Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
File:                     edFXhuZE1JfLeisyU71D2S5Jxas.mft (raw, json)
Hash identifier:          3NnfjKQOY3mwuwMQ/gQEzxBfoatVGWsPfbe46kttYIA=
Subject key identifier:   4E:44:DC:7C:E7:94:BF:1A:59:99:10:A7:21:70:AE:70:A7:00:A6:93
Authority key identifier: 79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
Certificate issuer:       /CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Certificate serial:       019923A08C04EE0FE5644A7424385507548A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 10:02:27 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:27 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:27 +0000
Files and hashes:         1: edFXhuZE1JfLeisyU71D2S5Jxas.crl (hash: FB8Pk9qZ7dAtdGiB+E5UJFqkx/W904CR4Je428yu3Wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:8c:04:ee:0f:e5:64:4a:74:24:38:55:07:54:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
        Validity
            Not Before: Sep  7 10:02:27 2025 GMT
            Not After : Sep  8 10:02:27 2025 GMT
        Subject: CN=4e44dc7ce794bf1a599910a72170ae70a700a693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9f:05:84:56:e7:c2:32:1d:1f:7b:56:ca:89:
                    41:c8:15:86:0f:56:06:43:76:f3:af:97:1d:89:15:
                    71:46:e8:87:80:34:e4:8b:5f:e8:fb:3d:bd:35:59:
                    d2:1f:f0:f2:6b:d7:51:4b:68:6d:44:dc:79:7d:0c:
                    a8:de:ed:0c:9f:4a:b9:51:40:44:7d:f1:c3:f6:78:
                    bf:f1:5e:1f:5b:14:0d:15:75:5b:9c:d2:57:47:00:
                    e6:28:47:4b:64:fc:62:ef:66:c7:b9:7d:2b:e0:4f:
                    fb:a9:4f:9d:fc:1d:78:f2:71:59:c3:0c:12:da:2a:
                    8c:94:33:f6:b3:e7:84:03:17:70:8c:0a:9d:24:71:
                    02:da:95:6e:8b:4b:fb:61:ad:e3:df:aa:43:fb:30:
                    22:6b:b0:e9:77:5d:3f:cc:9d:0b:ca:75:cc:7c:b3:
                    d8:f1:a8:44:6a:68:05:e7:0e:f4:fc:ce:73:96:92:
                    7d:58:51:0c:8d:42:d2:a9:4d:af:10:8f:bc:f1:cf:
                    98:e7:24:7f:36:0b:45:6c:2a:f2:5c:61:14:cc:42:
                    22:fb:36:15:ae:b7:3c:71:d2:09:e9:ba:cd:57:28:
                    ed:95:e0:f7:1d:f9:d2:16:58:a9:6f:20:f8:7f:04:
                    b6:47:83:9b:ce:02:1b:98:f3:68:8d:af:3c:d3:1f:
                    a6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:44:DC:7C:E7:94:BF:1A:59:99:10:A7:21:70:AE:70:A7:00:A6:93
            X509v3 Authority Key Identifier:
                keyid:79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:9c:18:2f:98:ee:e5:1f:52:17:83:6b:f9:c3:75:16:d2:e6:
         07:25:26:c0:1f:23:99:60:35:e9:cc:73:c6:e8:14:0b:fa:96:
         29:34:12:29:81:a3:1a:95:2d:ae:f0:ac:32:06:4e:0d:bc:41:
         49:af:e8:dd:00:42:66:0c:34:33:26:8e:08:8c:7c:b8:ed:b7:
         49:ba:9d:5f:63:fe:5e:b4:28:0b:95:a4:7a:fa:ad:ad:b8:2e:
         7d:79:d5:48:da:99:32:15:58:d3:f2:b2:d8:8c:0c:af:44:a9:
         f0:fc:92:c5:13:cc:b3:02:39:8c:0e:3b:0f:5f:38:6c:ff:57:
         8a:44:32:53:92:ed:7d:d9:f8:6e:22:34:d7:cc:15:51:26:7d:
         78:d7:36:37:69:33:a1:0e:98:61:47:92:84:80:0e:4c:36:e8:
         3b:37:0f:b5:0f:58:2d:a0:15:d0:ee:0b:13:4c:54:60:b5:58:
         05:72:28:28:c8:93:23:26:b1:92:2a:ce:38:bc:9a:83:97:25:
         13:41:5b:95:92:c4:f6:4b:10:f4:39:1d:1b:9c:c7:b0:59:cc:
         39:d9:0f:3e:60:c6:6c:b3:73:01:62:cd:80:ce:0b:32:99:55:
         19:cf:ec:06:8a:69:01:fc:c7:d0:bf:6e:43:93:4d:16:81:c0:
         1f:e8:e0:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoIwE7g/lZEp0JDhVB1SKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDE1Nzg2ZTY0NGQ0OTdjYjdhMmIzMjUzYmQ0M2Q5MmU0
OWM1YWIwHhcNMjUwOTA3MTAwMjI3WhcNMjUwOTA4MTAwMjI3WjAzMTEwLwYDVQQD
Eyg0ZTQ0ZGM3Y2U3OTRiZjFhNTk5OTEwYTcyMTcwYWU3MGE3MDBhNjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp8FhFbnwjIdH3tWyolByBWGD1YG
Q3bzr5cdiRVxRuiHgDTki1/o+z29NVnSH/Dya9dRS2htRNx5fQyo3u0Mn0q5UUBE
ffHD9ni/8V4fWxQNFXVbnNJXRwDmKEdLZPxi72bHuX0r4E/7qU+d/B148nFZwwwS
2iqMlDP2s+eEAxdwjAqdJHEC2pVui0v7Ya3j36pD+zAia7Dpd10/zJ0LynXMfLPY
8ahEamgF5w70/M5zlpJ9WFEMjULSqU2vEI+88c+Y5yR/NgtFbCryXGEUzEIi+zYV
rrc8cdIJ6brNVyjtleD3HfnSFlipbyD4fwS2R4ObzgIbmPNoja880x+mRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5E3HznlL8aWZkQpyFwrnCnAKaTMB8GA1UdIwQY
MBaAFHnRV4bmRNSXy3orMlO9Q9kuScWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWRGWGh1WkUxSmZMZWlzeVU3MUQyUzVKeGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS85NzJkYTEtYzJjMy00NjRlLWIxM2Yt
ZjJhZjUxMTYzYTYwLzEvZWRGWGh1WkUxSmZMZWlzeVU3MUQyUzVKeGFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS85NzJkYTEtYzJjMy00NjRlLWIxM2YtZjJhZjUxMTYzYTYw
LzEvZWRGWGh1WkUxSmZMZWlzeVU3MUQyUzVKeGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5wYL5ju
5R9SF4Nr+cN1FtLmByUmwB8jmWA16cxzxugUC/qWKTQSKYGjGpUtrvCsMgZODbxB
Sa/o3QBCZgw0MyaOCIx8uO23SbqdX2P+XrQoC5WkevqtrbgufXnVSNqZMhVY0/Ky
2IwMr0Sp8PySxRPMswI5jA47D184bP9XikQyU5Ltfdn4biI018wVUSZ9eNc2N2kz
oQ6YYUeShIAOTDboOzcPtQ9YLaAV0O4LE0xUYLVYBXIoKMiTIyaxkirOOLyag5cl
E0FblZLE9ksQ9DkdG5zHsFnMOdkPPmDGbLNzAWLNgM4LMplVGc/sBoppAfzH0L9u
Q5NNFoHAH+jgTw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:45 2025 by rpki-client