Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft
File:                     ed-J0j-dbc_x-71wtjZnHR7wrZE.mft (raw, json)
Hash identifier:          lAce7QRY+e1ZX4KgEYF6nTksXraINhYRZvCTChcdUE4=
Subject key identifier:   43:4D:3F:14:0E:DF:11:D5:E8:D9:7B:9A:EB:91:CF:6F:08:48:69:4B
Authority key identifier: 79:DF:89:D2:3F:9D:6D:CF:F1:FB:BD:70:B6:36:67:1D:1E:F0:AD:91
Certificate issuer:       /CN=79df89d23f9d6dcff1fbbd70b636671d1ef0ad91
Certificate serial:       0199FBEB846DD4BDF60E2AFA0DE57A37D46C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ed-J0j-dbc_x-71wtjZnHR7wrZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft
Manifest number:          0728
Signing time:             Sun 19 Oct 2025 10:02:19 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:19 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:19 +0000
Files and hashes:         1: ed-J0j-dbc_x-71wtjZnHR7wrZE.crl (hash: yYHtNRL4hDuFQRZpCGCF4d3H4wO+pbp67SnlKFvdEe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ed-J0j-dbc_x-71wtjZnHR7wrZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:84:6d:d4:bd:f6:0e:2a:fa:0d:e5:7a:37:d4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79df89d23f9d6dcff1fbbd70b636671d1ef0ad91
        Validity
            Not Before: Oct 19 10:02:19 2025 GMT
            Not After : Oct 20 10:02:19 2025 GMT
        Subject: CN=434d3f140edf11d5e8d97b9aeb91cf6f0848694b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7a:4e:24:4e:ad:b0:13:92:f1:e1:68:49:60:
                    54:e2:fe:aa:d0:b9:6d:48:f8:a0:26:15:e8:e4:a1:
                    2e:30:42:1d:e9:c8:2c:46:a7:e0:13:ad:0b:36:14:
                    ea:84:39:1e:98:ac:a6:f8:82:be:13:b4:82:40:0f:
                    e4:03:de:96:f9:8e:ea:aa:04:47:f8:d1:52:49:4b:
                    69:fc:5c:a4:4b:fa:cd:be:82:66:ad:f8:6a:16:e7:
                    e4:eb:9d:cd:68:a1:41:5f:72:01:57:7f:69:1a:ec:
                    6b:fa:25:5b:12:5c:4a:4a:63:15:2e:c5:73:69:08:
                    66:3c:e9:a6:75:a0:b9:f9:36:2a:f0:98:e3:bd:27:
                    79:f3:29:6a:f4:c2:6f:c5:31:bc:c7:aa:57:d5:22:
                    e1:e9:4d:17:fb:d8:3d:99:eb:af:b9:ba:9a:ae:97:
                    36:59:6b:bc:01:92:2d:bd:a6:2f:09:d0:19:f2:b1:
                    11:05:c7:1b:eb:aa:69:5e:40:57:2f:5a:6d:24:07:
                    4b:1a:2a:cb:20:cb:f3:ae:b4:b3:f3:5b:59:95:8d:
                    7f:7f:ad:98:1d:dd:0a:d2:f6:ec:41:2f:ca:92:a6:
                    45:6c:9c:6e:c8:14:d2:a3:0e:db:8d:b0:4b:2e:8a:
                    8b:be:35:cf:a4:31:d0:4b:92:78:12:dc:d0:70:ce:
                    1b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4D:3F:14:0E:DF:11:D5:E8:D9:7B:9A:EB:91:CF:6F:08:48:69:4B
            X509v3 Authority Key Identifier:
                keyid:79:DF:89:D2:3F:9D:6D:CF:F1:FB:BD:70:B6:36:67:1D:1E:F0:AD:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed-J0j-dbc_x-71wtjZnHR7wrZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c6:18:0c:63:f4:af:89:4a:72:95:a3:95:31:bf:be:4e:08:
         47:9f:e0:9a:ef:2b:fc:ee:55:b6:94:bd:70:4a:02:ab:aa:ae:
         a7:2e:56:fe:4e:3d:01:c0:0f:34:bf:83:23:fe:93:e8:1e:fc:
         1e:54:89:4f:85:80:4a:fe:5b:1f:49:1e:44:53:6a:85:c3:3d:
         95:eb:aa:49:bb:ba:8a:8e:32:14:46:75:df:b2:8a:e4:ab:72:
         f6:17:f4:c6:b6:8f:31:42:cc:54:2b:28:5f:32:25:c4:7b:ec:
         17:10:ba:37:40:ce:55:6c:be:e9:91:5c:cf:06:14:b0:77:a9:
         ab:21:1b:f9:95:15:50:d4:5d:5e:22:b0:a6:75:7f:1a:17:67:
         41:6e:96:56:75:70:97:e6:bf:19:a4:39:bd:29:83:9e:c4:6c:
         38:71:6d:c2:a4:8f:37:fd:ca:14:0d:79:e8:d6:9e:58:17:cf:
         cd:cd:2b:1f:bc:86:99:da:ff:8a:1c:d8:3e:7a:a6:9c:4b:f0:
         80:94:ff:2b:56:6d:e8:18:e1:f4:01:c5:e0:b9:c7:b6:e1:d0:
         b5:21:e3:26:6c:c4:6a:b3:1c:66:0a:5f:09:f9:d3:ad:dd:bc:
         74:8c:47:27:cf:ef:ff:a2:f1:9f:85:0a:0e:bf:96:11:56:b4:
         5c:ae:73:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:12 2025 by rpki-client