Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File:                     edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier:          +7eZuIaskAD62fvcGgeMhNdEbupoM2TNnmejBN09xWo=
Subject key identifier:   14:06:66:77:63:AC:C2:E4:B4:90:BD:3E:D7:EB:8E:87:FD:5F:08:03
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer:       /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial:       019A24E5A93D0A43753A65326B05B4181C40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number:          0E1B
Signing time:             Mon 27 Oct 2025 09:00:22 +0000
Manifest this update:     Mon 27 Oct 2025 09:00:22 +0000
Manifest next update:     Tue 28 Oct 2025 09:00:22 +0000
Files and hashes:         1: EG5pUxGfwAIBOHWhSA_u40Ull48.roa (hash: j9AIedWxUThIEjIiNQ9a0XQAYjd/0yxU1No/HAT1wlg=)
                          2: EIlKz_yGKgG9o6LgyJUb5CYuXik.roa (hash: 7XI12BZ8oMxeo0lKGJtUxLNV8B1NZwQt+C2hSEvkeaU=)
                          3: eZbyMOXwsT8DM_J58p4lb08NYAk.roa (hash: /WC96WsqKWPbAIxaI0PJMY/euc4BODG5VIUj9O8Scw8=)
                          4: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: RP4Atdfe+GPKVVhaK7DHXM/E5Cgr2gaZZXd8rQpq0j4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 08:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:24:e5:a9:3d:0a:43:75:3a:65:32:6b:05:b4:18:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
        Validity
            Not Before: Oct 27 09:00:22 2025 GMT
            Not After : Oct 28 09:00:22 2025 GMT
        Subject: CN=1406667763acc2e4b490bd3ed7eb8e87fd5f0803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f6:cf:cc:ca:c8:46:b1:ae:79:90:19:64:d8:
                    a8:4c:10:0e:61:60:7c:a1:d2:f9:79:d4:65:92:0f:
                    0c:30:5f:e6:ec:b5:9b:85:aa:08:36:1b:bd:be:4d:
                    65:f1:1b:df:1b:05:c5:66:18:38:7a:a6:91:9b:5b:
                    e6:09:92:4a:0f:52:59:44:a3:1a:0b:0a:c5:93:40:
                    6a:f8:7b:31:c2:31:c4:a2:4e:f9:72:4b:02:06:89:
                    97:bb:c8:0c:ea:d4:79:56:f7:5b:79:c7:e5:fc:1a:
                    f8:84:df:14:2a:79:a6:44:28:85:59:71:3b:28:ac:
                    74:87:e4:a4:f4:65:63:d2:54:5f:93:c4:46:60:c9:
                    31:c0:f4:e0:8d:3f:45:ff:e3:8a:88:95:a8:b7:92:
                    c5:51:28:21:39:61:1e:92:56:49:5c:36:1f:b5:4d:
                    d8:5a:54:5c:2f:ae:98:05:d8:58:f1:41:d2:fe:a0:
                    ae:59:e2:d3:5b:bd:fe:2a:a7:41:49:d7:7c:e2:e0:
                    66:2e:5a:6b:5c:35:76:f2:c3:04:c7:a3:67:b5:b9:
                    8b:0c:38:db:d6:0a:fa:8b:cf:84:f7:a9:c7:75:62:
                    f2:4c:97:20:99:ff:4d:05:09:42:aa:0c:77:53:63:
                    1b:64:a1:f8:53:a6:f3:aa:b0:a3:bb:1e:3b:c6:0f:
                    bd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:06:66:77:63:AC:C2:E4:B4:90:BD:3E:D7:EB:8E:87:FD:5F:08:03
            X509v3 Authority Key Identifier:
                keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b4:3e:b7:fb:3e:6a:ca:f6:4c:8f:dc:ff:29:c3:30:89:df:
         02:2d:f7:83:48:ec:ab:2b:43:c0:4c:ca:66:9b:ad:c5:9a:d9:
         33:7a:3a:43:f0:48:f7:98:d2:83:f3:aa:5e:b0:f7:aa:d5:f1:
         5c:d8:8a:0e:8c:f8:52:9a:50:d5:e0:fd:8a:a0:63:3d:49:c9:
         eb:d4:74:62:54:ee:d5:5c:e4:9a:91:09:15:e4:72:46:2d:95:
         1b:d0:1c:9a:b8:63:06:30:9e:d9:65:2f:24:c5:b3:fd:d9:49:
         95:2d:6f:2d:c7:d2:1b:94:7c:e4:3c:c3:4e:32:0e:10:ee:96:
         bf:57:9b:0f:49:2d:78:be:32:41:a3:7b:5d:58:5e:c0:f6:c3:
         8d:f8:c5:11:e2:8c:e0:ae:7d:be:6c:82:2c:1f:24:2f:d5:ab:
         e5:2d:f2:c5:6a:c7:8a:48:d9:fb:3e:e8:ff:37:52:e7:af:af:
         46:65:11:b1:11:52:8d:03:6e:e3:30:27:e8:b8:27:6c:21:e2:
         19:a7:7c:fb:5f:95:9a:e7:ce:7b:b3:0b:be:dd:70:dd:bd:f9:
         d1:a3:f6:fe:66:bd:29:c2:30:b0:32:49:28:49:31:51:1c:18:
         a1:a0:50:03:2c:4b:e1:80:63:cc:77:51:e5:74:33:22:45:a7:
         39:5b:81:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:02:39 2025 by rpki-client