Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
File:                     Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft (raw, json)
Hash identifier:          uV96JITWueYqBNvXNKmccn0pU92jpG0ZSI2WoMcH0oY=
Subject key identifier:   8D:65:8B:E6:A2:FA:63:A7:BE:A1:DF:8B:83:D4:A0:86:29:89:AB:C9
Authority key identifier: 12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57
Certificate issuer:       /CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
Certificate serial:       019CAAC6474E4F0A860CB6200C76BFB48BF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
Manifest number:          0F25
Signing time:             Sun 01 Mar 2026 19:00:46 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:46 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:46 +0000
Files and hashes:         1: Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl (hash: +VOzU1wAdDPirgmoVqvxVKcrofQmLBvpzwi/uxjpRbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:47:4e:4f:0a:86:0c:b6:20:0c:76:bf:b4:8b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12fbe4aade4a7ea8c0237fcbf40274860a40ec57
        Validity
            Not Before: Mar  1 19:00:46 2026 GMT
            Not After : Mar  2 19:00:46 2026 GMT
        Subject: CN=8d658be6a2fa63a7bea1df8b83d4a0862989abc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9a:a3:81:c5:4c:57:45:78:40:05:fb:fc:91:
                    34:77:4d:43:de:b2:5b:fa:ef:97:6b:9b:48:aa:8c:
                    6b:32:65:db:4e:3f:6c:43:cc:7a:fa:d5:4e:a0:75:
                    da:b9:f5:62:39:bf:d0:9f:d6:a7:35:70:84:2e:98:
                    dd:9a:09:75:f0:00:ff:1d:4a:63:a3:fa:85:57:11:
                    7b:27:35:9c:0d:3a:fb:05:e1:a8:65:75:b5:33:10:
                    7c:8f:24:e2:95:0d:09:9a:2e:07:79:9c:e3:10:d8:
                    d5:2e:b8:a2:31:5b:0d:63:45:49:36:ba:91:f9:4d:
                    31:0b:3b:d5:ea:d9:fd:a8:ed:ac:84:82:47:b5:2c:
                    3d:5b:bc:fa:2f:6b:1f:5e:1d:70:3e:48:92:39:97:
                    57:ef:a5:b9:2f:ce:c8:c8:0b:1d:7d:5a:4d:10:0c:
                    c0:d5:84:23:d5:b6:fc:c3:44:f4:cb:b4:45:0b:c1:
                    18:72:28:8e:f4:31:69:34:a4:bd:f7:6d:d3:e7:d8:
                    8d:04:10:79:83:32:2b:bf:fa:6b:99:f3:ca:8d:fb:
                    91:0f:85:01:9d:07:67:a0:0d:24:e0:37:c0:83:01:
                    9c:69:2f:f8:ad:23:b4:ff:4b:11:b6:52:ae:75:ac:
                    ef:25:6b:e2:a0:d5:f2:1e:47:d0:6c:6e:99:bb:73:
                    e5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:65:8B:E6:A2:FA:63:A7:BE:A1:DF:8B:83:D4:A0:86:29:89:AB:C9
            X509v3 Authority Key Identifier:
