Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
File:                     EDQGi16fcxQnfivpcmxzITGxdWw.mft (raw, json)
Hash identifier:          A5sHrbNnPJmKznoVjlYE9diVfWqDhon+0gkxhetUTXE=
Subject key identifier:   3C:CB:AE:48:38:21:90:E8:46:2B:88:55:00:1C:9F:D9:2C:8D:6C:B5
Authority key identifier: 10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
Certificate issuer:       /CN=1034068b5e9f7314277e2be9726c732131b1756c
Certificate serial:       019A4F2AE83DC79A948A492B1B979DC88B83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
Manifest number:          1181
Signing time:             Tue 04 Nov 2025 14:00:03 +0000
Manifest this update:     Tue 04 Nov 2025 14:00:03 +0000
Manifest next update:     Wed 05 Nov 2025 14:00:03 +0000
Files and hashes:         1: EDQGi16fcxQnfivpcmxzITGxdWw.crl (hash: qjsx0SOojfOVM8dIwU49cv/vr26JPgb5bMrjZfNcWso=)
                          2: EkuLKLwBZy9Ew-cW-qDf_L2DQZ0.roa (hash: wabdO88bjoZkvWTZ1oDgrViKiBuLG+cwDnC+1ngAcnE=)
                          3: _u_l27IwldJdamRG8nCKm7qzuG4.roa (hash: 3u0NeIL8w+up1AeuOPP++YzT/XlJSwTH6E2UXyQIQ2g=)
                          4: fdHmNhmeaGN63Rfej1kx6Ds_ug4.roa (hash: bsbovLdKgWXWubLDq3efB8YJNM57kBg5PR8i1Ba+Dfs=)
                          5: qlvT_rfUG4ejf4QxIhtwR0KVBaU.roa (hash: cEPHwqf9ZGQy4f5t4JvJXVhOqo0mssjCD9DkTCC84C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 14:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:2a:e8:3d:c7:9a:94:8a:49:2b:1b:97:9d:c8:8b:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1034068b5e9f7314277e2be9726c732131b1756c
        Validity
            Not Before: Nov  4 14:00:03 2025 GMT
            Not After : Nov  5 14:00:03 2025 GMT
        Subject: CN=3ccbae48382190e8462b8855001c9fd92c8d6cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a6:84:ae:6d:cd:35:34:8f:9a:30:48:7e:82:
                    3d:f7:58:9a:41:69:64:96:b0:4a:ce:e3:76:ac:53:
                    21:9d:25:bc:63:4c:eb:c6:f7:bd:3c:08:9d:ef:15:
                    16:8c:85:c4:61:e7:29:82:9c:e1:9d:cd:14:30:ca:
                    0f:86:66:0c:dd:c9:5c:bd:9e:d5:22:22:41:ba:77:
                    a3:ad:fa:e4:42:56:b7:9e:39:78:b5:3a:0b:0e:fb:
                    fb:55:c2:56:d1:b1:d7:f2:0a:bb:3c:1a:ee:a3:7d:
                    a7:a8:2a:a0:16:27:33:08:d6:87:32:84:c9:dd:9e:
                    c9:61:af:f8:4a:c7:81:c4:41:0d:1b:df:06:ca:46:
                    09:5c:a6:3e:9e:9d:74:33:66:a1:98:6b:02:7f:bf:
                    29:de:9a:f0:61:4e:2d:78:b7:01:76:6f:0c:de:8b:
                    0f:71:77:2c:b2:d7:56:ee:8c:68:52:66:89:7f:d1:
                    23:6b:c0:f2:e9:78:86:0b:e5:f2:9f:7c:86:9b:2e:
                    67:6f:f3:0a:ce:dd:53:de:f0:8c:7c:06:20:d3:72:
                    d4:2f:c1:c8:6f:21:33:8f:83:61:96:78:9b:38:a9:
                    d5:84:a5:cc:c2:9c:a0:d6:13:69:4b:fd:f5:df:7f:
                    49:60:f5:af:f6:61:f0:3b:c3:9d:a0:f2:af:73:4f:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CB:AE:48:38:21:90:E8:46:2B:88:55:00:1C:9F:D9:2C:8D:6C:B5
            X509v3 Authority Key Identifier:
                keyid:10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:fb:68:ab:4f:94:d1:a7:44:07:d2:d4:fc:3b:f9:f5:83:6e:
         f8:b0:56:2d:d0:49:33:05:18:98:05:f6:29:f6:18:42:89:bc:
         5a:6f:45:a9:94:20:8a:7e:8d:ff:d1:8d:8d:0f:0f:17:93:f6:
         19:5b:e9:29:d4:2e:8e:e9:a9:8c:c5:6c:a4:e3:01:a3:38:ef:
         9d:58:49:57:22:b1:f0:e4:03:3d:98:98:b6:1a:6e:a0:d5:41:
         69:8d:41:03:3d:10:06:e1:13:43:77:d9:7a:4d:fe:34:62:97:
         1f:89:d6:1c:4c:a2:2a:63:75:94:fd:93:1f:68:a3:fe:dc:c1:
         95:ca:27:91:81:0a:31:87:e7:e9:00:23:77:91:78:32:27:7c:
         fd:7a:1c:21:65:6c:37:e3:d4:b9:9d:36:50:87:b5:85:f9:3e:
         81:3e:ba:97:04:ab:a4:a9:fd:59:13:a7:a6:76:b2:f1:48:c8:
         f0:6d:01:44:d2:81:cd:b3:2c:92:33:fc:6a:b7:7d:ad:7d:09:
         de:97:c7:39:ac:3c:a7:5a:7a:12:4f:4e:1d:19:81:cf:c7:64:
         36:00:61:9d:51:0a:17:04:86:60:cc:3e:9c:37:21:f3:b4:de:
         ee:ed:63:d5:dc:57:fe:20:6e:da:60:b6:61:ca:29:91:6d:b4:
         16:f2:e1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:04:55 2025 by rpki-client