Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.mft
File:                     evj4jBlvHAgVNQlOinGiRuhjitg.mft (raw, json)
Hash identifier:          7KVSaoEAFWk3b5qWTZ47h0EzptR+UQJvJ8EjThmnoAg=
Subject key identifier:   CB:46:A1:B5:70:8B:CD:11:20:3D:77:17:71:7D:0F:26:BB:C1:CD:4E
Authority key identifier: 7A:F8:F8:8C:19:6F:1C:08:15:35:09:4E:8A:71:A2:46:E8:63:8A:D8
Certificate issuer:       /CN=7af8f88c196f1c081535094e8a71a246e8638ad8
Certificate serial:       019A7293B13F6C7D19B0E7F4F2434A813214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evj4jBlvHAgVNQlOinGiRuhjitg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.mft
Manifest number:          15EE
Signing time:             Tue 11 Nov 2025 11:01:13 +0000
Manifest this update:     Tue 11 Nov 2025 11:01:13 +0000
Manifest next update:     Wed 12 Nov 2025 11:01:13 +0000
Files and hashes:         1: evj4jBlvHAgVNQlOinGiRuhjitg.crl (hash: XB1Bri1+CYJVIqPe1xp3e8TJ8jw1EyicIpVHnUpLpRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evj4jBlvHAgVNQlOinGiRuhjitg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:93:b1:3f:6c:7d:19:b0:e7:f4:f2:43:4a:81:32:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af8f88c196f1c081535094e8a71a246e8638ad8
        Validity
            Not Before: Nov 11 11:01:13 2025 GMT
            Not After : Nov 12 11:01:13 2025 GMT
        Subject: CN=cb46a1b5708bcd11203d7717717d0f26bbc1cd4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:de:69:04:3f:a7:78:82:4e:c7:6a:4b:88:65:
                    e9:7a:16:f9:77:00:f2:77:f9:1f:55:b1:f7:fb:e0:
                    4e:d7:a0:6c:08:00:b2:e1:75:f7:a9:48:ac:d7:8f:
                    ba:c7:cc:1a:c5:f2:0c:5f:c5:a6:63:d1:63:0f:d6:
                    65:5c:71:95:10:45:b7:53:cf:a0:b8:b9:0e:3a:02:
                    94:48:cf:57:55:69:ec:48:c0:25:0c:a4:a4:c8:e4:
                    52:b0:38:eb:c1:f9:d3:a3:fb:ff:44:a1:11:13:fb:
                    ca:c8:d8:78:f7:45:e3:71:94:03:30:d4:81:5e:11:
                    95:33:58:c7:b9:d9:32:b8:4d:b3:b4:b0:58:70:45:
                    72:e1:9b:b1:ea:15:87:9f:77:28:2a:89:12:cd:28:
                    6a:af:ed:b7:33:9e:bf:98:b2:40:cf:12:e4:5b:58:
                    87:3b:2c:60:d6:3f:76:77:35:58:1f:07:0b:99:45:
                    c5:55:da:1f:be:3a:7a:0f:bd:ba:25:db:df:2f:e4:
                    f6:b1:fa:ab:23:38:e5:91:a6:2d:a2:37:26:06:4b:
                    15:dc:3d:2b:0d:a9:9d:52:56:45:b2:05:9b:98:bc:
                    91:23:2e:17:d9:a1:40:ae:d7:cc:27:63:a6:fb:cb:
                    c5:90:07:67:24:d9:72:ba:f1:ef:79:0d:fe:43:83:
                    16:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:46:A1:B5:70:8B:CD:11:20:3D:77:17:71:7D:0F:26:BB:C1:CD:4E
            X509v3 Authority Key Identifier:
                keyid:7A:F8:F8:8C:19:6F:1C:08:15:35:09:4E:8A:71:A2:46:E8:63:8A:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evj4jBlvHAgVNQlOinGiRuhjitg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/25df41-1968-4fc8-932d-07852b29338e/1/evj4jBlvHAgVNQlOinGiRuhjitg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6c:3b:7f:16:bd:b9:a5:52:10:5e:58:d5:06:d4:10:be:37:
         3e:d5:d4:9b:c4:61:9b:e0:44:42:71:4b:e6:ee:c3:6d:a4:1d:
         fd:c0:68:8a:c4:ce:97:e2:d0:d6:42:56:11:38:52:54:94:31:
         e2:82:5e:48:39:1a:61:20:78:bd:85:3f:71:be:da:bd:93:a6:
         59:e2:d6:73:3a:a1:23:10:00:e3:d2:9f:77:2f:2e:9e:ee:9d:
         5b:2e:a0:8e:80:7b:ed:cb:7a:eb:62:b2:d1:60:f8:cd:79:86:
         95:4e:43:18:27:90:8c:10:b7:54:43:1b:56:9f:75:46:10:68:
         3b:42:1d:5f:09:2b:1e:d1:11:7d:8f:e6:b3:37:b7:f0:f8:e8:
         91:28:c6:7d:1d:c4:92:ac:fd:62:23:47:2d:15:6c:71:98:e5:
         0d:c1:b3:73:9f:3d:76:9a:eb:b9:f6:30:4e:01:32:0b:6b:bf:
         ac:6a:da:f8:5a:43:73:4b:a7:aa:5c:c5:89:a2:4d:3a:84:32:
         64:93:04:09:b8:78:c6:f6:ad:b1:7b:d6:f9:a6:d9:c9:c7:2d:
         ae:5f:5c:3b:26:25:95:a2:01:cc:6e:7c:2e:c2:0e:b1:e4:21:
         63:e3:c7:f0:3b:28:1c:bc:f4:56:91:fb:b2:ad:9c:29:1b:ba:
         9d:1a:70:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:10 2025 by rpki-client