Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File:                     edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier:          VgLa/+nfVWVg4Y11n12iEfcRts0JSwhdUPIvqLa8wfQ=
Subject key identifier:   5B:2B:C9:7B:0E:3E:4E:B6:D6:E1:0F:6D:2C:5A:75:19:4A:53:07:96
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer:       /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial:       0198D6CE073121531CFB2D2F6A1C9A40DF69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number:          0D6E
Signing time:             Sat 23 Aug 2025 12:01:22 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:22 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:22 +0000
Files and hashes:         1: EG5pUxGfwAIBOHWhSA_u40Ull48.roa (hash: j9AIedWxUThIEjIiNQ9a0XQAYjd/0yxU1No/HAT1wlg=)
                          2: EIlKz_yGKgG9o6LgyJUb5CYuXik.roa (hash: 7XI12BZ8oMxeo0lKGJtUxLNV8B1NZwQt+C2hSEvkeaU=)
                          3: eZbyMOXwsT8DM_J58p4lb08NYAk.roa (hash: /WC96WsqKWPbAIxaI0PJMY/euc4BODG5VIUj9O8Scw8=)
                          4: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: ItS6LGnRYURxgG/OBPebiZTJQVQVVIsmxuaf7GiH2Dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:ce:07:31:21:53:1c:fb:2d:2f:6a:1c:9a:40:df:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
        Validity
            Not Before: Aug 23 12:01:22 2025 GMT
            Not After : Aug 24 12:01:22 2025 GMT
        Subject: CN=5b2bc97b0e3e4eb6d6e10f6d2c5a75194a530796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:04:cd:87:4c:cb:2a:3f:3a:f4:01:c2:72:67:
                    6d:c8:a6:cb:67:69:83:1b:86:ce:a8:1d:ce:f8:42:
                    e7:78:fc:86:65:16:ab:30:d6:39:46:9e:b1:2c:ce:
                    ed:28:a1:0c:80:e8:0b:90:7e:88:1e:48:a1:0d:c5:
                    f9:b0:51:35:73:31:31:93:32:09:23:cb:45:f2:31:
                    22:d0:89:e3:73:e7:c5:86:42:92:98:b1:a2:6d:0e:
                    56:cd:16:05:64:88:8c:44:ec:77:58:12:2b:61:55:
                    49:43:41:62:52:bd:46:c9:f3:c9:3e:30:d2:7c:aa:
                    cb:b2:3f:7b:65:6a:0c:13:0c:0f:6e:b7:96:81:b1:
                    8a:72:31:c1:c3:ff:1a:37:29:79:c1:b4:78:11:c7:
                    48:8d:2f:32:e1:f9:9b:0e:f9:50:97:f2:1d:b0:27:
                    67:fb:99:59:2a:bc:73:13:0a:7b:56:e6:9b:1b:09:
                    7d:a8:8e:6a:ca:04:cb:ff:51:68:56:a7:64:49:e9:
                    8f:52:bd:11:db:43:11:c7:cc:d1:4e:4a:ce:c7:7e:
                    99:96:7e:af:f6:bd:27:e2:e5:c6:08:6b:89:be:1e:
                    db:8d:10:ee:34:eb:a7:ce:ef:94:8e:2c:39:6d:17:
                    e5:e5:0c:87:44:68:90:3b:46:11:a9:fc:12:90:7c:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2B:C9:7B:0E:3E:4E:B6:D6:E1:0F:6D:2C:5A:75:19:4A:53:07:96
            X509v3 Authority Key Identifier:
                keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b8:e7:4c:b2:d8:05:44:c5:6e:d1:b8:90:e4:21:f5:9f:46:
         6e:6f:c8:5b:06:72:76:ed:16:66:a9:48:1d:b7:89:78:62:86:
         61:ae:34:7c:b9:5e:09:9c:59:dd:96:ba:fa:e4:c2:d3:01:4c:
         41:6e:d3:f9:4b:b3:85:4a:47:d2:3c:cf:18:1d:ce:db:96:7e:
         d0:8e:3b:3b:68:61:20:56:24:fd:ce:f0:6a:4b:6e:b2:dd:18:
         16:01:53:e1:2d:ec:51:0d:51:5a:06:d3:31:2e:ff:45:81:aa:
         3a:83:4f:40:a2:80:91:ca:77:f5:b4:8d:9f:7c:b3:7f:a0:66:
         de:08:80:5b:28:56:b2:58:3a:28:37:8b:4a:79:88:ad:07:01:
         1e:5e:f0:d9:66:3c:2a:b3:f0:9f:2f:d5:7c:01:3e:ed:fd:b7:
         60:66:d4:67:cd:fa:91:fb:a2:98:74:eb:e1:4d:08:cf:f5:bb:
         34:fa:a4:65:9c:4f:e8:f1:6d:0a:b2:24:e8:6e:a2:0b:4e:3b:
         57:3f:d5:dd:78:3f:85:80:fc:68:cb:bc:5a:93:03:fe:1c:41:
         23:5a:0c:8a:b0:45:b6:c4:d8:94:78:a1:65:5b:c2:4d:55:7a:
         94:60:82:45:6c:8e:6d:cf:79:cf:06:23:30:e9:b4:7b:40:f5:
         61:1c:e2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:14:30 2025 by rpki-client