Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
File:                     Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft (raw, json)
Hash identifier:          IUl7l+p9SgxVdSMoVNgN4Wq/zGgEoNQ1yPUNmrQq2mE=
Subject key identifier:   B1:12:A4:8F:1D:4A:63:43:FA:FE:33:0F:36:9B:BD:44:9E:0A:E7:46
Authority key identifier: 12:FF:3E:D4:FB:57:59:2E:DC:AF:5B:2B:76:34:A5:60:54:04:3C:50
Certificate issuer:       /CN=12ff3ed4fb57592edcaf5b2b7634a56054043c50
Certificate serial:       0199180A000FF3F7242978A4251C36F60014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
Manifest number:          026B
Signing time:             Fri 05 Sep 2025 04:02:12 +0000
Manifest this update:     Fri 05 Sep 2025 04:02:12 +0000
Manifest next update:     Sat 06 Sep 2025 04:02:12 +0000
Files and hashes:         1: Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl (hash: /kb3XXqcR0v48Czs5pbTF3RRYJW6QAUvBwHHWTeaFRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:0a:00:0f:f3:f7:24:29:78:a4:25:1c:36:f6:00:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12ff3ed4fb57592edcaf5b2b7634a56054043c50
        Validity
            Not Before: Sep  5 04:02:12 2025 GMT
            Not After : Sep  6 04:02:12 2025 GMT
        Subject: CN=b112a48f1d4a6343fafe330f369bbd449e0ae746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cb:75:a9:8b:0f:dd:ae:31:e2:dd:c4:a3:90:
                    68:5d:13:10:a2:f2:ba:84:a9:b0:63:14:59:fe:6d:
                    eb:be:f3:bf:0e:ef:84:5b:6a:47:22:ea:6c:1b:a6:
                    fa:3e:ba:68:f5:78:73:b2:0e:2e:54:ba:bd:19:c0:
                    76:6a:4c:e4:ff:85:94:79:0a:22:fe:51:c3:44:8e:
                    91:11:54:ba:93:a9:a9:0c:56:c3:50:29:e4:86:65:
                    50:e1:54:06:5a:3c:74:5e:36:72:d1:58:f3:19:a1:
                    87:76:55:79:46:10:e1:a1:48:c4:80:34:e4:6d:1f:
                    89:af:57:01:80:fd:68:2b:63:1a:36:31:2a:49:73:
                    ff:0b:eb:4c:e7:d4:3c:ef:8a:3a:59:b9:33:57:2a:
                    74:c1:10:c5:6a:18:b5:e9:73:8c:ad:9e:ec:7b:b5:
                    24:64:c9:49:27:f9:58:68:6a:a5:52:0f:19:20:8e:
                    af:92:9d:97:6f:0d:02:35:cf:f1:f9:cd:2b:49:20:
                    ec:f9:68:cf:81:fb:e9:86:97:a4:d2:7b:41:41:8f:
                    7f:02:56:97:5f:92:c1:a1:42:5a:66:9c:07:7f:ed:
                    51:bb:2c:bd:a7:81:db:fb:dc:09:97:7e:65:b4:3f:
                    78:75:15:eb:dc:a7:7b:bf:e3:d8:b3:4f:35:73:75:
                    eb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:12:A4:8F:1D:4A:63:43:FA:FE:33:0F:36:9B:BD:44:9E:0A:E7:46
            X509v3 Authority Key Identifier:
                keyid:12:FF:3E:D4:FB:57:59:2E:DC:AF:5B:2B:76:34:A5:60:54:04:3C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:3c:a8:f4:eb:40:07:5e:91:4f:f3:df:bb:30:49:2d:08:88:
         4c:0e:d5:82:07:1f:ca:00:3e:8c:ae:da:ad:01:be:a8:6a:79:
         78:59:18:af:10:78:a8:c6:a8:93:4d:2d:84:d9:db:df:9a:20:
         72:e2:47:b7:08:2d:b0:63:fc:7d:56:e8:96:0d:6b:1d:21:0e:
         98:9a:e0:7a:33:a6:b2:ce:7b:ff:36:31:c0:37:10:9f:5f:61:
         bd:9d:7c:15:6f:52:48:af:6d:e9:e2:d3:f8:d5:b5:69:5f:48:
         e7:ba:2f:4b:0a:be:c7:41:ed:6e:a2:96:9c:22:10:be:e5:b3:
         a6:ab:1b:44:c6:0f:91:87:d7:33:01:d4:b3:a9:23:cf:b8:34:
         7c:df:a9:7e:f3:96:62:01:67:bf:a4:83:9a:9f:20:fd:33:7c:
         13:04:97:cc:42:83:e1:77:f5:55:06:a0:51:b5:d4:72:bc:40:
         e9:b8:a5:94:4e:2a:38:25:14:53:bb:16:f3:16:ab:89:f2:c9:
         d4:02:7a:f3:f6:55:d4:66:70:b7:ac:b5:b3:ee:aa:0d:72:31:
         de:df:8a:79:b6:37:db:33:7f:9f:75:06:8e:22:cd:f7:7a:b2:
         c7:c5:40:b3:9d:85:8e:cb:3d:c3:c8:a2:e2:b5:db:b4:40:c1:
         01:b3:e8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:38 2025 by rpki-client