Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft
File:                     edVl-Z_14P-1vfmZXteoCNQUBuU.mft (raw, json)
Hash identifier:          C9zYZBgV662aftoFBkV47x8eC0mYKX0DRnD1g+VQwFA=
Subject key identifier:   8E:0E:D2:73:2B:16:49:DC:06:B4:5A:43:CB:D3:70:F2:7C:63:43:35
Authority key identifier: 79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
Certificate issuer:       /CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Certificate serial:       019D2704AD444FF5A934D201AE931F666A12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft
Manifest number:          0D48
Signing time:             Wed 25 Mar 2026 22:01:51 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:51 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:51 +0000
Files and hashes:         1: 468CghFJVbcMkzFD_6LLJ6KgIqI.roa (hash: I1pVpzd56rQR4bQX55OEgNlwIZn6N2UK6SbIW8BzFXs=)
                          2: IdjFehXQdBLz7qAxZCQHKcB6zD0.roa (hash: Dlp4+hIoUvaqtX9q0l/G19Jyi3u+a0sJGqKpZEFwiWU=)
                          3: edVl-Z_14P-1vfmZXteoCNQUBuU.crl (hash: +s3wNm1VH7iHeS38YVpfDMWsDgniqMWFQ0q6klDTxTo=)
                          4: q4BgbuvkzVB8ZRL3SkFinweXq-I.roa (hash: aCMbnoKcpfu50sjGN6TL9OokrXx+Ehkmz9YH9z+ZFCA=)
                          5: zV8GWPUHNwGTQG5raiin3OTpl3Q.roa (hash: qn3NV9lIq1h/YqEcxO5jUOfNfQtEgWeeSn2fXHWtsYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:ad:44:4f:f5:a9:34:d2:01:ae:93:1f:66:6a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
        Validity
            Not Before: Mar 25 22:01:51 2026 GMT
            Not After : Mar 26 22:01:51 2026 GMT
        Subject: CN=8e0ed2732b1649dc06b45a43cbd370f27c634335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:e5:d7:f6:ce:6c:35:14:9f:74:e8:d9:7e:
                    99:ab:a1:5f:2c:c6:6d:06:29:1e:60:9b:7d:5c:5c:
                    49:dc:1a:e1:4e:7a:f8:9e:72:51:f5:62:64:cb:42:
                    8d:10:00:d8:52:07:f4:aa:e6:87:6e:2a:66:b5:45:
                    2c:cd:eb:9e:87:16:56:fd:a9:83:92:bc:74:18:9a:
                    22:a9:89:a6:a3:ce:74:0f:dc:56:b5:c2:83:67:19:
                    89:c6:e8:aa:6f:86:c8:6e:42:0d:84:14:0d:85:f8:
                    1b:31:1d:e8:a7:51:ef:a7:e3:14:72:92:60:d9:e5:
                    b0:80:ec:7e:72:9b:fd:d5:9f:70:e0:aa:bb:ca:cc:
                    41:07:44:44:41:ed:e5:f8:e9:6d:d3:6a:15:55:9d:
                    f2:5c:70:36:e2:b2:c4:92:5f:50:20:84:8c:60:21:
                    73:24:0c:b3:a0:5c:f7:87:5d:2e:0e:86:b1:5c:1d:
                    d1:a3:61:e4:15:bd:20:92:cb:c2:b0:4d:62:ee:cb:
                    43:78:5f:87:78:bb:65:25:28:f4:cf:c6:42:cf:35:
                    ae:da:51:74:8f:7c:a0:f9:a0:81:dd:02:d4:78:40:
                    ce:d4:13:75:c2:d6:2c:13:7e:22:90:01:07:3d:08:
                    fc:11:a3:46:f9:33:68:38:4d:19:2b:51:4f:19:b2:
                    b1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0E:D2:73:2B:16:49:DC:06:B4:5A:43:CB:D3:70:F2:7C:63:43:35
            X509v3 Authority Key Identifier:
                keyid:79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:f1:16:4a:3a:ba:38:67:ed:8f:71:0e:5e:a8:7e:28:26:19:
         08:29:58:4f:15:5c:4e:74:b9:e3:17:75:71:e0:a3:d9:8c:30:
         8e:ff:60:c4:31:ac:aa:2b:5d:f6:b0:37:6d:39:90:11:a8:5c:
         42:da:60:b1:14:ae:c9:38:e9:7a:13:21:b6:52:1b:ad:0d:04:
         04:d8:00:3a:7d:6c:f6:95:19:59:30:48:24:8c:ea:ad:60:57:
         fb:95:41:0d:0c:a8:91:3c:eb:ae:e1:5c:21:c5:96:fd:8c:23:
         c0:6f:ae:df:ba:c7:ad:57:47:3b:44:0c:d3:85:9c:2b:22:7f:
         0f:7a:b1:a2:73:c3:66:c4:f3:cb:99:c2:e3:5a:fd:37:4e:0d:
         e2:4e:e7:18:25:d1:d1:9c:16:33:93:15:f0:9c:5e:0d:3d:ec:
         5c:db:b1:02:c4:5f:7c:22:58:b7:60:41:d6:c6:44:33:17:94:
         9e:5e:14:b4:03:9c:47:e8:9b:16:0b:0d:98:c2:80:81:cb:53:
         51:ae:97:43:46:5c:eb:06:10:5d:e1:6e:a3:3d:3d:93:a3:5c:
         5c:c6:94:c0:8c:fb:f8:9d:31:7a:48:a9:4c:18:60:88:ba:d0:
         4e:f0:6d:07:54:85:c9:db:63:98:f7:a6:f7:11:31:f9:6e:4a:
         08:e3:a4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:33 2026 by rpki-client