Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
File:                     EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft (raw, json)
Hash identifier:          PLUBaPkXSups+GdBMvw/sRIPYOyUimYDbtEo8xc1Ab4=
Subject key identifier:   79:06:AF:E8:DC:28:D6:6C:E4:DE:45:0C:61:76:20:BF:1C:D2:08:13
Authority key identifier: 11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14
Certificate issuer:       /CN=1155b16fa9db7bceeccb89d1fe252632c0972514
Certificate serial:       019A72263924A8F86D901BE98C9307A0EB75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
Manifest number:          1117
Signing time:             Tue 11 Nov 2025 09:01:38 +0000
Manifest this update:     Tue 11 Nov 2025 09:01:38 +0000
Manifest next update:     Wed 12 Nov 2025 09:01:38 +0000
Files and hashes:         1: EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl (hash: C0rkm2H/3A8lW09lUGMWlDE3FqiLgf3vGEFYXyadzGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:26:39:24:a8:f8:6d:90:1b:e9:8c:93:07:a0:eb:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1155b16fa9db7bceeccb89d1fe252632c0972514
        Validity
            Not Before: Nov 11 09:01:38 2025 GMT
            Not After : Nov 12 09:01:38 2025 GMT
        Subject: CN=7906afe8dc28d66ce4de450c617620bf1cd20813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:17:91:f0:f6:ca:74:89:63:d5:0b:6d:f3:
                    d4:a7:91:8a:ca:b6:c0:81:53:ce:32:77:b4:be:0c:
                    92:84:5c:af:ea:f2:1a:62:aa:8e:d5:35:cd:ac:7e:
                    83:d2:bf:59:ef:63:53:40:d2:be:80:af:8c:50:9c:
                    2d:3e:7c:35:00:43:b3:8b:34:5f:e6:a5:80:f5:98:
                    99:16:1e:2b:e9:02:fb:1a:8c:77:9d:73:b5:bd:27:
                    87:66:12:88:e2:53:89:e9:61:07:69:73:cf:53:ba:
                    56:25:3d:e9:7c:a4:54:8e:5f:5e:48:4d:46:ca:4c:
                    29:ef:99:88:8e:3c:d0:06:d8:d6:da:18:27:78:27:
                    b6:34:a9:a3:2a:15:e5:de:01:5f:82:cf:51:50:39:
                    53:b9:4a:7a:05:62:36:37:16:2d:a2:f3:bc:7c:ae:
                    97:61:e2:b4:0f:25:0c:27:ef:a0:5e:4d:d9:f6:ae:
                    61:08:c1:c6:54:e4:17:ec:43:d6:b6:5b:b8:6c:96:
                    fc:44:cb:75:c8:72:82:5a:73:7d:f1:85:be:cd:83:
                    e8:cb:26:18:96:ef:6c:7a:e9:09:fd:68:78:04:80:
                    69:21:5a:d7:33:23:5f:70:66:f2:25:c0:e4:cd:62:
                    f1:67:8e:f4:8b:80:70:21:e9:e1:f9:db:2b:65:99:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:06:AF:E8:DC:28:D6:6C:E4:DE:45:0C:61:76:20:BF:1C:D2:08:13
            X509v3 Authority Key Identifier:
                keyid:11:55:B1:6F:A9:DB:7B:CE:EC:CB:89:D1:FE:25:26:32:C0:97:25:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVWxb6nbe87sy4nR_iUmMsCXJRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/096cd4-1bb3-4c12-96a0-283f44240b67/1/EVWxb6nbe87sy4nR_iUmMsCXJRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:69:95:16:0d:e7:c7:39:f0:4d:9b:85:37:99:6c:3c:b5:5b:
         0d:06:07:ba:2c:10:47:81:21:f9:e4:91:99:c3:b5:09:69:de:
         97:3d:8b:16:e2:ce:61:f3:a6:80:4a:c2:cb:e4:6e:bb:4c:d6:
         85:9b:a0:5b:0f:2e:ce:96:4f:b4:7d:f6:35:35:85:9b:d7:39:
         a2:99:c2:23:5f:32:8e:cf:7e:10:28:92:e9:33:24:98:3a:25:
         b7:65:19:f4:1b:69:47:d3:c2:26:47:7b:ba:35:2f:a2:8f:f8:
         a6:9e:70:f6:5f:be:38:59:96:08:d5:0a:c6:0c:b8:10:ad:dc:
         2f:f9:03:ec:89:ce:e4:d4:cc:45:1a:8b:6c:58:5f:99:98:e7:
         8a:16:ff:69:08:ca:ad:04:d0:0a:15:19:b9:c0:9b:88:54:15:
         7a:d4:f6:fd:9f:a8:17:86:d4:30:80:15:5e:62:96:4c:d9:ff:
         dd:f9:28:11:cb:89:39:20:7f:14:e6:67:ff:18:b2:9c:08:df:
         eb:5c:9d:99:e2:90:d1:13:8c:9d:51:22:55:17:0d:39:d9:86:
         91:34:85:54:1e:c5:24:ec:78:2e:bf:80:86:ae:7d:1a:8d:da:
         40:0c:c5:ae:e9:5a:7d:79:b3:4d:19:60:17:ed:00:ea:52:aa:
         79:73:dc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:42 2025 by rpki-client