Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
File:                     Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft (raw, json)
Hash identifier:          RHDdu7H4NXG2BEaO7SUPNajWMn/KCncz3frAxQTdMko=
Subject key identifier:   47:9F:2D:83:27:6F:E9:3A:68:86:DD:F6:FA:DB:2D:8F:30:88:38:E5
Authority key identifier: 12:FF:3E:D4:FB:57:59:2E:DC:AF:5B:2B:76:34:A5:60:54:04:3C:50
Certificate issuer:       /CN=12ff3ed4fb57592edcaf5b2b7634a56054043c50
Certificate serial:       019A50E286D0856974C269257AB53BE99CB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
Manifest number:          030D
Signing time:             Tue 04 Nov 2025 22:00:14 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:14 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:14 +0000
Files and hashes:         1: Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl (hash: TUUveitkkbbTCuas510HEhr81gl/A+3q3d6SfP/Vnlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e2:86:d0:85:69:74:c2:69:25:7a:b5:3b:e9:9c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12ff3ed4fb57592edcaf5b2b7634a56054043c50
        Validity
            Not Before: Nov  4 22:00:14 2025 GMT
            Not After : Nov  5 22:00:14 2025 GMT
        Subject: CN=479f2d83276fe93a6886ddf6fadb2d8f308838e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a3:fc:06:a3:cc:ac:b8:89:26:c4:ca:46:fb:
                    db:c3:e9:99:ec:e2:1b:75:74:b8:92:04:3a:3e:33:
                    da:22:ed:25:cd:ae:31:55:66:59:96:73:d7:5a:09:
                    1e:5e:bf:56:ba:24:40:15:8a:d6:39:32:7e:da:9b:
                    83:fa:c0:6c:ba:80:e0:f6:0f:a3:ee:0e:5a:06:1a:
                    02:9a:1a:f7:3b:f9:c3:d6:a0:98:cb:94:09:96:8c:
                    50:09:ba:c2:a4:7a:24:e6:2a:10:2f:03:77:9b:89:
                    ee:6a:98:f1:3c:5a:83:ca:ba:4f:88:68:33:1f:29:
                    f5:c5:13:8b:86:7c:ad:09:a1:13:86:8c:4c:e5:a4:
                    76:f7:e1:80:9e:cd:79:78:22:28:20:78:4b:15:be:
                    00:3e:75:10:c4:7e:7b:a7:31:fa:d9:ca:f5:85:a3:
                    b5:8d:2e:d5:e9:a2:f1:65:e3:47:58:29:bb:e6:e3:
                    68:4f:52:c3:66:00:8e:91:37:13:dd:eb:6c:7e:0b:
                    b8:97:4a:6f:ee:d0:95:99:dc:1d:2f:fd:7a:dc:7a:
                    b0:2c:21:eb:39:3b:4f:f2:61:6d:fe:6d:35:eb:91:
                    62:0f:3b:06:30:01:86:13:78:77:ea:15:1d:6b:5b:
                    37:f9:09:56:1a:d0:40:83:90:a0:a9:72:9e:d7:5f:
                    09:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9F:2D:83:27:6F:E9:3A:68:86:DD:F6:FA:DB:2D:8F:30:88:38:E5
            X509v3 Authority Key Identifier:
                keyid:12:FF:3E:D4:FB:57:59:2E:DC:AF:5B:2B:76:34:A5:60:54:04:3C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:44:ba:58:33:55:c8:2c:9d:fc:32:d4:0f:ad:f6:77:e8:92:
         2f:d9:a1:47:a9:02:97:4a:f9:02:c6:e7:ca:fe:a3:5f:d4:db:
         8f:ea:f1:9b:36:60:74:02:d7:92:ba:05:4d:e0:e8:cd:90:77:
         53:06:24:ee:09:d1:8c:aa:b3:3e:aa:6d:14:c2:c4:b9:73:44:
         fa:44:2b:13:65:1a:80:55:c1:0b:f9:dc:ee:87:37:72:36:f8:
         b9:00:e7:10:1e:b2:16:38:a0:43:75:88:72:db:27:61:d3:f6:
         e5:42:ea:6d:27:de:f6:20:22:e3:4a:ec:57:30:54:0a:83:74:
         2b:d6:f3:e1:4b:2e:b4:a4:3c:f0:96:fd:b2:d3:55:25:e3:03:
         80:f4:2d:85:d6:82:db:6e:d5:68:0b:9c:76:73:11:2e:99:a8:
         5d:7f:eb:86:e8:f1:c3:f7:4a:34:e4:09:00:ba:3d:74:ab:5d:
         b4:ba:bb:f2:0f:00:75:0f:28:3f:2c:bb:78:45:52:c1:77:59:
         dd:db:8b:82:87:e8:54:49:de:03:07:7d:e7:52:9f:29:90:a2:
         e4:24:41:52:ce:e7:92:8a:25:9c:93:e7:64:08:16:2c:52:80:
         79:0c:2d:38:8f:84:fa:8b:4d:fa:33:13:52:33:21:84:37:4e:
         b9:51:0d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:54 2025 by rpki-client