Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
File:                     7edmLVl_r8lt12VXdQjD7QKdZWc.mft (raw, json)
Hash identifier:          26EkopPuhogylH3FvBCKeXd1twg8HCKW9saxeVXqklw=
Subject key identifier:   4B:B4:EB:F9:2F:7B:D3:A4:D9:60:25:17:20:E8:E9:C3:55:80:82:65
Authority key identifier: ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67
Certificate issuer:       /CN=ede7662d597fafc96dd765577508c3ed029d6567
Certificate serial:       01984BC21692623167F6F0CBAD5B4711A248
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
Manifest number:          1602
Signing time:             Sun 27 Jul 2025 12:01:07 +0000
Manifest this update:     Sun 27 Jul 2025 12:01:07 +0000
Manifest next update:     Mon 28 Jul 2025 12:01:07 +0000
Files and hashes:         1: 7edmLVl_r8lt12VXdQjD7QKdZWc.crl (hash: SPMkkn6oT/bTJxdvyK8k/QoojBlbwOZZotWTW8zcfa0=)
                          2: FQLYEgJnBcxXVB0fnnabFYqwVJ4.roa (hash: V3224FLOv1W7X3uBW6dltktQIsCoHudHe1QUTyJjYBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 09:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:c2:16:92:62:31:67:f6:f0:cb:ad:5b:47:11:a2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede7662d597fafc96dd765577508c3ed029d6567
        Validity
            Not Before: Jul 27 12:01:07 2025 GMT
            Not After : Jul 28 12:01:07 2025 GMT
        Subject: CN=4bb4ebf92f7bd3a4d960251720e8e9c355808265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b0:b2:0c:5b:bf:33:aa:ab:72:19:14:b0:46:
                    a3:e1:b1:99:d9:b7:37:09:b8:aa:27:6a:fd:48:f1:
                    01:11:2f:33:ff:83:ea:ec:66:f0:70:00:9e:4e:3f:
                    1a:95:45:f3:4f:6c:16:57:45:47:1d:38:77:dc:87:
                    5e:d8:8d:eb:65:e4:3d:10:50:ac:4a:50:ed:ce:fe:
                    78:25:ad:28:a2:c2:42:0b:05:20:d0:f0:2b:af:af:
                    88:b8:42:da:37:85:04:36:ce:96:1d:f7:e4:4b:76:
                    8c:7d:20:b6:61:ad:56:61:11:2b:90:91:5b:ef:2a:
                    ac:13:3e:94:45:6a:a5:46:a5:4e:4e:1b:6a:fd:84:
                    d5:1f:0a:82:f9:db:d6:ce:0b:f5:f6:da:1b:31:ae:
                    13:1b:f0:ab:c9:1a:ca:79:7d:41:ee:4c:08:64:0f:
                    8f:98:20:b4:5a:da:05:20:f5:c7:7a:f9:4a:8f:7d:
                    01:18:be:94:9e:15:d2:e7:fa:6b:31:38:6d:8b:24:
                    77:c2:d0:d4:52:0e:47:73:f5:fe:6e:05:6f:a3:ae:
                    71:d1:77:f0:aa:ab:33:20:ea:1f:22:94:f2:b2:a7:
                    40:46:0e:25:92:55:de:19:0e:67:b9:51:1c:42:aa:
                    18:04:40:0f:11:e4:32:0f:43:a2:7c:0d:7b:2e:c2:
                    ad:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B4:EB:F9:2F:7B:D3:A4:D9:60:25:17:20:E8:E9:C3:55:80:82:65
            X509v3 Authority Key Identifier:
                keyid:ED:E7:66:2D:59:7F:AF:C9:6D:D7:65:57:75:08:C3:ED:02:9D:65:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7edmLVl_r8lt12VXdQjD7QKdZWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2dce04-747a-4a4d-96a2-d357f5aeeb85/1/7edmLVl_r8lt12VXdQjD7QKdZWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:97:7a:01:79:fc:83:4a:aa:fe:cc:29:49:05:93:46:9f:8d:
         9f:10:44:d8:d4:48:f7:40:f7:5e:67:7f:5e:90:6b:49:0b:d5:
         43:3d:41:0b:b8:2d:b2:e9:c4:7d:7c:1c:4c:7e:4c:65:e4:ab:
         bf:43:12:4f:4b:2f:71:47:c7:17:ef:ee:a4:68:d2:a2:46:10:
         85:04:aa:73:94:b6:45:c0:16:4b:be:6c:16:8d:2b:b8:cf:a9:
         1a:8a:81:b7:4e:9f:d8:37:a3:59:8f:2d:22:78:75:00:1d:b2:
         46:6a:4a:11:00:3b:9d:af:eb:42:f6:e0:48:42:b5:a0:00:03:
         a3:ca:2f:6c:45:29:c1:03:1b:66:d3:f8:17:0a:7a:fd:f9:d6:
         72:ca:5e:89:23:c0:73:c9:bf:2e:ea:e0:47:97:d3:a5:2e:b3:
         5e:39:73:90:30:83:59:60:df:ae:ea:21:72:7d:b1:6b:10:76:
         6e:c4:51:53:31:95:5a:c1:40:b3:33:5a:78:fd:d2:1a:a8:b4:
         b0:05:c0:d4:9c:f5:1a:0b:53:12:74:25:81:ce:a2:77:8a:76:
         b3:b5:6d:33:03:76:aa:87:79:43:ad:dd:df:64:6c:f6:04:b8:
         9f:ca:c3:1e:70:ce:35:74:03:65:77:e6:ed:bd:f5:7d:90:b7:
         86:ba:a4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 18:38:53 2025 by rpki-client