Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
File:                     EdJ3EZBuQdC_164BvAo40-eeJgE.mft (raw, json)
Hash identifier:          RX6odUkl3b44DHAAoveYnzYHwzR2hUB+722cUZv9VS0=
Subject key identifier:   06:62:76:31:1C:3C:6A:E8:3D:56:6A:70:EA:04:5B:B8:8C:B2:38:5B
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Certificate issuer:       /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial:       0197B70F4F464E1BC9E84259CBBC3862F962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 15:02:03 +0000
Manifest this update:     Sat 28 Jun 2025 15:02:03 +0000
Manifest next update:     Sun 29 Jun 2025 15:02:03 +0000
Files and hashes:         1: 2RYqLOOOCbthDUAcjKq8EsDLRUQ.roa (hash: Q1LOM4u7XAO8escJ6IGTLdV2wb9RNCfCJR9rh+j96Ys=)
                          2: EdJ3EZBuQdC_164BvAo40-eeJgE.crl (hash: uw7d1uK7jIsvXXZi/xT7QpxoIO/8dnyRnw1WlneJQmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:4f:46:4e:1b:c9:e8:42:59:cb:bc:38:62:f9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
        Validity
            Not Before: Jun 28 15:02:03 2025 GMT
            Not After : Jun 29 15:02:03 2025 GMT
        Subject: CN=066276311c3c6ae83d566a70ea045bb88cb2385b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ff:d2:22:00:ae:58:dc:4a:d0:7e:af:52:60:
                    e6:bd:c6:e5:a8:06:9b:24:d8:8f:1b:18:bb:f9:88:
                    71:f7:dc:87:23:1f:ae:e4:a4:20:ce:d2:7a:3d:6c:
                    12:16:ed:23:7c:ab:fc:7a:31:7c:9f:3c:1c:2b:ea:
                    7b:2d:2a:de:70:16:c3:90:94:74:05:2a:c3:83:dd:
                    87:8a:e4:31:28:4f:9b:03:c8:7d:75:46:48:58:7d:
                    c9:53:da:c1:7f:13:08:00:7e:04:d4:04:7c:c0:c8:
                    cf:93:8a:d2:ff:02:96:0f:f2:e1:51:d6:58:a9:bf:
                    ce:a5:74:20:37:0b:a7:99:04:6d:7c:01:f2:3a:13:
                    c0:32:23:12:66:87:b9:e5:1c:a5:0a:4e:f1:0d:2d:
                    6c:ae:9a:6d:ac:94:f1:3f:a2:3e:d9:48:2f:6b:dd:
                    da:4a:70:ae:eb:11:86:83:31:9a:31:54:9a:c5:b0:
                    d0:28:a1:93:86:23:44:2b:12:43:74:90:d5:22:82:
                    73:33:b0:52:51:e7:2a:4a:aa:17:44:f6:36:ad:45:
                    fb:be:24:a1:0f:30:7c:a6:31:ec:be:44:bc:a5:68:
                    9b:75:74:0f:f3:e2:a7:6e:59:c2:d6:a8:79:0a:0e:
                    45:1f:dc:61:ea:af:cf:19:aa:37:15:3d:5d:df:55:
                    dd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:62:76:31:1C:3C:6A:E8:3D:56:6A:70:EA:04:5B:B8:8C:B2:38:5B
            X509v3 Authority Key Identifier:
                keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e0:57:d5:98:1f:30:05:94:03:18:ac:e8:b5:ef:bd:d4:00:
         e8:39:cb:96:ba:f2:be:0d:44:86:ae:26:2e:81:c5:2f:8d:a7:
         d1:8b:9d:98:68:a5:02:01:fe:9b:6b:da:56:6c:cf:75:0c:94:
         2c:17:99:de:de:0a:89:47:27:eb:0b:d0:22:e4:73:1c:db:96:
         c7:e7:b4:eb:81:4a:de:dd:ad:64:30:0b:aa:c3:f6:05:52:2f:
         76:06:4a:3f:be:9a:7d:9d:68:61:a1:17:72:84:e8:d1:67:bd:
         4e:78:a3:0c:a5:1f:f7:7b:c1:9d:f5:0e:9b:9a:f7:57:56:07:
         35:57:56:13:a1:5f:36:fe:c7:ea:c1:e8:db:64:c1:ed:6d:c0:
         0e:aa:e7:12:f9:51:65:48:96:9f:55:01:c9:dd:e9:a7:71:e3:
         cb:cc:50:07:87:1b:f3:07:f9:3c:a9:a7:85:f5:ba:37:b8:62:
         f5:1d:08:88:5d:ec:40:f7:4f:b3:d6:a4:8d:fb:11:17:33:4f:
         31:35:fd:8e:c5:17:b1:67:d9:60:57:44:00:cd:66:cd:38:be:
         b4:3c:47:09:b4:d4:43:d0:02:f4:dc:e8:03:f7:60:5e:9d:dc:
         a8:20:5e:93:cb:86:78:7c:54:c6:75:66:26:8f:4e:3e:f8:db:
         a7:f3:ca:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:28 2025 by rpki-client