Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft
File:                     ed-J0j-dbc_x-71wtjZnHR7wrZE.mft (raw, json)
Hash identifier:          h12k8mT/zfJnPDOmrRlBx1RZ2qvdiVtwavrCJal2DLQ=
Subject key identifier:   69:36:6C:B3:82:E3:EF:BE:AE:87:5C:15:5B:00:1C:EA:F8:61:43:E6
Authority key identifier: 79:DF:89:D2:3F:9D:6D:CF:F1:FB:BD:70:B6:36:67:1D:1E:F0:AD:91
Certificate issuer:       /CN=79df89d23f9d6dcff1fbbd70b636671d1ef0ad91
Certificate serial:       019923A0136C93886515702CF24EDCC1BD42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ed-J0j-dbc_x-71wtjZnHR7wrZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft
Manifest number:          06B8
Signing time:             Sun 07 Sep 2025 10:01:57 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:57 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:57 +0000
Files and hashes:         1: ed-J0j-dbc_x-71wtjZnHR7wrZE.crl (hash: vibbbmCeVvxsfUtCInzTSCrLJa6PWxNw+kdtePOcLeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ed-J0j-dbc_x-71wtjZnHR7wrZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:13:6c:93:88:65:15:70:2c:f2:4e:dc:c1:bd:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79df89d23f9d6dcff1fbbd70b636671d1ef0ad91
        Validity
            Not Before: Sep  7 10:01:57 2025 GMT
            Not After : Sep  8 10:01:57 2025 GMT
        Subject: CN=69366cb382e3efbeae875c155b001ceaf86143e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:47:b1:e0:2b:8f:9e:45:b7:ed:0a:ef:61:
                    8d:84:ba:74:72:6b:d7:54:d1:a9:12:a6:89:41:45:
                    25:f9:d1:c2:66:82:ac:7e:ef:3a:d2:4b:ba:38:c7:
                    46:24:24:9e:42:0e:e9:fb:9a:bc:da:e4:60:04:8c:
                    4a:b6:03:c5:fd:0f:6c:b8:e9:3c:eb:9e:d9:de:07:
                    03:2d:b6:06:96:6b:c9:f7:65:ca:76:03:ad:66:52:
                    bc:30:7f:02:7d:e7:5e:14:5e:a4:9c:96:15:46:c3:
                    d9:8b:1e:de:85:d6:23:c5:f4:35:19:fc:16:d1:3d:
                    0b:34:18:a8:13:b8:bf:f3:b3:83:e8:4b:23:c0:b5:
                    ce:a0:63:cb:9d:62:66:a2:fc:02:68:ea:db:fe:07:
                    31:43:00:7d:98:00:a5:73:d7:04:b3:e8:f8:61:a9:
                    73:f7:40:64:5b:24:2d:16:a1:e5:a7:88:6a:b0:08:
                    50:3a:8a:e7:ef:05:6c:63:10:d9:61:16:d9:cb:60:
                    11:1e:50:b1:19:dc:60:9c:72:c0:ce:64:d6:3d:0f:
                    0e:c6:be:00:15:ea:ff:14:41:cc:be:ab:a4:9d:be:
                    25:7f:e3:6f:d4:71:96:f8:bd:22:4c:a4:52:9a:f2:
                    b5:9b:c5:e4:2c:22:73:cf:59:2a:bb:10:c6:bd:02:
                    32:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:36:6C:B3:82:E3:EF:BE:AE:87:5C:15:5B:00:1C:EA:F8:61:43:E6
            X509v3 Authority Key Identifier:
                keyid:79:DF:89:D2:3F:9D:6D:CF:F1:FB:BD:70:B6:36:67:1D:1E:F0:AD:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed-J0j-dbc_x-71wtjZnHR7wrZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4dc58c-7ce8-45bb-bace-1fe748133cef/1/ed-J0j-dbc_x-71wtjZnHR7wrZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5f:df:fa:9f:6c:6b:77:40:5a:7a:af:79:8a:14:be:f6:16:
         3d:00:8a:a7:57:e4:e1:57:ee:5f:37:93:59:40:f5:9a:c8:cf:
         e3:46:bb:e3:93:72:bf:55:e0:5d:1d:0d:84:af:51:27:aa:49:
         96:8a:73:09:95:3d:5f:94:fd:f7:e6:de:38:eb:c1:4f:26:38:
         1b:6c:e9:91:61:75:e4:03:70:57:24:71:bb:e1:19:cf:f5:68:
         34:cd:52:03:d7:03:ef:1b:a4:bf:c2:44:19:93:4f:84:55:9d:
         94:af:a4:e5:61:e2:aa:3c:73:30:c5:a4:97:c7:08:2e:81:91:
         15:62:32:1b:01:91:a3:9f:b4:6a:c7:c1:e2:ab:b9:a9:44:92:
         f8:e2:a9:c4:bf:d2:72:d3:02:08:b8:8e:91:c7:b1:02:5d:b0:
         b1:9c:29:06:18:dc:8e:0e:aa:3d:b7:e7:6d:8e:e9:41:36:7f:
         07:32:05:fb:95:2c:30:a7:81:ef:20:26:f0:ba:27:89:1e:41:
         4a:59:3f:90:61:5d:9f:da:74:72:0a:ce:84:29:37:e6:a9:d6:
         9c:f0:89:68:f5:0a:91:a8:b4:12:89:5f:79:3e:6b:6f:c9:ac:
         24:a9:7d:24:f2:c1:16:95:e5:68:98:94:57:0c:72:4d:61:3a:
         bf:a6:c5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:57 2025 by rpki-client