Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
File:                     5318qB7lnVNFA7L3tj22K11ExW4.mft (raw, json)
Hash identifier:          sM186StDSlC7cegmF6ZM8Cw8RMu1yzSlNid1EqrodWU=
Subject key identifier:   00:ED:53:86:5F:9B:5D:FB:DA:7C:D6:52:DE:BA:ED:FC:B3:CF:BD:F7
Authority key identifier: E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E
Certificate issuer:       /CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
Certificate serial:       0199239EF790AE03CC24D779A16A33AF921D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
Manifest number:          0EDA
Signing time:             Sun 07 Sep 2025 10:00:44 +0000
Manifest this update:     Sun 07 Sep 2025 10:00:44 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:44 +0000
Files and hashes:         1: 5318qB7lnVNFA7L3tj22K11ExW4.crl (hash: +IZ/8YgLR7wzgisuQO3Mp2pdpCRPt2jTwEETyhknSYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9e:f7:90:ae:03:cc:24:d7:79:a1:6a:33:af:92:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e77d7ca81ee59d534503b2f7b63db62b5d44c56e
        Validity
            Not Before: Sep  7 10:00:44 2025 GMT
            Not After : Sep  8 10:00:44 2025 GMT
        Subject: CN=00ed53865f9b5dfbda7cd652debaedfcb3cfbdf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fc:ff:30:d4:44:31:41:f7:e0:98:ff:54:e8:
                    9c:8d:9c:a8:21:eb:9e:f8:6a:28:b5:d7:31:05:29:
                    77:68:ee:6e:3d:28:65:e9:61:87:d1:62:bb:63:e7:
                    9f:fd:c4:0e:d2:9b:29:63:34:a6:d7:8d:fc:70:f1:
                    e1:f0:bc:72:75:41:7f:b9:3d:f5:d1:32:29:61:dc:
                    2e:56:e7:49:01:14:33:14:9e:4b:ad:3e:c3:2c:8b:
                    65:ae:9c:91:6c:a7:26:b3:bf:83:1c:e8:61:28:c8:
                    b8:0d:95:c2:78:ec:54:82:c0:1b:f5:a1:f9:76:cf:
                    99:a1:00:43:bb:6d:d8:27:36:0a:d5:ea:81:f5:71:
                    a9:cb:fc:c4:29:50:c5:4c:9d:6b:fb:88:ae:66:1a:
                    4d:ff:3f:d5:01:27:37:09:88:ea:07:35:81:86:d1:
                    8f:4d:1d:3c:52:fc:ca:54:c4:cd:b1:0f:38:91:29:
                    7b:79:48:ed:fb:9f:3a:9a:01:77:0a:77:8a:07:7c:
                    18:dd:f3:f5:7a:1a:0d:74:43:87:6a:f7:0c:df:af:
                    3f:76:bc:99:28:1c:2d:86:70:7c:ae:0c:21:74:98:
                    16:e1:68:cd:15:28:fa:23:70:78:a2:e1:c4:69:fa:
                    3d:ca:6b:60:ea:b9:35:e0:2b:f8:1f:d2:b9:63:aa:
                    d6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:ED:53:86:5F:9B:5D:FB:DA:7C:D6:52:DE:BA:ED:FC:B3:CF:BD:F7
            X509v3 Authority Key Identifier:
                keyid:E7:7D:7C:A8:1E:E5:9D:53:45:03:B2:F7:B6:3D:B6:2B:5D:44:C5:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5318qB7lnVNFA7L3tj22K11ExW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/30f6cf-ef9b-493a-8394-5c200c6e7d34/1/5318qB7lnVNFA7L3tj22K11ExW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a7:67:74:cb:46:33:2d:48:ef:dd:73:1f:81:e9:84:61:4b:
         63:bb:a3:49:46:b3:1c:ce:b3:1f:50:54:ab:0f:01:25:e1:82:
         65:bc:45:a5:06:64:5d:42:6f:58:da:32:c5:3d:61:d4:84:df:
         82:a1:9d:92:9f:5f:a3:cb:c6:89:60:0c:84:98:10:75:d7:52:
         db:08:2a:db:06:82:41:93:6d:26:90:63:82:e5:c6:a5:f2:e7:
         57:8c:4e:a8:01:da:60:c5:4d:1c:eb:9a:98:a2:8c:ff:a8:d3:
         9a:5c:0a:9c:50:1f:f8:3d:d6:7a:44:2b:04:76:55:4d:0f:1d:
         b8:37:79:e5:87:97:77:28:d9:b7:ef:93:e8:50:e0:09:d2:34:
         ae:08:74:4b:3a:e2:8f:ba:71:4c:e6:7d:27:58:7b:af:90:52:
         25:ca:67:9f:0b:93:b4:88:98:30:d8:f5:66:ee:f4:f4:bc:a0:
         c9:3c:de:a9:7b:6c:71:90:64:ee:70:61:b4:12:d9:4b:06:82:
         c9:e6:a4:98:1b:3d:e0:2d:10:ad:a8:00:11:04:e3:78:34:ad:
         00:49:35:68:88:a8:a7:e7:9b:24:f5:45:22:5f:2a:3f:a6:65:
         af:cc:a9:dd:a7:a5:c3:66:8f:3c:c7:dc:a2:3e:fe:c9:77:f4:
         71:7f:6e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:07 2025 by rpki-client