Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft
File:                     EVFSIzgprv1GebUUcXmN68mCN-8.mft (raw, json)
Hash identifier:          WYtmmLuFSocpgrn78WDAGAEiwu9oO7arW7aSi1v6lJA=
Subject key identifier:   B9:8C:61:E4:D8:65:CD:15:82:B3:FE:D9:85:7E:8D:9A:BA:0F:1D:6A
Authority key identifier: 11:51:52:23:38:29:AE:FD:46:79:B5:14:71:79:8D:EB:C9:82:37:EF
Certificate issuer:       /CN=115152233829aefd4679b51471798debc98237ef
Certificate serial:       01A1901E770D6BD5B985EEAD892EBE5B2F68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft
Manifest number:          1705
Signing time:             Sat 31 Oct 2026 04:01:18 +0000
Manifest this update:     Sat 31 Oct 2026 04:01:18 +0000
Manifest next update:     Sun 01 Nov 2026 04:01:18 +0000
Files and hashes:         1: EVFSIzgprv1GebUUcXmN68mCN-8.crl (hash: E9MRsFdch+15+y7sdhruchD256FcmfuTyo7zZDKo6L0=)
                          2: h-ewiio_U2p3mUUWndK3k3zz3Vw.roa (hash: 1O1XnImjXBP+2O+z+QkG0b8OYhePZKOFLAMqAL+lS3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:90:1e:77:0d:6b:d5:b9:85:ee:ad:89:2e:be:5b:2f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115152233829aefd4679b51471798debc98237ef
        Validity
            Not Before: Oct 31 04:01:18 2026 GMT
            Not After : Nov  1 04:01:18 2026 GMT
        Subject: CN=b98c61e4d865cd1582b3fed9857e8d9aba0f1d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bb:0b:25:28:46:4c:58:fa:b7:1b:93:c9:9c:
                    6b:20:88:c4:23:91:f0:35:3f:b0:64:13:7d:70:7d:
                    2d:9a:bb:3c:df:56:e9:85:e6:58:b2:5d:36:bb:6d:
                    d2:5b:6f:07:c4:8d:74:6f:f4:8d:88:94:cf:e4:10:
                    6c:d5:95:ea:31:4a:f8:f0:ec:db:17:c3:44:0e:ac:
                    5c:96:a6:b1:72:d7:45:2f:25:62:73:fd:1d:e9:f3:
                    cc:c7:3e:87:11:ce:fc:5c:90:4b:f8:e0:1a:eb:b4:
                    0f:36:cb:35:f2:35:0d:80:b2:38:f2:7c:03:2f:ea:
                    a3:38:38:3a:fe:f8:d9:91:99:f7:a4:b7:a9:a6:b6:
                    f9:5b:d0:93:14:a0:94:c7:44:da:f9:5e:3a:ce:06:
                    64:9b:69:f6:f0:aa:5d:60:dd:d0:27:25:37:b4:16:
                    18:34:45:a1:19:8c:a4:69:ea:31:d0:b2:c6:64:59:
                    cf:73:0b:4d:cf:ae:54:40:24:0b:4a:4b:bf:07:8d:
                    2a:98:d7:2b:51:12:d6:6f:5f:d9:5f:bd:98:78:59:
                    1e:9e:43:93:82:c8:46:ba:3e:35:23:95:31:1e:73:
                    03:11:f5:d0:82:cb:85:2e:06:b0:29:f2:c9:4f:cb:
                    01:d0:9b:00:c6:ef:b6:36:75:c3:94:62:30:2f:4b:
                    d1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8C:61:E4:D8:65:CD:15:82:B3:FE:D9:85:7E:8D:9A:BA:0F:1D:6A
            X509v3 Authority Key Identifier:
                keyid:11:51:52:23:38:29:AE:FD:46:79:B5:14:71:79:8D:EB:C9:82:37:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVFSIzgprv1GebUUcXmN68mCN-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbea5d-277b-4675-8d05-ed17d6c42b2f/1/EVFSIzgprv1GebUUcXmN68mCN-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:99:e0:ae:3f:dd:a0:36:d8:3a:88:ba:0f:f5:30:3e:e3:b7:
         49:86:ac:f3:07:de:68:66:c5:6f:1b:19:99:48:e9:d3:12:ac:
         16:47:68:92:44:63:d2:06:48:3b:76:ad:7e:28:0b:ae:a3:76:
         40:e4:75:ae:ea:f4:5a:c4:4f:2f:b1:a7:15:e9:b7:63:05:d6:
         f8:0f:c3:a4:31:73:51:c9:de:5d:12:72:fa:96:35:97:34:b0:
         6c:bc:fb:07:1b:0d:16:09:b8:b2:b6:44:74:5a:00:b3:d2:6a:
         24:9f:07:50:dd:4f:4a:bb:9b:5c:3c:73:fa:7d:89:93:57:ee:
         2b:46:6e:a4:fe:97:d6:10:54:ba:9d:9a:f1:54:c2:08:cd:4f:
         b4:1f:0a:36:93:ad:a8:b0:23:67:d4:51:3e:ae:e6:e7:90:30:
         78:e6:17:ca:65:03:2e:db:f1:4f:8e:b8:25:51:e4:6d:c7:10:
         23:dd:12:4c:25:04:fa:21:bc:ee:57:49:35:6f:2b:a2:47:c0:
         30:c5:ad:3e:c1:78:db:d9:6a:01:ca:1f:6c:c9:d8:bf:26:c3:
         ba:c3:8f:6f:19:94:7a:cb:31:d9:72:5e:83:c6:ca:34:dc:a9:
         f3:33:e1:c3:10:48:25:c4:04:07:1d:87:f7:02:4e:5d:c4:9f:
         52:8c:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:40:37 2026 by rpki-client