Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File:                     edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier:          yEd6eYHMOZPvBPaSBaiN1j2+r98xG2nBXelSoEBLdpM=
Subject key identifier:   BA:CA:2B:D9:07:82:87:30:7B:34:F1:55:F3:A0:BE:25:D4:DA:05:E6
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer:       /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial:       019752A2172007559D52B5F7DE0284E42165
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number:          0CA5
Signing time:             Mon 09 Jun 2025 03:00:43 +0000
Manifest this update:     Mon 09 Jun 2025 03:00:43 +0000
Manifest next update:     Tue 10 Jun 2025 03:00:43 +0000
Files and hashes:         1: EG5pUxGfwAIBOHWhSA_u40Ull48.roa (hash: j9AIedWxUThIEjIiNQ9a0XQAYjd/0yxU1No/HAT1wlg=)
                          2: EIlKz_yGKgG9o6LgyJUb5CYuXik.roa (hash: 7XI12BZ8oMxeo0lKGJtUxLNV8B1NZwQt+C2hSEvkeaU=)
                          3: eZbyMOXwsT8DM_J58p4lb08NYAk.roa (hash: /WC96WsqKWPbAIxaI0PJMY/euc4BODG5VIUj9O8Scw8=)
                          4: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: GSebTPeIk57xZpwdsWsbFz1lc+6PQFM5uJuRRAaQGjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:a2:17:20:07:55:9d:52:b5:f7:de:02:84:e4:21:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
        Validity
            Not Before: Jun  9 03:00:43 2025 GMT
            Not After : Jun 10 03:00:43 2025 GMT
        Subject: CN=baca2bd9078287307b34f155f3a0be25d4da05e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:92:8e:67:e7:c2:21:26:a5:fc:7d:48:c0:be:
                    35:9f:bf:58:3f:11:f4:c1:4f:39:9d:4f:c3:d6:27:
                    77:64:12:11:ed:5e:8f:8a:a6:fc:b8:2e:25:ec:ee:
                    2f:55:40:97:9a:53:43:1c:c6:fe:12:d9:27:5d:95:
                    a1:b3:a7:3f:7d:18:c5:09:d0:d0:2a:bc:35:d4:cc:
                    3b:54:cd:64:d5:0a:c0:e3:2d:19:9f:58:00:23:f5:
                    79:0e:02:c5:a3:be:33:55:63:9b:ef:bf:2f:4c:51:
                    3b:4e:ed:70:d1:2c:c1:06:50:31:0e:ea:df:84:63:
                    60:64:0e:00:41:f2:e3:1d:e0:81:bc:42:db:f8:dc:
                    b3:fe:0f:9c:5e:21:f9:59:77:8c:40:de:5e:a5:16:
                    ec:1a:fc:54:ce:47:5d:2c:d0:43:d1:29:05:cb:a2:
                    55:39:59:ea:6f:17:0f:84:e3:5e:71:09:98:aa:12:
                    b4:73:a5:82:ea:73:06:e3:d5:7d:1e:97:89:dd:ed:
                    a4:42:2f:05:10:c1:96:39:2a:a5:0b:38:6a:35:32:
                    ca:46:6b:e9:90:d2:14:23:bd:60:02:21:63:2d:21:
                    ec:fc:a8:78:9d:91:e8:4e:5a:f8:14:05:82:7e:7a:
                    4a:cc:b3:98:4e:2a:c6:55:8c:e3:cc:a0:6f:7d:e1:
                    f8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CA:2B:D9:07:82:87:30:7B:34:F1:55:F3:A0:BE:25:D4:DA:05:E6
            X509v3 Authority Key Identifier:
                keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f1:d6:4f:6a:c4:39:40:dc:ba:ac:0b:6b:bc:df:d9:63:bc:
         a3:d8:8e:28:03:1f:45:6b:58:d0:fd:da:d5:b1:ff:c7:71:93:
         93:58:3a:a9:5f:87:09:7a:28:28:15:cd:39:56:f9:2a:b6:54:
         93:1d:a1:10:fe:85:54:c8:67:30:75:2e:76:a2:11:77:3d:ab:
         f5:55:0b:37:fd:ad:8c:f5:9d:73:3e:9c:51:65:cc:61:72:2c:
         fd:0d:53:79:65:a2:0b:b7:72:1b:b1:8e:b0:57:01:0d:32:48:
         01:83:28:5f:7d:30:12:43:85:66:87:82:47:ee:c6:ec:ad:37:
         fe:57:b6:6e:be:dc:2b:fb:ca:1e:ba:10:03:60:6e:0a:ca:26:
         10:70:aa:31:fc:92:79:fb:26:1a:a8:e1:06:9e:cf:90:52:8d:
         67:3e:90:91:98:18:5c:ca:b8:5a:0c:c3:91:d4:b5:0d:28:e5:
         70:db:12:e9:06:6f:a8:cd:a1:0c:65:f0:e4:e3:94:7d:bd:ea:
         86:8f:6b:62:25:54:36:af:3d:f4:53:cb:97:24:e3:d9:a0:95:
         ac:58:31:cb:71:6a:7b:27:89:96:bf:6c:ee:bd:d9:f1:49:1c:
         41:8f:7d:bd:ef:89:14:1c:02:04:aa:9d:7d:74:3f:4b:a7:2b:
         f9:6e:67:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:16:37 2025 by rpki-client