Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft
File:                     edVl-Z_14P-1vfmZXteoCNQUBuU.mft (raw, json)
Hash identifier:          mxEpjpK04lvX2KVG7qTGKQL5kw7N09W8zEzDAC9zpx4=
Subject key identifier:   C2:98:50:51:4F:3C:C0:6B:58:E0:85:E4:1C:13:25:6E:87:EF:99:FC
Authority key identifier: 79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5
Certificate issuer:       /CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
Certificate serial:       019D3A54A24C37308DEC1DCA7B5F0261F563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft
Manifest number:          0D52
Signing time:             Sun 29 Mar 2026 16:01:58 +0000
Manifest this update:     Sun 29 Mar 2026 16:01:58 +0000
Manifest next update:     Mon 30 Mar 2026 16:01:58 +0000
Files and hashes:         1: 468CghFJVbcMkzFD_6LLJ6KgIqI.roa (hash: I1pVpzd56rQR4bQX55OEgNlwIZn6N2UK6SbIW8BzFXs=)
                          2: IdjFehXQdBLz7qAxZCQHKcB6zD0.roa (hash: Dlp4+hIoUvaqtX9q0l/G19Jyi3u+a0sJGqKpZEFwiWU=)
                          3: edVl-Z_14P-1vfmZXteoCNQUBuU.crl (hash: FD6zybg0rm2rX3PBk2FW2IL+5Tjj4YoXB+mU3K+GAk4=)
                          4: q4BgbuvkzVB8ZRL3SkFinweXq-I.roa (hash: aCMbnoKcpfu50sjGN6TL9OokrXx+Ehkmz9YH9z+ZFCA=)
                          5: zV8GWPUHNwGTQG5raiin3OTpl3Q.roa (hash: qn3NV9lIq1h/YqEcxO5jUOfNfQtEgWeeSn2fXHWtsYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:54:a2:4c:37:30:8d:ec:1d:ca:7b:5f:02:61:f5:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d565f99ff5e0ffb5bdf9995ed7a808d41406e5
        Validity
            Not Before: Mar 29 16:01:58 2026 GMT
            Not After : Mar 30 16:01:58 2026 GMT
        Subject: CN=c29850514f3cc06b58e085e41c13256e87ef99fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ed:21:d9:22:f3:81:88:a0:26:24:43:39:a0:
                    b5:e9:d8:59:b6:50:a2:e4:1b:32:96:8c:20:c4:3e:
                    ce:67:90:0a:62:c6:94:25:eb:22:e7:f2:f3:c8:81:
                    21:fd:a7:70:47:b9:7e:26:0c:4e:93:21:93:0d:83:
                    47:4b:0f:15:48:09:8c:ca:c8:a6:f2:bc:69:ae:21:
                    d2:6e:6b:91:47:63:af:ce:d0:f7:aa:75:9d:61:23:
                    a0:d9:f6:d2:7b:57:71:8e:5c:79:2a:8b:ca:19:ea:
                    ee:75:ee:66:cc:4c:2d:da:82:7a:c4:f9:78:1f:ed:
                    b8:ea:69:5d:a1:17:21:ad:01:8b:15:2c:06:93:8d:
                    08:74:8d:d5:db:5b:d2:64:95:ad:a3:9c:f0:8e:f2:
                    15:be:9c:6d:32:47:0f:2c:e2:01:54:39:20:d1:b2:
                    dd:35:2b:0e:92:20:b7:a1:b3:98:c1:d7:30:fe:cd:
                    03:80:bf:dd:d0:65:6b:7c:63:ff:4e:28:2f:b8:a1:
                    dd:62:39:f9:42:d5:88:96:8a:19:91:e6:73:c3:d0:
                    71:ff:36:73:5b:2e:9f:04:3f:b0:43:c3:64:5b:da:
                    a8:fa:f2:fb:ff:55:57:5f:71:13:4d:74:a6:77:84:
                    0e:65:91:d1:5d:99:1a:f4:bd:5e:d7:e0:19:f1:f0:
                    ab:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:98:50:51:4F:3C:C0:6B:58:E0:85:E4:1C:13:25:6E:87:EF:99:FC
            X509v3 Authority Key Identifier:
                keyid:79:D5:65:F9:9F:F5:E0:FF:B5:BD:F9:99:5E:D7:A8:08:D4:14:06:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edVl-Z_14P-1vfmZXteoCNQUBuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ee5cd7-b30e-466b-aaad-6c3b87443e06/1/edVl-Z_14P-1vfmZXteoCNQUBuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:33:61:a9:63:45:f4:ba:30:ad:02:1d:34:46:bd:a3:81:41:
         47:f4:1f:c4:e1:c4:82:46:fd:cd:73:42:05:ee:a6:b5:6b:4e:
         64:04:09:c2:96:70:98:7c:2e:0d:aa:f3:06:f8:f4:ea:54:5b:
         f8:db:dd:38:f0:8d:dc:da:b9:9d:4c:40:88:66:7a:5f:76:b9:
         1b:87:4e:31:21:00:22:b6:f7:a8:e5:c1:ef:25:9c:50:4b:31:
         33:78:7a:ca:a5:e4:7a:29:c2:00:2f:4a:c3:95:9f:9d:5b:2e:
         72:b3:c3:74:73:6b:cf:a1:31:ea:e2:6d:37:38:d6:8d:24:df:
         9f:a1:6b:ae:c7:80:86:54:5f:0e:85:77:d0:d7:1f:fe:16:a9:
         80:39:40:6f:b6:cf:53:bf:4b:82:66:60:97:b8:8d:60:26:58:
         40:9e:bf:ef:a3:70:c4:18:69:3f:a2:57:84:23:12:eb:cb:92:
         01:c0:8b:e5:20:ed:1b:cc:25:76:22:49:3c:f0:c0:f6:fc:96:
         76:e6:c6:d4:d1:97:50:17:c4:dc:a0:4b:7a:a1:69:2c:58:f1:
         eb:ff:6c:36:66:08:b4:fe:d3:73:f7:2a:34:78:e0:c0:17:ad:
         f6:5d:32:30:dc:74:0a:43:54:76:a8:17:d8:4c:ef:38:a9:7c:
         84:fb:ad:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:16 2026 by rpki-client