Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
File:                     eDdfthaLNUhBuR0wX50M3AyxUB0.mft (raw, json)
Hash identifier:          x1xCZBF7PGdAM+o/7cYRvc2uQd0F5EmuCEghM95RNLA=
Subject key identifier:   25:6D:BE:B7:75:09:C7:3E:40:30:23:08:1C:09:5C:99:53:40:72:95
Authority key identifier: 78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D
Certificate issuer:       /CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
Certificate serial:       0197B820C764B6A0FCF0D98F1703FD7E609B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 20:00:45 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:45 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:45 +0000
Files and hashes:         1: eDdfthaLNUhBuR0wX50M3AyxUB0.crl (hash: PDIG6hTKpKp2SEcK9ndroc2zG6969AhHafZoitiYKlY=)
                          2: yISIjc9YgTnf71Z4E-nlNbitu7U.roa (hash: LtZh6f0jmex3FPPUw/azkOX7onGzwYw39L6cN+bX6NE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:c7:64:b6:a0:fc:f0:d9:8f:17:03:fd:7e:60:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
        Validity
            Not Before: Jun 28 20:00:45 2025 GMT
            Not After : Jun 29 20:00:45 2025 GMT
        Subject: CN=256dbeb77509c73e403023081c095c9953407295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6f:8f:e0:68:d0:0e:ba:37:e9:85:ec:54:7e:
                    77:f0:72:ee:7c:0d:43:01:06:19:79:db:cb:b2:2a:
                    1d:3a:52:72:e9:9e:3e:fa:e8:8a:90:09:eb:55:11:
                    6c:cc:66:6a:a0:1d:07:eb:81:2c:9a:88:d8:fb:3a:
                    c6:71:92:2e:5d:46:26:2a:06:e9:5b:e0:61:f8:bb:
                    40:61:1e:56:38:f5:2f:e2:68:ec:97:aa:fa:93:49:
                    08:c7:db:9a:c2:ec:81:f7:de:9f:bb:40:f6:a6:71:
                    26:27:4c:95:1d:f0:55:fc:ac:07:75:f3:1f:ec:06:
                    98:fb:b3:ab:ac:d2:e3:c5:22:7b:80:07:07:03:24:
                    ad:b5:91:d2:5c:c2:e4:80:db:28:7f:d8:8f:53:e2:
                    f7:b4:6d:b9:15:d6:ec:77:e7:c1:55:52:23:23:e7:
                    72:58:ee:8a:2c:e2:ed:ff:d2:3c:5e:c4:9a:d4:fb:
                    d3:82:72:ef:7b:cf:d6:84:83:ee:82:15:d7:86:01:
                    85:2c:6e:90:62:bc:16:82:90:d7:c3:8b:24:61:8a:
                    cf:4e:12:53:14:ba:29:05:36:e2:7c:01:16:53:6e:
                    0e:b3:18:cc:63:7d:ec:aa:02:fe:d0:c9:56:4b:24:
                    3b:f7:89:11:dc:df:54:76:ad:9c:ee:8b:4b:60:e4:
                    dc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6D:BE:B7:75:09:C7:3E:40:30:23:08:1C:09:5C:99:53:40:72:95
            X509v3 Authority Key Identifier:
                keyid:78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:cd:8a:04:05:33:72:91:06:3c:82:33:ff:0a:b0:da:b0:c2:
         0a:8a:5f:92:bd:71:dd:79:6c:34:98:8b:a3:a6:74:bd:d2:74:
         bd:e9:6c:e1:a9:f2:c6:0b:bb:3c:8f:96:52:76:54:3d:b3:72:
         16:02:3d:6f:21:77:aa:0a:ac:58:5b:e4:0f:1d:0d:81:29:80:
         0c:63:f2:fc:4b:f1:3e:e4:71:5b:6c:84:5b:a2:81:ba:2c:79:
         32:99:af:3f:ec:aa:2a:0a:03:f5:45:14:6d:4e:00:3d:56:81:
         67:ce:29:2e:45:6d:3a:58:e8:5f:34:96:68:9c:13:b6:a0:cd:
         05:f3:d3:a6:7d:54:91:18:b6:b7:ac:1a:a4:ff:b2:65:f6:63:
         f3:4c:30:a9:09:1f:21:af:10:5c:08:69:f2:3c:9c:f2:a5:06:
         66:6a:07:82:d5:6e:de:43:34:1b:32:72:d4:0d:ff:9a:f6:cc:
         6b:55:96:0b:7c:16:bd:c4:88:4f:52:ff:29:3d:2c:66:96:3c:
         ae:6e:81:11:e5:4e:95:09:f5:84:b5:70:56:bb:4f:76:b6:59:
         62:ea:6e:33:65:1a:f3:cd:7f:c0:3c:0d:a9:6b:93:ff:a1:3f:
         30:0f:4a:bd:6e:3f:6d:3b:5b:fa:ab:8a:47:49:a9:ea:0f:89:
         f4:75:ba:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:12 2025 by rpki-client