Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
File:                     ePDYlQwP20Hf1XxZSCglIGEcFsM.mft (raw, json)
Hash identifier:          pAzilkzNFDktlrBbhZDWkq2H8JGaGyWb6Mwn5TiNJrc=
Subject key identifier:   61:3D:76:62:A2:8E:15:CF:E9:90:2F:78:0D:1F:70:43:E1:74:64:3F
Authority key identifier: 78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3
Certificate issuer:       /CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
Certificate serial:       0198D54DD7B5764DD5707D8AC4E43419E3F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
Manifest number:          0459
Signing time:             Sat 23 Aug 2025 05:01:45 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:45 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:45 +0000
Files and hashes:         1: ePDYlQwP20Hf1XxZSCglIGEcFsM.crl (hash: S0w5b2OVtdc60J1ersxRjnCYl9w1Utiajb/SU/i1uK4=)
                          2: uI19goGgOdv56r27gyNLoOu7fK8.roa (hash: aRMcCZp6MU/f16sSAZBSSpBFMChXSvZTJUWHCtQ3+qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:d7:b5:76:4d:d5:70:7d:8a:c4:e4:34:19:e3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
        Validity
            Not Before: Aug 23 05:01:45 2025 GMT
            Not After : Aug 24 05:01:45 2025 GMT
        Subject: CN=613d7662a28e15cfe9902f780d1f7043e174643f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:89:17:de:93:a1:e3:ec:14:94:da:70:98:
                    52:9a:33:a8:01:3f:33:47:82:71:3c:03:93:95:45:
                    64:7d:25:37:46:b1:62:d9:1e:ef:e5:a4:ae:96:c8:
                    64:46:b2:81:14:34:06:53:f8:e0:9f:d3:2e:2a:64:
                    9a:87:e2:7a:92:b4:25:5b:0d:d7:60:36:39:0a:e1:
                    03:be:55:51:e0:4f:f0:aa:93:37:a7:4c:fd:ed:ec:
                    67:5a:fe:54:10:1e:c2:e8:91:06:77:df:0c:2b:ae:
                    81:ff:5b:a5:01:f8:bc:c2:cf:68:3d:5b:ec:e6:fc:
                    26:39:3a:5e:e3:94:04:2f:cc:28:5b:8d:67:72:6b:
                    fe:34:ed:aa:4e:57:01:00:d9:fa:a4:13:b5:b7:fc:
                    1b:51:96:20:c1:aa:0c:ae:69:a3:59:5f:a5:e9:12:
                    a9:f3:75:ca:66:02:eb:ea:56:9f:70:69:6d:f2:6c:
                    43:54:69:29:4d:d5:1e:b0:ca:9d:f6:11:44:ba:87:
                    71:46:77:a1:7e:f7:ca:67:2b:b2:39:44:ce:ba:a1:
                    8d:4f:6e:28:68:bd:b4:e6:dd:21:48:37:de:97:0a:
                    4e:21:58:10:6c:bd:27:83:7b:ed:ff:a4:93:6c:83:
                    b1:2f:3b:22:58:d1:cc:c4:35:2c:07:f8:24:f7:14:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3D:76:62:A2:8E:15:CF:E9:90:2F:78:0D:1F:70:43:E1:74:64:3F
            X509v3 Authority Key Identifier:
                keyid:78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:bf:f5:ea:8b:2a:52:79:7a:d6:74:e0:5c:b3:fa:4a:e1:58:
         09:78:2f:d6:2a:66:c8:44:7a:4e:49:67:e8:dc:d3:bb:7c:c3:
         a6:ab:fd:b2:fb:d0:49:43:c2:31:af:2e:b1:5d:16:04:1a:55:
         61:fc:6c:4e:61:88:3a:11:95:24:68:85:ec:ff:45:98:04:df:
         2f:c3:66:48:be:40:8d:38:cb:46:fd:bf:32:14:81:dc:82:bd:
         22:6e:b1:da:90:20:05:e4:12:0f:24:e7:68:69:32:24:67:9f:
         9f:d3:a5:40:13:17:7f:f8:0f:e2:e3:49:d7:af:e3:9c:fa:71:
         4b:65:fd:77:0e:de:7a:e1:6e:1b:7b:7c:aa:d5:8d:1a:86:b4:
         59:75:86:35:1b:d6:ce:e9:7a:e8:2f:d3:4c:30:b8:03:16:a5:
         ef:29:47:e7:59:7b:a2:14:a6:e5:3a:61:7a:55:5c:af:47:3a:
         df:17:42:b7:cb:40:39:2c:07:20:8e:5c:70:46:9c:0b:d9:aa:
         53:9e:3f:03:9d:eb:e3:16:00:f7:c7:67:4f:f7:0e:3a:f9:6b:
         4f:17:16:4b:1b:18:b3:6f:82:ad:1b:35:07:2a:58:42:6a:3b:
         a6:36:6c:8c:b7:11:b4:fe:00:d2:68:6b:f0:9c:ac:44:52:39:
         27:b8:87:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:39:57 2025 by rpki-client