2d:bd:20:4b:21:db:fb:f8:6a:b8:32:d3:
         26:d7:46:b2:74:24:ce:d8:20:24:77:70:d4:2d:5a:b0:2c:38:
         80:71:0f:bf:21:bc:e1:b4:42:41:d1:ae:67:e0:7b:98:6c:7c:
         66:d4:e2:ad:c4:74:80:51:1e:f8:a0:9f:b4:d1:f5:ea:bc:60:
         04:3c:be:1d:34:b5:a9:20:14:2a:fa:5b:ca:26:58:a9:fc:bf:
         41:7e:d7:29:b0:a8:ea:70:a1:46:0e:6b:77:d8:65:6c:27:5f:
         3c:56:57:62:45:88:1c:4a:71:28:57:1d:78:82:a3:59:6e:ff:
         8f:e4:eb:87:51:2f:d5:18:f1:a4:66:a6:e1:37:f0:a1:fe:1e:
         3a:8e:20:8f:5f:b5:89:6f:73:42:12:cc:e5:96:04:cf:be:54:
         ef:75:25:64:e5:07:89:98:39:3c:9e:5a:46:14:70:f9:e9:a7:
         e2:7c:01:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:19 2025 by rpki-client