Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
File:                     edEPco1kmadJrlkC6PqIPxrdRRc.mft (raw, json)
Hash identifier:          HqhAO8CvbV4mBk7IJ/mGjsnluQwzFAg1yL+lmXjW+oc=
Subject key identifier:   7C:A7:2A:67:90:A0:10:B7:26:5F:55:18:31:49:D2:7A:A0:91:53:5C
Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
Certificate issuer:       /CN=79d10f728d6499a749ae5902e8fa883f1add4517
Certificate serial:       0199FAD7D576E7B76A2EDFB6321A8262C1A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
Manifest number:          1203
Signing time:             Sun 19 Oct 2025 05:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:12 +0000
Files and hashes:         1: TYJYGhUdPQj6nUzCCLnr49eyuJI.roa (hash: FFOiY72wCTLfd9O6jpfQiklPE7rmHUgalP7Yo7iSGDQ=)
                          2: edEPco1kmadJrlkC6PqIPxrdRRc.crl (hash: D4OqP/Nf3HhmFCWZrQo43AI0lNhIGjCwIueUYWLD8uE=)
                          3: hAlLG94IoU5kKafsGjrMwkfb3Zw.roa (hash: ln0Y8HQZmVKSWnd47yKAygvb/rzeGv9K49zzh8vw+ME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:d5:76:e7:b7:6a:2e:df:b6:32:1a:82:62:c1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517
        Validity
            Not Before: Oct 19 05:01:12 2025 GMT
            Not After : Oct 20 05:01:12 2025 GMT
        Subject: CN=7ca72a6790a010b7265f55183149d27aa091535c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:85:0b:73:ce:95:db:26:d6:ab:32:66:0c:be:
                    c3:34:02:87:c3:d2:ac:c8:8a:94:9b:60:a9:86:94:
                    72:5c:6d:49:c7:54:f9:30:2f:0b:e6:e8:42:01:96:
                    76:10:9a:88:4a:95:c1:e3:ae:6c:45:8e:fb:1c:4e:
                    bb:f9:ac:36:2f:5d:c5:d5:ed:92:c6:bf:07:ce:f1:
                    e0:4d:0b:9c:e8:ea:82:7d:35:53:25:54:6d:13:83:
                    76:7e:a2:db:a2:2f:b8:a8:bf:24:dc:b1:f6:4b:df:
                    d3:0b:8d:55:b4:07:e5:8b:5f:00:57:f3:86:d9:08:
                    a1:6c:82:69:4c:00:56:6f:fa:a8:7d:60:f4:d3:45:
                    07:5b:1f:cd:ca:9c:46:6c:70:71:e9:56:87:69:08:
                    02:ad:46:0e:dc:be:ea:69:1e:1c:3f:60:06:56:bf:
                    5c:48:96:51:3f:9b:35:45:ba:4f:5a:06:98:c1:45:
                    41:5f:0a:fd:67:9c:07:bb:64:1e:76:52:db:f7:b2:
                    a7:d8:48:ec:7c:35:cc:0a:0c:ea:b4:a0:56:f2:2d:
                    55:aa:ec:10:48:40:3d:27:48:85:ee:2b:1e:25:13:
                    17:d8:b6:75:8d:71:68:92:0a:78:0f:ae:79:e7:a0:
                    bb:1e:ca:e4:b7:3e:2e:c0:fb:94:2b:e3:46:67:64:
                    44:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A7:2A:67:90:A0:10:B7:26:5F:55:18:31:49:D2:7A:A0:91:53:5C
            X509v3 Authority Key Identifier:
                keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:2f:be:17:ae:e2:6c:90:46:69:fa:3d:96:0b:7c:7b:f9:69:
         12:4e:03:02:14:41:28:90:02:7b:0d:fb:21:cf:b6:6f:69:e0:
         6f:12:dd:f8:8b:3d:c8:92:5d:34:8d:e4:43:92:83:04:3a:e6:
         ce:45:3e:c2:69:fc:bd:52:25:97:2f:4a:2f:11:33:8f:c4:e0:
         5f:9b:23:40:88:fa:9c:b4:96:2e:51:43:23:23:c0:6b:dc:47:
         73:b0:2c:e5:dd:ef:bd:28:44:73:5b:e3:44:7f:27:6c:87:c5:
         94:6c:b2:94:e3:70:14:c8:14:e0:fe:f0:df:17:86:fc:c8:f6:
         81:bd:72:d5:a9:d0:53:06:a5:00:0b:0f:10:55:05:69:74:7c:
         17:3c:ca:9f:da:4a:57:ea:2e:71:fb:82:fd:1f:dc:53:ab:89:
         6b:c8:40:98:e1:ca:aa:14:72:e9:7c:66:7f:cb:9f:5a:ac:e4:
         1d:5d:57:95:e5:1e:3c:1d:9f:a5:df:64:c4:96:a2:91:19:71:
         c8:ae:f6:3a:11:f4:c0:8d:ce:57:45:82:cc:03:d7:48:1e:37:
         a3:aa:fc:8f:2c:00:6b:6f:29:57:f0:00:b0:ca:5f:fd:be:6a:
         db:ca:55:b9:63:35:f9:75:46:d5:4c:d5:6f:57:53:1a:48:ff:
         15:84:34:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:45 2025 by rpki-client