Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
File:                     ePDYlQwP20Hf1XxZSCglIGEcFsM.mft (raw, json)
Hash identifier:          lAc/NIHakBmlWGVUfdHHjv5BzsjDJfkVcx2QuDglVD4=
Subject key identifier:   29:FE:E5:91:82:26:8C:B0:C1:DA:59:D6:5E:EB:A8:AF:17:1D:BA:4C
Authority key identifier: 78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3
Certificate issuer:       /CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
Certificate serial:       01974967B446CA1016CB416AE706B81B9447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
Manifest number:          038C
Signing time:             Sat 07 Jun 2025 08:00:22 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:22 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:22 +0000
Files and hashes:         1: ePDYlQwP20Hf1XxZSCglIGEcFsM.crl (hash: PuLDqxfUaqz7VhdsqVJnCmP+rBZ4jbVvOxYoHuSiy6k=)
                          2: uI19goGgOdv56r27gyNLoOu7fK8.roa (hash: aRMcCZp6MU/f16sSAZBSSpBFMChXSvZTJUWHCtQ3+qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:67:b4:46:ca:10:16:cb:41:6a:e7:06:b8:1b:94:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
        Validity
            Not Before: Jun  7 08:00:22 2025 GMT
            Not After : Jun  8 08:00:22 2025 GMT
        Subject: CN=29fee59182268cb0c1da59d65eeba8af171dba4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fd:3b:3e:0a:47:45:38:11:54:0a:00:6e:e2:
                    53:88:94:6b:59:12:de:f9:f7:5b:6e:7b:55:77:9d:
                    e6:12:05:04:6b:c8:67:22:02:04:9e:95:17:d9:11:
                    c8:16:3a:e9:31:05:06:27:30:b7:f6:12:5d:59:46:
                    f3:f0:5c:9c:b6:20:76:90:8e:86:b5:0c:eb:9f:88:
                    76:11:f6:4c:d6:d2:35:06:b3:fd:6a:8b:c2:dc:b7:
                    76:1d:cb:d1:bc:41:3c:76:2f:44:6e:87:11:fe:f6:
                    0a:b0:45:d7:12:7b:97:eb:13:8f:3c:76:d3:bf:51:
                    c6:1d:ff:08:0c:81:15:cc:0f:d1:2c:24:fb:15:4c:
                    d8:30:e4:fd:40:83:b9:47:83:8f:f3:d2:24:cc:82:
                    99:45:46:71:09:fc:3a:46:50:ec:27:62:f0:7f:db:
                    db:e6:37:6e:d7:39:24:45:16:db:2b:2e:c5:fa:db:
                    9d:c1:c5:b6:0e:51:ae:3b:58:f2:1a:fe:ba:f3:c5:
                    c6:56:6d:d1:31:af:f3:ce:11:94:8b:55:d8:ee:53:
                    82:b6:39:3c:58:12:8f:b4:2e:56:b9:51:17:bf:03:
                    18:84:73:a1:ac:75:43:cc:80:9b:cc:ab:50:c3:d7:
                    c8:0d:89:13:e9:b9:df:cf:ec:e0:59:23:1f:dc:21:
                    4a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FE:E5:91:82:26:8C:B0:C1:DA:59:D6:5E:EB:A8:AF:17:1D:BA:4C
            X509v3 Authority Key Identifier:
                keyid:78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:5a:41:54:b5:66:6c:ee:af:d1:4d:3f:c3:77:6f:cd:99:98:
         c0:aa:cc:3b:18:90:a5:15:d3:6f:c0:d0:a0:76:7d:7d:00:a2:
         ce:df:c6:21:02:9c:d0:c3:df:22:41:6b:30:b2:81:0f:cc:f5:
         6d:76:9b:e6:8b:ff:20:20:a8:df:46:cd:56:f3:5a:a7:62:b4:
         a0:3c:98:ef:82:4c:d3:fa:d5:a5:df:3f:cc:b1:ef:92:0f:ba:
         4a:2a:50:96:70:51:af:49:49:23:8b:b5:4c:7d:e3:1f:38:ee:
         c0:a9:65:d0:21:87:74:47:3d:23:09:77:9c:53:ec:8a:f2:79:
         f7:bb:6d:20:4a:b0:a7:0e:ae:e1:0b:ef:7e:fb:c2:34:cc:c0:
         93:bd:bc:76:3d:4a:07:56:00:c3:ed:9d:d4:14:04:0c:6d:5f:
         03:6b:c4:5e:c2:d0:59:9f:e9:2c:7d:9b:ac:0c:0c:c3:e5:f3:
         45:4f:54:29:ea:9b:99:08:20:72:51:de:fe:23:ee:7e:bd:fd:
         f6:76:b1:f9:ea:d1:28:38:f1:17:61:6e:b4:e6:2e:8f:cb:3a:
         c8:06:5c:71:fc:4f:1f:78:64:59:55:13:39:01:d6:2e:3d:97:
         49:35:5a:c0:fe:b8:1a:80:74:dc:57:e2:5d:d2:ea:2c:62:5a:
         e1:80:41:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:06:22 2025 by rpki-client