Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
File:                     eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft (raw, json)
Hash identifier:          UnNJwkWSlCJZ0G4hnMEy5CIdRK0OtCMc4JYBe3K69+Y=
Subject key identifier:   80:C5:4E:65:C6:F1:17:EE:0D:7B:DA:62:FF:57:5E:C5:D7:DA:07:6A
Authority key identifier: 78:34:A7:5D:F5:05:64:7C:7F:50:7D:84:C2:E2:40:E9:19:FE:CB:25
Certificate issuer:       /CN=7834a75df505647c7f507d84c2e240e919fecb25
Certificate serial:       019849D2D38A262145081DDD6AA0C5801B9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
Manifest number:          C8
Signing time:             Sun 27 Jul 2025 03:00:10 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:10 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:10 +0000
Files and hashes:         1: eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl (hash: x12tJVXmq2CVAPQtQQ+7SKDPFyftMCPgizJxhy645DQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d2:d3:8a:26:21:45:08:1d:dd:6a:a0:c5:80:1b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7834a75df505647c7f507d84c2e240e919fecb25
        Validity
            Not Before: Jul 27 03:00:10 2025 GMT
            Not After : Jul 28 03:00:10 2025 GMT
        Subject: CN=80c54e65c6f117ee0d7bda62ff575ec5d7da076a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:ce:a7:bd:6f:7d:bd:97:e9:ce:ec:42:c1:
                    32:7d:fe:f4:8c:4a:eb:c4:45:b3:8a:0b:09:19:a9:
                    6f:d6:35:2f:1a:c8:f0:0b:8b:81:be:91:63:6d:1c:
                    b5:b3:fd:8b:6c:9d:5f:fa:5a:0c:86:cf:eb:f0:cb:
                    70:e5:04:4f:0c:a6:63:cc:3d:73:29:54:8f:74:14:
                    3a:26:53:2f:c7:48:6c:90:6f:f6:e5:0f:d7:09:6f:
                    a1:e9:ba:92:e3:4e:bf:62:cf:4b:37:ab:20:d2:e2:
                    99:96:a2:11:e2:ef:c0:f2:ab:67:5e:7d:16:7c:ca:
                    99:e6:e9:ce:c3:37:84:5f:48:94:98:9b:e7:f6:78:
                    bf:75:4e:96:7a:b7:57:6b:e8:95:b2:e3:9e:7c:f7:
                    8d:e6:a7:e7:6a:d9:4d:ae:74:93:22:da:63:9f:a5:
                    25:4c:d5:36:66:c1:80:25:b2:56:a4:01:3b:6d:c4:
                    db:44:5d:57:e1:5f:50:81:2d:fc:b5:0d:e9:ab:1f:
                    a0:e1:4f:f9:5f:47:f1:40:35:1f:54:6f:07:18:bf:
                    26:41:c5:14:92:1b:c5:53:35:af:ed:3e:e5:54:0e:
                    75:4e:9a:db:4d:46:c6:80:d1:2c:11:e9:09:4c:15:
                    1d:d0:41:a5:cd:e6:b2:29:fa:bc:d6:34:bb:3c:f5:
                    9d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C5:4E:65:C6:F1:17:EE:0D:7B:DA:62:FF:57:5E:C5:D7:DA:07:6A
            X509v3 Authority Key Identifier:
                keyid:78:34:A7:5D:F5:05:64:7C:7F:50:7D:84:C2:E2:40:E9:19:FE:CB:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:14:5e:a6:7d:cb:46:11:8d:4b:37:ec:eb:e0:73:52:07:f2:
         4a:35:32:58:cf:c7:8a:f2:a2:3a:c9:ef:c8:79:54:c7:29:24:
         08:c4:50:72:6b:65:ed:e0:d4:28:c5:77:34:65:d4:5b:85:5a:
         28:98:4f:6d:fb:5a:22:85:93:a7:2a:d2:c7:6a:2f:35:20:92:
         fb:50:1e:de:63:ba:5e:60:d6:6c:46:7d:06:f9:6b:dc:49:2f:
         fb:31:4a:97:68:86:d9:95:63:16:08:6a:67:6a:d2:36:18:88:
         e2:be:c7:fb:93:c8:8a:74:d5:a6:a8:0f:5e:f9:4a:29:46:95:
         2a:b4:98:3d:f5:8c:f0:69:55:5d:e6:d6:0c:52:9e:c1:b5:6f:
         17:e1:b7:bc:89:8c:f0:de:b9:21:a6:c1:af:7a:08:5f:7a:d3:
         8a:fe:91:6f:91:4d:69:1b:1b:c6:68:eb:f6:cf:cc:f8:eb:9d:
         3c:f9:cf:6d:09:73:d1:40:4c:29:b9:27:3e:1d:1c:65:4d:a7:
         bf:17:a6:ff:69:44:1a:45:d8:ed:a5:74:cb:ad:5c:34:33:b3:
         6e:3d:cf:25:aa:63:30:44:4e:41:3a:84:fb:05:56:74:b5:e7:
         30:47:0e:34:44:43:90:99:ce:0c:e4:ec:99:6b:23:c9:9c:98:
         43:8e:48:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:08:43 2025 by rpki-client