Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
File:                     eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft (raw, json)
Hash identifier:          cW08nW26/L4UEykd4TWh3T/XvdcfKcdkZL3+gWssjfA=
Subject key identifier:   48:D2:3B:01:81:66:92:68:19:99:3F:2C:1E:1C:8E:D1:1A:0E:6C:1D
Authority key identifier: 78:34:A7:5D:F5:05:64:7C:7F:50:7D:84:C2:E2:40:E9:19:FE:CB:25
Certificate issuer:       /CN=7834a75df505647c7f507d84c2e240e919fecb25
Certificate serial:       019769CF0278D52DD8EDDC3B4607D996DFFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
Manifest number:          54
Signing time:             Fri 13 Jun 2025 15:01:03 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:03 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:03 +0000
Files and hashes:         1: eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl (hash: s4srJjXDUlmgC330Y+u26PSNG+MHPGXHhfCW2Ub8Nbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:02:78:d5:2d:d8:ed:dc:3b:46:07:d9:96:df:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7834a75df505647c7f507d84c2e240e919fecb25
        Validity
            Not Before: Jun 13 15:01:03 2025 GMT
            Not After : Jun 14 15:01:03 2025 GMT
        Subject: CN=48d23b018166926819993f2c1e1c8ed11a0e6c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:fd:18:47:bf:09:21:d6:7a:65:9c:c8:d9:
                    6b:18:a0:92:11:32:6f:41:f2:55:51:a5:82:a5:43:
                    da:75:40:2c:e5:16:80:6c:26:20:12:39:30:1d:80:
                    96:2f:f7:d0:13:f1:be:3a:eb:12:a9:51:54:e1:e9:
                    df:be:17:20:2e:7c:ba:0f:5c:41:6f:ec:75:30:e2:
                    14:0c:ea:0d:f6:aa:be:65:28:56:b4:be:af:60:25:
                    10:66:89:ac:cf:8f:69:62:3d:6f:0b:55:16:94:ac:
                    c5:3e:9c:88:d3:58:24:75:6a:99:cb:87:a8:92:51:
                    3d:fe:67:12:a7:01:af:60:a5:28:94:60:bb:3a:15:
                    23:8e:5b:44:23:bc:17:63:e1:18:f1:55:59:70:49:
                    ec:4f:65:85:3d:aa:65:ec:1e:e4:51:06:73:c7:b6:
                    98:3e:0e:b0:bf:b2:b4:53:fc:f5:f7:ae:08:ed:18:
                    ab:b1:73:ae:25:a1:c3:b8:94:8a:7b:d0:9e:1c:e6:
                    4e:04:37:4d:dd:85:4f:c0:6e:36:67:58:24:e1:9c:
                    7a:01:cc:31:86:e9:e9:94:57:4d:43:b1:b2:a4:72:
                    7d:71:71:a8:3d:26:8c:52:a1:fc:43:80:3a:43:e3:
                    d6:43:bc:e8:51:df:15:3e:0d:6f:65:be:e6:59:45:
                    87:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D2:3B:01:81:66:92:68:19:99:3F:2C:1E:1C:8E:D1:1A:0E:6C:1D
            X509v3 Authority Key Identifier:
                keyid:78:34:A7:5D:F5:05:64:7C:7F:50:7D:84:C2:E2:40:E9:19:FE:CB:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d09e6b-828c-4dd6-bf5e-a7eea2eebc32/1/eDSnXfUFZHx_UH2EwuJA6Rn-yyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:63:98:e5:71:bc:d7:89:6e:d8:a3:b5:aa:a6:8e:cd:38:98:
         ee:86:d2:5c:ed:19:bc:70:d5:f1:93:11:47:76:7f:2d:77:bd:
         7a:cb:0e:3c:2c:8e:2a:b7:a3:c8:cc:4b:0d:aa:b6:30:78:5f:
         36:69:32:51:b4:16:de:86:5a:29:76:2a:29:9d:96:8d:a7:35:
         42:22:2b:df:3a:ca:da:16:d4:1a:38:87:f9:52:a7:91:db:56:
         de:ec:4e:af:ff:0d:a3:e1:2f:38:a4:ef:53:3b:91:ae:91:3c:
         c0:5b:ae:b0:4a:d0:b2:b7:88:41:ea:72:f0:8c:21:4f:fb:a5:
         c9:a1:0f:33:1e:ac:4d:2e:ca:00:8a:1f:c9:35:bd:f3:5a:09:
         52:de:7d:9c:b0:6b:81:22:82:25:52:46:86:6d:1f:e4:77:1d:
         84:cd:df:75:09:42:b7:c6:91:73:ad:5a:14:1b:2d:74:da:92:
         17:58:86:66:db:92:3f:d1:d9:8d:33:d0:f8:e3:ca:ac:57:58:
         c0:45:45:ea:28:3f:17:b3:77:a5:8b:61:85:58:84:75:90:bf:
         e0:af:09:ec:31:44:97:94:6f:43:75:a7:12:b1:2d:f5:8a:67:
         3d:81:58:a5:1c:41:1d:ab:71:80:4b:60:65:33:1d:76:dd:d4:
         ad:0d:3f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:44 2025 by rpki-client