Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
File:                     3EviU3WUInayZECX3D1ah1r7ivE.mft (raw, json)
Hash identifier:          BxN8GUSKhYG9vAlsIw6ot/F0iZeLQYebRxowigySBHI=
Subject key identifier:   ED:BC:D8:C3:47:57:53:51:22:91:C0:45:51:E8:F2:C6:2A:06:A1:DE
Authority key identifier: DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1
Certificate issuer:       /CN=dc4be25375942276b2644097dc3d5a875afb8af1
Certificate serial:       0199180A7077AFFD0CFF0932675B28E0857B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
Manifest number:          0920
Signing time:             Fri 05 Sep 2025 04:02:41 +0000
Manifest this update:     Fri 05 Sep 2025 04:02:41 +0000
Manifest next update:     Sat 06 Sep 2025 04:02:41 +0000
Files and hashes:         1: 3EviU3WUInayZECX3D1ah1r7ivE.crl (hash: z8n7YP02tdA7rF8tPCuG5pIvcNcWxgBz7isBv99F7wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:0a:70:77:af:fd:0c:ff:09:32:67:5b:28:e0:85:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4be25375942276b2644097dc3d5a875afb8af1
        Validity
            Not Before: Sep  5 04:02:41 2025 GMT
            Not After : Sep  6 04:02:41 2025 GMT
        Subject: CN=edbcd8c3475753512291c04551e8f2c62a06a1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:08:69:1d:f3:0c:c0:5c:0e:11:23:6e:17:2c:
                    4b:57:4b:5d:f9:69:f2:c3:3c:49:a8:d0:23:95:d4:
                    8f:73:ce:f6:12:4a:21:f6:43:b3:6d:7f:70:7e:75:
                    85:06:a3:36:de:2e:45:4c:8d:dc:f3:ea:be:02:07:
                    bd:31:03:29:f8:12:79:3b:60:67:40:42:37:d7:31:
                    f3:83:a6:4f:72:8b:a5:a9:6e:2a:ed:3d:eb:d6:de:
                    af:67:cb:bb:ac:fd:91:73:6f:75:d2:4b:36:cc:ae:
                    1e:a2:9d:47:30:c0:0f:1c:f9:cf:22:b4:d8:a9:16:
                    4d:56:2a:26:66:24:d8:ef:6e:dc:10:1e:c8:3d:ff:
                    56:d8:f7:d0:7c:5f:ed:a0:91:d3:c8:d3:8e:32:f0:
                    91:e7:b1:70:a3:0d:c9:20:e4:c9:22:02:1c:e7:50:
                    c2:01:40:0c:f9:3f:73:ad:78:4c:02:15:4e:21:1b:
                    5b:1c:7e:06:99:d4:01:d0:48:3e:2c:6a:b2:29:4c:
                    32:c2:bf:44:5e:52:25:48:bf:89:39:50:49:42:3d:
                    30:b3:1a:c1:b9:37:7b:4b:04:00:38:87:96:87:4b:
                    37:ca:14:66:72:89:ee:12:c5:c8:30:cb:04:27:3f:
                    a9:f0:5d:9e:3b:47:7e:6f:84:b4:49:10:e5:5b:c4:
                    c1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BC:D8:C3:47:57:53:51:22:91:C0:45:51:E8:F2:C6:2A:06:A1:DE
            X509v3 Authority Key Identifier:
