Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
File:                     EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft (raw, json)
Hash identifier:          GVJr29792K0/CD/2MOciGH5sTFBhgg/4d58jdYfJwyo=
Subject key identifier:   06:5E:5B:A4:56:C1:7F:7A:78:3F:17:40:F3:3A:51:8F:C3:38:4B:8E
Authority key identifier: 11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5
Certificate issuer:       /CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
Certificate serial:       019A19BDA871A45CBBE78FA1BDE4DA368E9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
Manifest number:          1685
Signing time:             Sat 25 Oct 2025 05:00:51 +0000
Manifest this update:     Sat 25 Oct 2025 05:00:51 +0000
Manifest next update:     Sun 26 Oct 2025 05:00:51 +0000
Files and hashes:         1: EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl (hash: F8afal806kajAToOJGpVGzbBQ9SpjW8rDdhMKPF4dsM=)
                          2: FTO-WxW7sPayKFxLz7VzC8cq9-I.roa (hash: cBwaO5bj6Q5Qg6BTkhA0mco8iqfNRZ8ycLxM+09RwRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:19:bd:a8:71:a4:5c:bb:e7:8f:a1:bd:e4:da:36:8e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
        Validity
            Not Before: Oct 25 05:00:51 2025 GMT
            Not After : Oct 26 05:00:51 2025 GMT
        Subject: CN=065e5ba456c17f7a783f1740f33a518fc3384b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c7:b8:bc:9f:24:6f:33:e6:b2:22:9c:9e:ea:
                    85:d9:2c:b1:04:3f:69:4e:5c:3c:f0:07:9c:63:e8:
                    f8:16:2f:6b:58:db:fb:7f:94:0b:19:9e:9f:fc:c0:
                    f7:2d:4b:f4:8f:ce:d9:74:94:91:d7:be:49:c5:17:
                    e5:bb:80:7f:6b:94:f8:e6:92:56:ad:e7:70:48:16:
                    7d:46:9f:f0:47:99:73:8f:6a:6c:f0:bd:ff:a0:4e:
                    85:96:58:5f:5e:a9:74:46:ec:ff:5c:4a:c9:b0:68:
                    3d:e5:c1:31:da:b2:db:7b:5a:bc:8c:58:a3:97:32:
                    98:46:d0:70:28:2d:d1:f0:dc:4d:5a:90:82:2f:25:
                    36:c9:43:f0:9c:63:c4:ac:da:c0:48:c3:be:be:6e:
                    42:79:c9:3e:2b:89:dd:e1:c8:b6:e5:c8:31:48:fa:
                    34:1a:6b:b9:c1:d3:88:1d:38:15:03:3e:89:6e:fd:
                    0b:0b:36:6e:e0:67:9e:43:e7:3d:c9:7b:21:f9:0d:
                    3b:09:41:19:4c:77:0c:cf:f0:ca:b3:b5:0e:a7:f2:
                    1d:9f:39:3b:5f:24:f9:b1:af:98:32:9f:f6:d5:d6:
                    64:dd:da:d9:34:48:b9:c1:dc:6f:e5:e9:98:98:4b:
                    bf:1a:46:40:6f:53:65:bf:4c:15:f3:b3:72:2d:8a:
                    67:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5E:5B:A4:56:C1:7F:7A:78:3F:17:40:F3:3A:51:8F:C3:38:4B:8E
            X509v3 Authority Key Identifier:
                keyid:11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:d0:c5:08:04:5e:3a:6a:b7:55:c3:22:b1:7e:76:2a:03:e3:
         b8:04:65:5a:02:5b:06:25:ae:6a:6b:e1:1e:f0:ba:b1:8a:dc:
         f8:1b:a8:46:a3:b2:50:06:2e:d4:72:0c:9c:44:c0:5b:67:cc:
         42:e3:d1:30:f9:47:e6:b0:b0:40:a2:c2:77:34:7c:b2:0e:f5:
         72:87:e1:63:38:c4:42:29:63:4b:93:9f:ca:df:47:1d:bd:a0:
         47:44:d4:10:68:07:72:ad:d8:6c:8f:eb:af:41:a1:ef:45:02:
         df:82:3a:99:88:a8:45:6e:07:06:11:03:d8:42:5b:13:46:95:
         39:bb:9c:30:0f:40:cb:57:2d:45:1e:da:b5:ef:81:d5:18:32:
         f6:1f:d3:98:64:eb:4b:c8:0e:0b:41:90:b0:7f:11:3b:5a:a2:
         ff:f0:78:be:98:12:99:6a:39:92:bb:53:60:ec:fb:57:db:03:
         20:2d:6d:d4:53:d6:f5:94:61:4f:db:f9:22:aa:55:c4:db:11:
         49:cf:c1:08:21:0d:d6:21:64:09:7a:24:36:03:96:e7:7e:ae:
         fa:f7:8d:32:d7:e6:c3:52:99:17:29:f3:27:69:6e:43:23:3e:
         01:2b:dc:10:70:67:50:51:3a:83:f6:51:ce:db:1b:99:94:86:
         5e:77:53:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:40:24 2025 by rpki-client