Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
File:                     Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft (raw, json)
Hash identifier:          WI2upMpagDnrGFtacVNQrXfBV0QvchBwE3BbM/LfVm4=
Subject key identifier:   72:DC:C1:84:00:B2:70:B8:88:9E:59:8F:8C:DD:85:70:36:70:35:E8
Authority key identifier: 12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57
Certificate issuer:       /CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
Certificate serial:       019D37C114473F9277ED3C1FA50D8851A5D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
Manifest number:          0F6E
Signing time:             Sun 29 Mar 2026 04:01:33 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:33 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:33 +0000
Files and hashes:         1: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl (hash: HQ6NhomJQy+X03Z7MevJsS+Zbwa7iX0zGDRIW2WPR4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c1:14:47:3f:92:77:ed:3c:1f:a5:0d:88:51:a5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
        Validity
            Not Before: Mar 29 04:01:33 2026 GMT
            Not After : Mar 30 04:01:33 2026 GMT
        Subject: CN=72dcc18400b270b8889e598f8cdd8570367035e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b5:b7:97:2b:55:5e:20:af:59:6a:8f:b5:30:
                    67:85:42:ee:d0:e3:be:34:ce:22:ef:b3:47:7a:07:
                    75:b6:6c:1e:f9:19:75:51:08:14:0a:85:f5:e1:d3:
                    b2:0c:d9:ab:f5:87:29:f8:bf:a4:dd:86:45:8e:13:
                    32:07:94:a1:4c:a2:70:26:ab:48:0a:67:1a:52:92:
                    cd:91:98:6b:fd:00:e8:34:24:2c:16:93:93:44:a5:
                    cc:83:cb:ab:9f:e2:0c:1a:cd:d2:66:06:a9:bd:9e:
                    2b:43:15:d5:56:44:74:01:f6:56:bf:ec:f6:eb:9c:
                    7f:30:ba:ee:00:f3:bf:a4:b6:bb:78:37:05:65:56:
                    30:cf:69:35:bd:9a:52:1a:02:a0:57:b8:89:81:71:
                    0d:47:62:7c:dc:96:e5:df:58:b6:be:1c:9f:67:06:
                    52:1d:2c:e1:71:84:09:91:16:7d:bc:d9:2f:b3:ab:
                    32:6c:a5:a8:ac:e9:91:c0:51:1e:d3:01:cd:24:ce:
                    28:b4:47:9c:cb:23:14:63:5b:ec:bb:c5:0c:a8:be:
                    51:52:94:32:53:d6:30:0f:ec:cb:38:8d:fd:71:96:
                    db:f5:33:db:93:2f:ad:bf:51:fd:70:93:a6:f4:40:
                    3f:f8:05:86:28:9d:42:f2:4f:ae:9c:7c:f3:74:1f:
                    26:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DC:C1:84:00:B2:70:B8:88:9E:59:8F:8C:DD:85:70:36:70:35:E8
            X509v3 Authority Key Identifier:
                keyid:12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:cf:7e:8b:55:74:48:3b:a6:e9:75:27:02:3b:cb:29:7e:eb:
         66:ff:e5:e5:48:9d:d1:fe:e2:ca:54:59:cd:f5:af:e6:7b:e7:
         5c:ee:24:c6:ad:88:a7:2a:6f:36:44:21:83:72:90:57:ee:cf:
         d6:68:5a:40:a0:c0:27:bc:a7:e4:5f:2d:9b:a9:a6:99:87:b5:
         0b:a8:36:59:a0:fb:20:e9:a2:d0:84:35:d5:ea:f4:ae:be:19:
         b0:a0:46:32:25:dc:23:d7:e2:51:f8:36:3d:ee:83:47:e0:ac:
         4c:2c:1e:c0:31:ee:ad:d3:de:3a:78:81:d9:ce:ba:84:6d:b8:
         cf:b1:40:15:d7:9a:7f:08:e0:5d:3e:8b:db:2e:46:4b:d1:49:
         3a:aa:bc:2e:14:a7:95:1b:1d:13:c0:19:01:bf:d1:63:8b:a9:
         b6:b1:24:de:cb:0a:ce:d8:ff:fc:e1:ba:73:96:6e:d5:26:87:
         c0:08:d9:b6:ac:7e:dc:86:cb:43:ec:97:51:3a:d0:9f:34:97:
         32:52:7a:af:c5:a7:96:41:2f:aa:86:b1:59:b1:02:63:ec:f2:
         e7:79:74:d9:11:37:b4:82:97:72:b0:80:79:95:08:90:2f:1a:
         89:ae:79:e1:c7:bd:63:9e:f5:cb:90:5b:70:7c:80:fa:79:75:
         c1:97:a5:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wRRHP5J37TwfpQ2IUaXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZmJlNGFhZGU0YTdlYThjMDIzN2ZjYmY0MDI3NDg2MGE0
MGVjNTcwHhcNMjYwMzI5MDQwMTMzWhcNMjYwMzMwMDQwMTMzWjAzMTEwLwYDVQQD
Eyg3MmRjYzE4NDAwYjI3MGI4ODg5ZTU5OGY4Y2RkODU3MDM2NzAzNWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rW3lytVXiCvWWqPtTBnhULu0OO+
NM4i77NHegd1tmwe+Rl1UQgUCoX14dOyDNmr9Ycp+L+k3YZFjhMyB5ShTKJwJqtI
CmcaUpLNkZhr/QDoNCQsFpOTRKXMg8urn+IMGs3SZgapvZ4rQxXVVkR0AfZWv+z2
65x/MLruAPO/pLa7eDcFZVYwz2k1vZpSGgKgV7iJgXENR2J83Jbl31i2vhyfZwZS
HSzhcYQJkRZ9vNkvs6sybKWorOmRwFEe0wHNJM4otEecyyMUY1vsu8UMqL5RUpQy
U9YwD+zLOI39cZbb9TPbky+tv1H9cJOm9EA/+AWGKJ1C8k+unHzzdB8mZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLcwYQAsnC4iJ5Zj4zdhXA2cDXoMB8GA1UdIwQY
MBaAFBL75KreSn6owCN/y/QCdIYKQOxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXZ2a3F0NUtmcWpBSTNfTDlBSjBoZ3BBN0ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iZmRjNTYtOTUwZS00OTljLTg4NmQt
NGJhOGQ2ZTJkOGRlLzEvRXZ2a3F0NUtmcWpBSTNfTDlBSjBoZ3BBN0ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9iZmRjNTYtOTUwZS00OTljLTg4NmQtNGJhOGQ2ZTJkOGRl
LzEvRXZ2a3F0NUtmcWpBSTNfTDlBSjBoZ3BBN0ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUM9+i1V0
SDum6XUnAjvLKX7rZv/l5Uid0f7iylRZzfWv5nvnXO4kxq2IpypvNkQhg3KQV+7P
1mhaQKDAJ7yn5F8tm6mmmYe1C6g2WaD7IOmi0IQ11er0rr4ZsKBGMiXcI9fiUfg2
Pe6DR+CsTCwewDHurdPeOniB2c66hG24z7FAFdeafwjgXT6L2y5GS9FJOqq8LhSn
lRsdE8AZAb/RY4uptrEk3ssKztj//OG6c5Zu1SaHwAjZtqx+3IbLQ+yXUTrQnzSX
MlJ6r8WnlkEvqoaxWbECY+zy53l02RE3tIKXcrCAeZUIkC8aia554ce9Y571y5Bb
cHyA+nl1wZelrQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:59 2026 by rpki-client