                keyid:12:FB:E4:AA:DE:4A:7E:A8:C0:23:7F:CB:F4:02:74:86:0A:40:EC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/bfdc56-950e-499c-886d-4ba8d6e2d8de/1/Evvkqt5KfqjAI3_L9AJ0hgpA7Fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:26:6b:9b:80:fa:75:2a:b3:9d:87:e7:8e:fe:57:b9:7b:91:
         52:b2:c3:67:1c:8b:4a:6b:b7:05:e9:e1:39:98:37:bd:e1:d9:
         39:3e:18:3e:72:12:f0:23:02:ea:17:41:11:56:6c:57:2b:68:
         56:a4:98:c8:38:48:fb:48:e5:3f:90:3a:17:5f:68:be:d2:e8:
         8a:9e:a0:0e:f8:88:29:14:f0:33:bd:83:88:a3:6d:17:32:ac:
         05:45:af:2f:b2:a1:2d:f8:c7:a0:0d:a3:1b:56:cc:c8:4d:87:
         5c:51:2c:41:34:37:5b:57:c3:7d:4c:2a:ca:fc:43:ed:7e:e6:
         bc:06:0e:97:b8:a4:eb:25:4b:11:74:5f:30:b7:f8:08:9c:1c:
         21:a9:a3:25:99:5e:ec:51:84:f6:40:88:51:b9:49:9e:c5:ba:
         66:84:05:d7:20:c0:7e:60:01:34:f5:cb:cb:79:87:40:46:46:
         91:03:ff:3c:1e:3b:b1:3d:32:3f:db:43:fc:23:41:bb:46:80:
         29:a2:cb:10:3a:2a:55:c1:ba:2c:f3:57:2d:e5:65:eb:18:18:
         36:0e:85:68:c0:83:e5:6d:55:82:67:e3:7d:d5:a6:a5:22:e8:
         cf:2a:25:d3:77:b1:fe:c6:d1:33:02:82:c3:91:47:a0:9d:43:
         43:96:13:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxkdOTwqGDLYgDHa/tIvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZmJlNGFhZGU0YTdlYThjMDIzN2ZjYmY0MDI3NDg2MGE0
MGVjNTcwHhcNMjYwMzAxMTkwMDQ2WhcNMjYwMzAyMTkwMDQ2WjAzMTEwLwYDVQQD
Eyg4ZDY1OGJlNmEyZmE2M2E3YmVhMWRmOGI4M2Q0YTA4NjI5ODlhYmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJqjgcVMV0V4QAX7/JE0d01D3rJb
+u+Xa5tIqoxrMmXbTj9sQ8x6+tVOoHXaufViOb/Qn9anNXCELpjdmgl18AD/HUpj
o/qFVxF7JzWcDTr7BeGoZXW1MxB8jyTilQ0Jmi4HeZzjENjVLriiMVsNY0VJNrqR
+U0xCzvV6tn9qO2shIJHtSw9W7z6L2sfXh1wPkiSOZdX76W5L87IyAsdfVpNEAzA
1YQj1bb8w0T0y7RFC8EYciiO9DFpNKS9923T59iNBBB5gzIrv/prmfPKjfuRD4UB
nQdnoA0k4DfAgwGcaS/4rSO0/0sRtlKudazvJWvioNXyHkfQbG6Zu3Pl1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1li+ai+mOnvqHfi4PUoIYpiavJMB8GA1UdIwQY
MBaAFBL75KreSn6owCN/y/QCdIYKQOxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXZ2a3F0NUtmcWpBSTNfTDlBSjBoZ3BBN0ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9iZmRjNTYtOTUwZS00OTljLTg4NmQt
NGJhOGQ2ZTJkOGRlLzEvRXZ2a3F0NUtmcWpBSTNfTDlBSjBoZ3BBN0ZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9iZmRjNTYtOTUwZS00OTljLTg4NmQtNGJhOGQ2ZTJkOGRl
LzEvRXZ2a3F0NUtmcWpBSTNfTDlBSjBoZ3BBN0ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyZrm4D6
dSqznYfnjv5XuXuRUrLDZxyLSmu3BenhOZg3veHZOT4YPnIS8CMC6hdBEVZsVyto
VqSYyDhI+0jlP5A6F19ovtLoip6gDviIKRTwM72DiKNtFzKsBUWvL7KhLfjHoA2j
G1bMyE2HXFEsQTQ3W1fDfUwqyvxD7X7mvAYOl7ik6yVLEXRfMLf4CJwcIamjJZle
7FGE9kCIUblJnsW6ZoQF1yDAfmABNPXLy3mHQEZGkQP/PB47sT0yP9tD/CNBu0aA
KaLLEDoqVcG6LPNXLeVl6xgYNg6FaMCD5W1VgmfjfdWmpSLozyol03ex/sbRMwKC
w5FHoJ1DQ5YTMw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:53 2026 by rpki-client