Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File:                     AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier:          WzY86SzcxN5PPdtOIkFcdKnNncdwUi9V4naTduKOBNc=
Subject key identifier:   EF:39:62:71:9E:7A:A5:D5:3C:9C:AC:2B:63:EC:8A:5A:40:40:ED:E7
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer:       /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial:       019A4EF5C23A3159D4F279BD8759DDC26193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number:          1105
Signing time:             Tue 04 Nov 2025 13:02:00 +0000
Manifest this update:     Tue 04 Nov 2025 13:02:00 +0000
Manifest next update:     Wed 05 Nov 2025 13:02:00 +0000
Files and hashes:         1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: oaUPNfvNOFKtNXa8MTaV107t0ychGHuQhg/QEDBg2FI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:c2:3a:31:59:d4:f2:79:bd:87:59:dd:c2:61:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
        Validity
            Not Before: Nov  4 13:02:00 2025 GMT
            Not After : Nov  5 13:02:00 2025 GMT
        Subject: CN=ef3962719e7aa5d53c9cac2b63ec8a5a4040ede7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:3b:37:a4:11:c9:c9:6e:66:ea:51:c2:37:
                    79:98:d6:1b:88:0c:8c:e8:7f:8a:c7:38:08:b7:21:
                    f3:1e:fe:3e:26:ac:ea:35:eb:ec:f9:38:16:04:e2:
                    b0:c6:62:a7:84:f5:4b:15:d0:d8:0e:58:a6:07:b4:
                    22:b0:c6:92:4b:e1:f5:ce:5f:d2:57:bb:da:38:b1:
                    51:ce:1b:c2:b7:19:a1:7a:84:c2:7c:bb:cb:c8:a3:
                    a5:00:b2:3b:d0:8a:f0:0f:e0:23:fd:bb:4e:c7:b4:
                    4b:e6:f9:a5:ad:f6:0b:17:91:52:6a:51:ff:b6:5e:
                    be:fb:ef:7a:27:3e:18:be:61:88:aa:59:d1:c5:06:
                    a2:47:37:d3:87:c7:bd:53:76:51:48:9d:55:db:5e:
                    30:b6:4a:4e:6d:0d:f9:0c:00:17:2f:c9:d6:ae:2d:
                    88:59:8a:37:39:24:50:aa:25:fe:e9:77:78:b1:6a:
                    a6:5f:18:8f:7f:20:e4:ee:55:1d:4c:ed:71:e1:2d:
                    80:a5:f2:21:14:e2:01:85:09:3f:f8:9f:5c:54:37:
                    ca:68:5a:63:2e:1b:8e:7f:24:59:f8:8d:a3:a4:87:
                    e8:57:29:85:bb:c9:8d:de:4f:21:45:16:7a:88:16:
                    c7:25:7f:e7:5d:31:50:07:2d:7c:09:b9:b6:77:f7:
                    35:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:39:62:71:9E:7A:A5:D5:3C:9C:AC:2B:63:EC:8A:5A:40:40:ED:E7
            X509v3 Authority Key Identifier:
                keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:9d:e0:c6:9e:04:14:06:78:79:77:f5:30:a1:83:ff:18:5f:
         d1:14:00:cc:60:cf:0f:20:66:dd:e0:6d:16:bf:d7:dd:f1:58:
         a3:b6:08:b7:fd:47:3d:f9:d7:d2:0d:62:bc:e7:bf:97:c5:8a:
         92:17:08:d2:18:0b:96:98:0c:72:84:fc:48:b7:a8:fa:cc:d4:
         1e:ab:5d:5a:ed:65:03:81:9e:a6:f2:eb:2b:f7:05:36:8c:89:
         ab:20:05:aa:d6:7a:6c:95:10:69:91:4d:a1:c6:18:3d:62:16:
         99:62:a3:70:4b:a8:a1:4a:4b:7b:a1:1b:d3:1c:9b:8e:dd:74:
         a7:43:65:a2:2f:4a:72:0b:81:d5:12:7a:11:5b:79:4f:42:f0:
         7a:f1:aa:2e:ee:48:d5:3a:18:97:69:6f:a2:9d:7b:1a:b0:ea:
         e5:59:7a:21:7a:a6:3b:37:4e:84:18:3f:27:9a:6a:c2:97:7e:
         46:e2:30:6c:d2:f2:ae:09:8a:b9:9f:55:bc:19:2a:2f:9b:7e:
         1d:60:ff:ae:20:b4:5a:28:9d:8c:2e:d3:d9:c7:36:e4:01:4b:
         6c:63:41:9a:90:71:7f:95:81:c5:e8:a4:1a:eb:36:b0:54:7a:
         1a:2e:10:58:b4:42:c2:eb:8a:6a:0d:c7:ab:77:50:41:a9:e5:
         7c:3e:63:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:00 2025 by rpki-client