Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft
File:                     eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft (raw, json)
Hash identifier:          DrjjdFLSOX0kf9kyv3W0mgQGQOV3Agva1JFmvTGKV/4=
Subject key identifier:   D7:F7:8D:44:13:25:A7:28:D3:4E:7E:FC:E9:DE:0A:1C:F1:CB:15:98
Authority key identifier: 78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
Certificate issuer:       /CN=78356c6a831680e9b8b7c95514953007a9407e87
Certificate serial:       019A5006E07D1B886B3A6E896140A82F2701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft
Manifest number:          1711
Signing time:             Tue 04 Nov 2025 18:00:19 +0000
Manifest this update:     Tue 04 Nov 2025 18:00:19 +0000
Manifest next update:     Wed 05 Nov 2025 18:00:19 +0000
Files and hashes:         1: Fbl_8WGI1C7f1wPZHGK7S3gLZaQ.roa (hash: NL0QIjIou+OxKzKIsDqTkRFSewfY3uHwVOF761s8FKo=)
                          2: STGvBouar9-_4KYmVGhdFg2fuj0.roa (hash: 0L4bIhYk79YDWSI93Y5CMGJpZpUgCe4tWd+HGUyb22o=)
                          3: eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl (hash: bn1yMJ9FcTCP9sDzX9DqTL9fyQFY39FxNXnuAXv6G0Q=)
                          4: zCtx59_ZwlzRE7DKu9zUivxguyc.roa (hash: puOdWgvEY5hDLgK8wcJBY5n9pcVFB81VWlQ827QCG8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:06:e0:7d:1b:88:6b:3a:6e:89:61:40:a8:2f:27:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78356c6a831680e9b8b7c95514953007a9407e87
        Validity
            Not Before: Nov  4 18:00:19 2025 GMT
            Not After : Nov  5 18:00:19 2025 GMT
        Subject: CN=d7f78d441325a728d34e7efce9de0a1cf1cb1598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9a:e4:f9:92:7c:bf:2a:e9:9d:34:2f:32:b9:
                    44:5f:cf:82:9c:bd:47:d6:1e:ee:ac:75:ca:da:98:
                    fc:1e:98:8e:c6:32:c8:1a:d5:c8:a3:19:c9:d7:ae:
                    ed:76:b3:e9:2d:89:ec:5c:9d:b0:57:84:b2:f8:2c:
                    11:73:3d:16:c7:c5:9f:c6:0e:7f:4c:1f:bc:5f:ff:
                    dd:7a:68:db:4a:36:34:02:dd:8d:ff:bf:b9:09:a0:
                    32:fe:9b:1c:cb:a0:11:7a:b9:ed:2d:3c:ab:61:90:
                    7f:42:82:63:5b:10:5f:1e:83:e7:17:c1:a7:6d:62:
                    1e:1e:ef:eb:4d:40:07:bf:c0:a3:9c:30:92:b4:c3:
                    72:0e:17:13:43:34:61:13:ae:f4:67:ae:bc:30:82:
                    35:f0:cc:c4:99:e1:f6:13:1a:24:2c:18:22:f5:91:
                    1f:be:3e:41:26:63:b4:d8:d5:19:94:86:15:cd:a7:
                    e7:64:89:e0:7e:e0:5c:ab:8e:77:4e:ec:1a:c3:b2:
                    32:60:6f:35:89:3d:76:66:82:05:4c:20:7d:26:7d:
                    f6:f0:5b:da:76:d0:38:4b:4c:5f:08:20:a1:e2:bb:
                    c1:2b:bb:52:cc:dc:2c:f7:23:c9:fe:d4:33:64:3c:
                    56:e3:90:33:90:8e:8e:8b:34:13:ee:65:77:f2:89:
                    7f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F7:8D:44:13:25:A7:28:D3:4E:7E:FC:E9:DE:0A:1C:F1:CB:15:98
            X509v3 Authority Key Identifier:
                keyid:78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:bd:15:ad:de:19:fb:c4:04:73:f5:92:9c:ce:f4:aa:8a:ec:
         17:8b:d3:12:dd:17:db:88:af:20:0d:10:1d:b2:bf:fa:2f:4a:
         e8:ba:4b:0e:a5:32:db:e2:50:bb:a8:b4:75:d7:47:5a:af:7e:
         76:73:cc:12:31:f7:82:59:87:64:7a:72:5a:e1:0d:76:fd:76:
         1a:8f:31:ea:00:b1:bf:df:e0:d5:20:65:a4:c7:7c:fe:be:5b:
         29:14:c2:3f:ce:57:ce:03:91:c4:63:ee:91:76:90:5f:4d:00:
         31:25:46:00:47:a2:b4:8a:e1:8c:06:7f:d9:70:cb:78:91:fa:
         3d:df:31:dc:29:0b:b6:79:8d:46:62:4a:55:c3:a4:aa:a3:37:
         d5:94:a3:e2:88:e2:d6:6e:5d:c9:ff:ff:01:89:80:ae:51:45:
         4e:a0:2f:87:82:d3:c5:92:0b:e3:c6:d3:a8:29:d0:bb:fd:5b:
         39:05:18:09:ea:a3:77:aa:59:bb:0c:9c:5a:9a:b9:51:b5:07:
         5d:4d:32:28:3f:e7:47:96:6f:9c:ba:2e:9f:c1:21:d4:45:90:
         64:e6:0e:8c:76:1c:39:46:fc:16:19:d2:fb:e5:dd:c6:a4:37:
         3b:8f:60:1d:d9:b3:17:34:df:22:13:3f:04:ea:32:53:ba:a9:
         eb:95:0d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:06 2025 by rpki-client