Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
File:                     EDfew086MutlAvFmKoKiD4teohw.mft (raw, json)
Hash identifier:          iJ9ivz5jcjcJPjGSgDMf2RRS7i23NXUw2UWS1mdPR08=
Subject key identifier:   6D:F9:D4:57:93:1A:3D:60:31:02:0B:75:E2:D0:F7:0A:BE:DA:06:A8
Authority key identifier: 10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C
Certificate issuer:       /CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
Certificate serial:       019847E52B521E6CB6C95B7E6A3362406311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
Manifest number:          15FE
Signing time:             Sat 26 Jul 2025 18:00:57 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:57 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:57 +0000
Files and hashes:         1: EDfew086MutlAvFmKoKiD4teohw.crl (hash: Jz60AIkRE+3DIyYoNEJ1yEqnqM80JMrk66p3TN7/kOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e5:2b:52:1e:6c:b6:c9:5b:7e:6a:33:62:40:63:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1037dec34f3a32eb6502f1662a82a20f8b5ea21c
        Validity
            Not Before: Jul 26 18:00:57 2025 GMT
            Not After : Jul 27 18:00:57 2025 GMT
        Subject: CN=6df9d457931a3d6031020b75e2d0f70abeda06a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d3:d4:73:c1:07:6b:bc:ff:d5:4b:49:09:3a:
                    03:96:84:e5:0a:b6:cc:14:22:00:b4:c7:ef:ea:22:
                    9b:85:cc:c7:f7:19:1b:8f:3c:da:71:b4:66:cd:43:
                    8f:91:ec:57:11:dc:d4:e5:92:a2:ba:f2:ab:3c:42:
                    ff:13:31:0d:87:d9:b6:8b:d9:89:2f:63:d5:fd:9e:
                    0f:94:89:e1:56:30:d9:92:20:db:02:46:c5:ef:b9:
                    0d:45:9a:d5:9e:8f:3e:0c:d0:ef:8c:60:d3:42:c8:
                    7b:d6:c9:c2:bf:d4:4e:05:fa:b4:0e:c1:69:49:30:
                    dc:ed:ed:e6:b4:e9:f1:54:1a:7f:be:15:81:6a:7f:
                    43:fb:7a:36:11:ec:10:96:27:1a:21:50:ca:13:ca:
                    64:42:38:28:79:7c:52:d0:82:a1:fa:96:92:78:4a:
                    5f:30:16:7a:e5:90:aa:23:2a:5e:78:1b:83:38:26:
                    28:fa:30:f6:af:c0:8b:71:08:99:be:99:a0:6c:49:
                    a6:53:c4:ee:eb:da:ed:e5:9c:3a:30:93:d1:54:1f:
                    51:03:57:79:3e:d2:93:98:50:66:d4:82:42:91:74:
                    2b:0c:a7:6e:ef:8a:a4:62:e3:15:16:11:c4:b4:fa:
                    fd:8e:ba:94:67:a5:3a:61:7b:bf:02:0b:e6:1a:77:
                    4a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F9:D4:57:93:1A:3D:60:31:02:0B:75:E2:D0:F7:0A:BE:DA:06:A8
            X509v3 Authority Key Identifier:
                keyid:10:37:DE:C3:4F:3A:32:EB:65:02:F1:66:2A:82:A2:0F:8B:5E:A2:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDfew086MutlAvFmKoKiD4teohw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b680af-d5ab-4b2f-a837-0d41a64e90ec/1/EDfew086MutlAvFmKoKiD4teohw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:39:e9:d8:15:5e:8a:6d:15:71:e4:0b:8d:02:c5:5d:14:49:
         6d:e7:b4:45:8f:87:fe:4c:60:a5:81:3d:01:57:b9:ce:73:e6:
         af:82:30:d2:b9:bb:5d:cf:b2:29:5b:ef:22:95:15:a1:c2:97:
         a1:6a:3e:f4:ac:94:f4:62:0f:91:5d:c5:28:ad:ad:e3:af:99:
         f6:86:7b:e7:ce:b1:4a:66:b2:76:a8:75:68:e5:a1:68:44:89:
         a3:a7:09:e4:52:60:b1:6b:4f:cc:13:b9:0c:23:0a:0c:3b:80:
         ee:d5:4b:54:5d:0f:c3:b2:e9:88:9b:88:6e:9e:25:73:f8:6d:
         42:88:3e:68:73:c0:20:bd:f6:17:6e:4d:a3:23:48:d8:fa:a3:
         7e:03:06:47:9e:ce:95:11:aa:e1:63:3f:fb:ef:17:2a:44:5f:
         eb:5c:de:ef:cd:74:d8:e6:5e:3d:28:d2:6e:90:51:49:ff:d3:
         76:03:4c:2a:49:b1:73:07:a2:0a:07:fb:8c:83:28:57:42:95:
         8a:27:94:a7:1f:1e:89:cc:67:f6:62:e5:b9:22:0c:2b:43:57:
         4b:0b:6c:81:54:11:c3:85:f3:a2:bd:60:f5:22:23:7a:e9:d6:
         f3:86:d1:ba:e1:53:09:45:37:51:63:d2:57:0c:ca:a9:e9:2a:
         11:05:71:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:23:36 2025 by rpki-client