Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
File:                     evoTWyBy38xO87VBwTa8gAHvQwc.mft (raw, json)
Hash identifier:          UKWAHZBdMJAC5lU7gu7IXiOM5RXy/dOembxGfnuTDQY=
Subject key identifier:   DD:FF:2B:0B:A4:EF:17:56:E7:F3:BD:29:CB:45:64:8F:1A:3C:50:E4
Authority key identifier: 7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07
Certificate issuer:       /CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
Certificate serial:       01993313C1346D381DE1CF0C102B329A9AC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
Manifest number:          0AFD
Signing time:             Wed 10 Sep 2025 10:02:36 +0000
Manifest this update:     Wed 10 Sep 2025 10:02:36 +0000
Manifest next update:     Thu 11 Sep 2025 10:02:36 +0000
Files and hashes:         1: 1VFRaILqnJnJB3yngV6vDeJcapk.roa (hash: CqxIJgH7ih1CRmTJoFGPX9x50D1IUJFOHfeDDgVZwRg=)
                          2: evoTWyBy38xO87VBwTa8gAHvQwc.crl (hash: AaxfwjQYic5IPZVf/Xb/pyQqbP5w72ijShI+BjC5xBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 10:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:13:c1:34:6d:38:1d:e1:cf:0c:10:2b:32:9a:9a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afa135b2072dfcc4ef3b541c136bc8001ef4307
        Validity
            Not Before: Sep 10 10:02:36 2025 GMT
            Not After : Sep 11 10:02:36 2025 GMT
        Subject: CN=ddff2b0ba4ef1756e7f3bd29cb45648f1a3c50e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e5:c1:f0:0d:60:bf:32:fb:26:fe:56:93:4d:
                    e6:1c:39:2f:64:a8:3f:30:ea:e2:1a:9c:30:93:20:
                    52:3e:08:66:0e:21:3c:20:6a:5e:c1:20:e3:4b:cd:
                    97:2e:ba:82:7f:92:53:44:b8:df:3f:5e:6f:3f:17:
                    dc:2d:da:52:a2:dc:53:fd:6a:00:58:08:d6:59:37:
                    1b:09:c8:d2:c8:0f:1f:82:3c:13:85:a7:3b:67:97:
                    b8:a2:19:fc:7b:e7:8d:40:2f:de:91:6c:1c:a2:21:
                    43:15:1e:44:8e:15:14:c4:00:8b:8a:75:39:dc:d8:
                    fa:11:f9:62:41:ca:43:a8:c5:5e:18:74:37:f2:75:
                    a9:1b:03:e9:b2:59:95:29:b3:fd:0d:f2:b9:b1:21:
                    ac:27:15:15:3e:36:f5:be:9f:4e:cb:7d:68:85:e9:
                    54:9a:c0:70:51:66:4a:70:71:6d:dc:1e:dd:0d:5b:
                    45:8e:a1:4c:e3:a7:d7:32:32:92:0c:cd:ed:fb:65:
                    be:f6:e7:3e:36:b7:f8:f1:01:c9:ed:d5:d7:d8:c2:
                    fb:2a:34:39:f6:2f:dc:78:1f:3e:39:7a:c7:67:4a:
                    e9:cc:e8:3c:bc:94:80:aa:7e:89:80:6b:91:10:a3:
                    92:34:db:bc:f7:01:bc:6b:d3:f7:56:fe:cd:b6:a2:
                    8f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:FF:2B:0B:A4:EF:17:56:E7:F3:BD:29:CB:45:64:8F:1A:3C:50:E4
            X509v3 Authority Key Identifier:
                keyid:7A:FA:13:5B:20:72:DF:CC:4E:F3:B5:41:C1:36:BC:80:01:EF:43:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evoTWyBy38xO87VBwTa8gAHvQwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b14193-f569-434a-aea4-f5deaa9bf0f7/1/evoTWyBy38xO87VBwTa8gAHvQwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:10:7c:5a:b8:b2:28:a0:97:92:24:85:76:3f:69:72:c2:96:
         bf:65:ae:ff:3f:96:bf:fa:f7:10:69:d9:ec:14:c2:21:4f:a0:
         92:e8:20:40:0b:c8:94:e0:92:c0:cc:f7:44:56:c3:0e:f3:cd:
         9f:13:c6:a3:8a:2f:7d:54:8a:59:e8:b5:09:61:f9:24:e5:6b:
         ec:ea:de:8b:9f:26:b1:35:26:15:6f:2c:92:b6:36:63:fb:9c:
         cc:17:84:b4:15:d1:ad:2e:01:67:a1:f2:f9:30:f3:3e:19:9a:
         b2:fd:44:15:7b:96:c5:82:7c:69:be:23:40:b2:ba:4b:d3:24:
         6a:f1:8a:a3:5e:fe:d8:7e:0c:d2:c9:3f:f4:c2:e4:ad:bf:b3:
         b1:e5:cb:33:60:36:97:9a:51:e9:e2:7f:49:b5:c3:24:19:f4:
         cb:cf:85:f6:47:8a:98:99:c1:b9:d6:f6:bb:88:a8:0b:d1:08:
         e9:dc:7c:8d:36:eb:d3:b9:a6:72:19:eb:9f:36:fd:62:29:46:
         2a:4e:37:e6:ec:74:c4:c4:82:e7:43:f0:0d:9e:70:66:2f:06:
         9e:23:9e:fb:cd:91:08:94:ae:51:bd:ad:0a:8d:33:01:cc:26:
         0b:21:95:ea:4e:c0:70:dc:26:7d:a1:f7:db:e9:fd:5e:55:f2:
         b3:eb:db:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:48:27 2025 by rpki-client