Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
File:                     Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft (raw, json)
Hash identifier:          e3FCnrn2zfGmGQ0KsUz3M848EcnH7qer5WtjU2ixCj0=
Subject key identifier:   58:9D:AE:FC:11:A7:32:80:DD:E4:CD:50:8D:EE:7B:3E:60:65:29:D5
Authority key identifier: 12:FF:3E:D4:FB:57:59:2E:DC:AF:5B:2B:76:34:A5:60:54:04:3C:50
Certificate issuer:       /CN=12ff3ed4fb57592edcaf5b2b7634a56054043c50
Certificate serial:       019DA29C34F94FD4E7AB2AF9B0A6BE5CC35A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
Manifest number:          04C5
Signing time:             Sat 18 Apr 2026 22:00:39 +0000
Manifest this update:     Sat 18 Apr 2026 22:00:39 +0000
Manifest next update:     Sun 19 Apr 2026 22:00:39 +0000
Files and hashes:         1: Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl (hash: OtX8LiB+fCDmPjD6PWVhuy8MwxLe3813fD/BHbZCCmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:9c:34:f9:4f:d4:e7:ab:2a:f9:b0:a6:be:5c:c3:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12ff3ed4fb57592edcaf5b2b7634a56054043c50
        Validity
            Not Before: Apr 18 22:00:39 2026 GMT
            Not After : Apr 19 22:00:39 2026 GMT
        Subject: CN=589daefc11a73280dde4cd508dee7b3e606529d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c2:5d:62:a4:c7:9a:00:6f:b8:52:cc:0b:4e:
                    f7:7f:2f:15:bb:0f:b2:cc:02:0c:45:8f:79:71:01:
                    ec:8e:9d:4a:9e:38:20:46:40:71:60:09:d4:8b:bc:
                    28:4b:e8:60:06:9d:6e:25:a4:7a:57:2d:23:74:31:
                    00:93:b2:5c:ca:af:91:8a:8a:ef:a2:99:89:e1:58:
                    42:25:88:53:66:07:9a:34:77:b7:73:51:46:ad:d6:
                    29:1a:3a:2e:5d:7e:2d:b3:ac:9e:b4:e3:09:65:84:
                    e4:5e:8f:ef:81:9a:18:26:b2:88:07:88:1b:03:b5:
                    5d:7d:83:97:ec:c0:4c:ea:fe:ed:18:f0:01:d3:5a:
                    19:d0:df:5e:4e:02:e8:a5:41:aa:22:17:2c:7a:44:
                    cc:0a:7d:ad:5c:bc:87:de:ee:59:6a:81:c7:9a:32:
                    98:09:66:b4:9b:05:e1:72:b7:95:90:b1:a9:a6:c0:
                    c0:2f:71:ad:4f:a4:5f:ec:de:35:fc:c3:ea:41:37:
                    14:35:17:74:75:74:44:36:b1:7e:42:62:74:a4:78:
                    c2:1a:57:f4:61:d5:63:eb:2e:b1:bf:e2:23:34:0f:
                    95:5d:f0:16:54:41:0e:05:ed:e0:60:54:d8:a8:1f:
                    09:02:29:6b:d7:e6:28:be:24:8b:97:da:be:75:61:
                    21:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9D:AE:FC:11:A7:32:80:DD:E4:CD:50:8D:EE:7B:3E:60:65:29:D5
            X509v3 Authority Key Identifier:
                keyid:12:FF:3E:D4:FB:57:59:2E:DC:AF:5B:2B:76:34:A5:60:54:04:3C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ev8-1PtXWS7cr1srdjSlYFQEPFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/14e561-8fb6-4544-94b7-b0a007c224d4/1/Ev8-1PtXWS7cr1srdjSlYFQEPFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:90:9d:8c:18:de:84:bf:ee:d3:1e:2a:d8:ee:af:29:ac:41:
         9d:ae:5d:1c:ac:d4:2f:9b:0c:d5:43:d6:9b:46:76:87:a7:00:
         12:91:33:95:02:a1:b0:d4:41:4d:87:2b:1a:07:aa:b3:50:ba:
         03:45:b5:80:50:ab:7d:99:cc:3c:16:91:a8:32:07:30:05:63:
         54:d6:ed:d2:f0:6c:2e:6f:42:88:14:21:83:da:38:40:00:30:
         19:a5:f9:0d:fd:32:b1:70:21:f9:55:a7:4c:1b:43:1e:6a:91:
         f6:79:3b:5d:48:a6:8d:ad:48:5a:06:b9:16:6b:c1:1a:b0:bb:
         de:99:9f:97:5a:11:d3:7e:23:49:03:5d:7c:79:ec:5c:5b:63:
         44:65:1f:a8:a5:65:6a:00:ee:fa:a8:25:bb:49:0c:ef:e0:8e:
         04:ab:8b:f4:1a:0f:8b:92:89:7e:b8:8a:4a:66:dd:a5:55:b8:
         a3:ce:97:36:46:74:22:0d:1f:9f:8b:96:fa:21:a7:20:e1:86:
         1d:6e:b9:68:92:b1:4e:a9:18:a5:be:c6:20:29:04:f7:54:73:
         d7:7c:74:72:b3:d0:10:82:7a:07:32:8a:b2:a0:40:81:d6:eb:
         76:6d:33:f1:7a:44:b0:54:c0:e2:bd:27:e6:49:f6:49:0f:b3:
         1d:3f:9d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:27 2026 by rpki-client