                keyid:DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:13:7e:bd:df:3d:21:e9:da:1c:a5:5c:2a:ca:6b:6f:54:00:
         9f:df:0b:78:75:06:e6:5f:c5:eb:7a:8a:5e:6d:fc:5f:88:e1:
         9b:25:11:cc:f6:b0:8b:37:05:40:5f:ba:38:69:1a:4c:cf:42:
         10:17:68:ec:4a:40:b2:ea:55:51:b4:08:54:62:a4:3f:69:43:
         71:f1:5a:2a:f3:19:ad:57:0d:80:fb:db:22:85:d4:e4:06:ff:
         a5:52:42:55:06:05:93:bc:37:28:14:ae:71:e4:80:71:34:ef:
         24:05:93:eb:54:86:a9:20:a3:ce:de:98:1a:10:57:d1:30:fd:
         41:1f:0d:18:f0:aa:ed:d4:f3:45:46:e3:ea:92:86:71:8e:5b:
         31:3e:07:cb:f1:f4:8e:99:6e:40:fd:79:a9:11:d5:c4:b6:3f:
         3e:e7:54:09:03:49:5a:66:d5:d2:ef:03:64:03:1f:0a:ca:60:
         df:9a:13:48:bb:67:87:da:e4:ce:7e:77:c9:4a:9b:58:df:3a:
         96:fc:14:e7:39:c0:e5:55:2f:bf:c2:6e:ec:e3:9e:5c:a3:80:
         b6:fa:a5:a2:e6:cb:1d:98:93:7a:d1:6a:6c:74:37:34:4b:b0:
         c6:ba:24:10:bb:b0:86:60:17:14:27:66:d9:50:94:a2:57:ea:
         de:54:a3:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYCnB3r/0M/wkyZ1so4IV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGJlMjUzNzU5NDIyNzZiMjY0NDA5N2RjM2Q1YTg3NWFm
YjhhZjEwHhcNMjUwOTA1MDQwMjQxWhcNMjUwOTA2MDQwMjQxWjAzMTEwLwYDVQQD
EyhlZGJjZDhjMzQ3NTc1MzUxMjI5MWMwNDU1MWU4ZjJjNjJhMDZhMWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8whpHfMMwFwOESNuFyxLV0td+Wny
wzxJqNAjldSPc872Ekoh9kOzbX9wfnWFBqM23i5FTI3c8+q+Age9MQMp+BJ5O2Bn
QEI31zHzg6ZPcoulqW4q7T3r1t6vZ8u7rP2Rc2910ks2zK4eop1HMMAPHPnPIrTY
qRZNViomZiTY727cEB7IPf9W2PfQfF/toJHTyNOOMvCR57Fwow3JIOTJIgIc51DC
AUAM+T9zrXhMAhVOIRtbHH4GmdQB0Eg+LGqyKUwywr9EXlIlSL+JOVBJQj0wsxrB
uTd7SwQAOIeWh0s3yhRmconuEsXIMMsEJz+p8F2eO0d+b4S0SRDlW8TBswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO282MNHV1NRIpHARVHo8sYqBqHeMB8GA1UdIwQY
MBaAFNxL4lN1lCJ2smRAl9w9Woda+4rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0V2aVUzV1VJbmF5WkVDWDNEMWFoMXI3aXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81M2QxMDAtOTk3Ni00OTRiLWFlMjEt
MGI4NTEwMzhhNWRlLzEvM0V2aVUzV1VJbmF5WkVDWDNEMWFoMXI3aXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC81M2QxMDAtOTk3Ni00OTRiLWFlMjEtMGI4NTEwMzhhNWRl
LzEvM0V2aVUzV1VJbmF5WkVDWDNEMWFoMXI3aXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxN+vd89
IenaHKVcKsprb1QAn98LeHUG5l/F63qKXm38X4jhmyURzPawizcFQF+6OGkaTM9C
EBdo7EpAsupVUbQIVGKkP2lDcfFaKvMZrVcNgPvbIoXU5Ab/pVJCVQYFk7w3KBSu
ceSAcTTvJAWT61SGqSCjzt6YGhBX0TD9QR8NGPCq7dTzRUbj6pKGcY5bMT4Hy/H0
jpluQP15qRHVxLY/PudUCQNJWmbV0u8DZAMfCspg35oTSLtnh9rkzn53yUqbWN86
lvwU5znA5VUvv8Ju7OOeXKOAtvqloubLHZiTetFqbHQ3NEuwxrokELuwhmAXFCdm
2VCUolfq3lSjIg==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:03 2025 by rpki-client