Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
File:                     EdGfiLDcG4kCVNuUqbYgRta-eUs.mft (raw, json)
Hash identifier:          7IuVwBiEJuQa4hP0jaQThGK+Fqmcc2JtNxwh2KP04og=
Subject key identifier:   31:99:8A:6E:4D:D7:63:8B:D8:03:76:A7:49:CC:9B:3B:D3:3C:60:CE
Authority key identifier: 11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B
Certificate issuer:       /CN=11d19f88b0dc1b890254db94a9b62046d6be794b
Certificate serial:       0198530EC072D1A836B7292D91D1E93F7591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
Manifest number:          0B52
Signing time:             Mon 28 Jul 2025 22:02:12 +0000
Manifest this update:     Mon 28 Jul 2025 22:02:12 +0000
Manifest next update:     Tue 29 Jul 2025 22:02:12 +0000
Files and hashes:         1: EdGfiLDcG4kCVNuUqbYgRta-eUs.crl (hash: 1eS96jbe52NO60o/FEbWLEWzGZNaCIM8yRmrVoeaqgQ=)
                          2: iEka4Vv56ltOb2j3jT-ILWz-_Es.roa (hash: eHAQPRCUs+jzFQIPkgWCN2IRqlhuSuMwK3wcNPLkVsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 22:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:0e:c0:72:d1:a8:36:b7:29:2d:91:d1:e9:3f:75:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d19f88b0dc1b890254db94a9b62046d6be794b
        Validity
            Not Before: Jul 28 22:02:12 2025 GMT
            Not After : Jul 29 22:02:12 2025 GMT
        Subject: CN=31998a6e4dd7638bd80376a749cc9b3bd33c60ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:68:cd:db:62:97:ca:3b:4c:f3:bd:bd:6b:ed:
                    ab:a0:6d:07:b0:62:28:67:85:34:bc:e2:d0:07:17:
                    d8:63:df:3f:3c:83:98:d8:51:fd:71:02:ba:53:8f:
                    d5:1e:3d:ff:6f:84:9a:67:b1:49:9b:e7:e3:d7:4a:
                    08:c0:f7:58:12:4e:c6:35:07:30:2f:b3:0a:78:d0:
                    a5:84:34:2e:a9:f9:7b:36:3f:c3:88:fc:94:27:29:
                    6f:59:1a:37:f8:b3:89:f2:6c:64:68:f1:73:cb:32:
                    00:dc:e7:b5:9f:f6:3c:45:56:da:c9:53:74:7f:99:
                    ad:f5:ea:3b:9d:5d:41:a1:2e:61:b3:70:ce:d4:0e:
                    00:ee:09:e4:3a:c5:ff:4c:e0:14:92:b3:8d:20:e2:
                    06:37:1a:e7:39:4e:68:73:83:63:b1:62:f8:31:db:
                    16:88:ae:5a:b9:f5:2e:2f:b9:c6:95:b0:28:0e:20:
                    af:b0:aa:7c:c9:43:58:10:1d:f5:f8:32:dd:f6:3c:
                    5a:7e:31:ce:24:e0:45:29:1b:b3:1c:5c:86:f9:7d:
                    dc:ff:7e:f9:ed:06:b4:7b:5e:b1:05:68:40:af:5f:
                    ed:cf:e6:ae:fc:e1:5b:4b:d2:a4:72:b9:b3:a3:3e:
                    4a:88:76:dd:f6:db:91:3b:90:dc:83:dd:70:f9:bb:
                    89:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:99:8A:6E:4D:D7:63:8B:D8:03:76:A7:49:CC:9B:3B:D3:3C:60:CE
            X509v3 Authority Key Identifier:
                keyid:11:D1:9F:88:B0:DC:1B:89:02:54:DB:94:A9:B6:20:46:D6:BE:79:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGfiLDcG4kCVNuUqbYgRta-eUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b783c-9f59-4696-82c4-48b4955f0600/1/EdGfiLDcG4kCVNuUqbYgRta-eUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e4:74:9c:73:6c:a4:f2:78:68:c5:cf:58:62:53:c0:c3:1c:
         bb:cd:f4:72:54:c3:c7:74:f2:c7:5d:78:e9:cd:06:44:6e:c9:
         4e:05:d7:c4:d9:72:be:2c:b1:1e:0b:01:ec:fb:f5:df:5c:b6:
         30:98:a9:d2:68:3f:e5:b2:59:52:23:91:8b:87:40:7f:36:45:
         f2:df:2b:6b:fa:59:2c:c4:39:81:19:a7:0b:fb:03:ea:5e:45:
         a3:53:2a:d8:9f:53:cb:f4:b1:4b:47:70:2c:fb:17:b8:3a:1c:
         37:d4:e9:f4:bf:66:55:3c:e8:57:81:78:37:44:77:9b:26:c7:
         1b:df:b9:ae:21:2c:25:29:8d:c1:19:6b:06:d4:18:99:49:6e:
         63:e4:83:90:25:bd:8a:99:0e:b9:31:3e:6c:33:a2:65:0f:f4:
         b5:ff:a1:e5:cc:70:33:f0:ce:5a:a6:25:a1:d9:5b:c1:5c:7f:
         e1:cf:92:e3:5e:d2:97:7d:66:e0:02:b5:0c:bf:0e:2c:5f:66:
         24:b0:09:b4:84:80:fb:9c:61:df:3f:48:70:d7:29:29:b7:b7:
         25:7a:31:4f:fa:ca:47:64:3a:5f:43:68:49:d8:67:76:34:f0:
         52:73:88:be:84:cf:97:ef:da:15:dd:06:d2:17:18:81:19:8c:
         8b:28:8c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:38:57 2025 by rpki-client