Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
File:                     EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft (raw, json)
Hash identifier:          wxFGPKrZzOlEoUrhT+qgzsitYFReXQfiuTFaZAg6ARM=
Subject key identifier:   7B:18:AF:C6:C6:8F:C8:AF:C7:AF:77:C5:AE:0F:57:17:75:49:45:04
Authority key identifier: 11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
Certificate issuer:       /CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Certificate serial:       0199221E4147E7FADB81ECD36F47D78D9260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
Manifest number:          1069
Signing time:             Sun 07 Sep 2025 03:00:32 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:32 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:32 +0000
Files and hashes:         1: EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl (hash: cVYcmZIarqqJfE1duuP0jIBvZFEFnD0qebiBKjYX4dE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:41:47:e7:fa:db:81:ec:d3:6f:47:d7:8d:92:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1155b16fa9db7bceeccb89d1fe252632c0972514
        Validity
            Not Before: Sep  7 03:00:32 2025 GMT
            Not After : Sep  8 03:00:32 2025 GMT
        Subject: CN=7b18afc6c68fc8afc7af77c5ae0f571775494504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7c:8f:51:f5:71:de:85:04:5c:b3:58:37:03:
                    63:d6:a6:d6:83:77:22:5f:34:95:dd:b9:a0:e5:5e:
                    cc:53:c1:f2:e4:0d:4e:ab:98:59:d7:ed:89:0c:d9:
                    fd:0e:ba:1f:bd:e9:99:d4:62:ff:90:e8:3c:fd:c3:
                    98:92:0e:0d:a5:2a:1d:8b:bd:9c:97:fc:ce:45:4c:
                    6e:01:4d:1a:70:1d:77:a5:72:89:bf:de:db:67:a0:
                    7a:65:30:2c:05:a0:09:f0:ee:60:8c:b5:e5:c0:ae:
                    e8:44:16:da:48:41:97:d3:ee:1a:69:28:11:92:bb:
                    98:b8:ae:8f:2d:79:1b:ef:2b:85:be:70:d7:9d:0f:
                    15:61:46:7c:45:9d:5c:da:c2:e9:42:ad:f3:d4:15:
                    78:f9:c3:02:fc:5c:06:83:2d:2d:ab:02:3b:af:4f:
                    0c:10:12:c9:f1:41:23:dc:d0:f3:c2:dc:50:07:94:
                    30:af:69:a6:38:1a:d1:51:88:0f:86:bb:2f:db:a4:
                    b2:a0:37:47:99:c3:ed:e3:14:60:3d:78:51:9f:07:
                    18:fd:9f:95:7e:b3:0e:84:20:fd:08:53:af:30:e1:
                    6f:c8:8c:44:17:02:9d:7c:09:92:23:47:4b:af:f6:
                    6b:d9:ac:f4:8c:51:c6:17:82:9c:64:61:5d:da:fd:
                    bd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:18:AF:C6:C6:8F:C8:AF:C7:AF:77:C5:AE:0F:57:17:75:49:45:04
            X509v3 Authority Key Identifier:
                keyid:11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c9:ef:9b:64:f4:9a:38:24:35:47:b7:26:1b:26:ac:a7:c7:
         d9:9e:87:59:53:c3:26:88:03:24:6c:22:ac:b8:71:e2:78:48:
         59:59:1d:68:0c:23:7b:fe:8d:52:31:97:7b:ea:4c:fa:7e:2c:
         0f:94:36:81:62:b9:c3:19:02:d3:47:fd:45:39:4b:89:ca:52:
         d2:f5:9f:71:8c:39:e5:d1:45:fa:5e:23:51:24:e4:9b:35:d2:
         f9:7b:ca:b6:fe:47:30:30:49:b9:16:57:f3:65:b9:10:96:00:
         48:8d:e3:cf:59:bd:fa:1b:31:a0:5b:5e:45:58:cd:11:30:4b:
         2a:f0:46:b1:38:49:a3:70:9c:4d:b8:d9:ab:00:e1:7c:b4:2c:
         d1:fb:a8:19:44:90:0f:87:79:44:8c:19:1c:92:ee:e0:bc:8d:
         05:fa:6c:35:62:77:9a:dd:42:7e:81:a0:0f:1a:88:aa:08:04:
         81:74:a8:2f:d4:7d:92:10:93:8d:45:63:0e:39:29:86:22:be:
         a2:99:07:35:df:cd:dc:78:7e:19:26:23:b6:3a:99:80:8b:e1:
         14:6d:fa:a6:6c:89:6e:94:e9:fb:0e:a8:b0:0f:53:f4:80:08:
         0e:eb:1d:e1:f7:09:f3:74:5c:22:bd:b2:8c:28:5f:95:b1:d9:
         70:76:b9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:55 2025 by rpki-client