Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
File:                     ePDYlQwP20Hf1XxZSCglIGEcFsM.mft (raw, json)
Hash identifier:          x0uLlqotiOQ1OTUBm741STu0wZUIMkrtZTBUKkTrrjw=
Subject key identifier:   5D:F2:04:7D:C1:BB:40:D3:CC:21:09:50:D6:7F:4D:02:62:55:BA:0B
Authority key identifier: 78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3
Certificate issuer:       /CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
Certificate serial:       019676E7BDD9515EABE1403A82414F7C547F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
Manifest number:          031F
Signing time:             Sun 27 Apr 2025 11:00:20 +0000
Manifest this update:     Sun 27 Apr 2025 11:00:20 +0000
Manifest next update:     Mon 28 Apr 2025 11:00:20 +0000
Files and hashes:         1: ePDYlQwP20Hf1XxZSCglIGEcFsM.crl (hash: +7+hBydDHsP1UaW9R44KNJnrU4cf8hMsPColtgbz57M=)
                          2: uI19goGgOdv56r27gyNLoOu7fK8.roa (hash: aRMcCZp6MU/f16sSAZBSSpBFMChXSvZTJUWHCtQ3+qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:e7:bd:d9:51:5e:ab:e1:40:3a:82:41:4f:7c:54:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
        Validity
            Not Before: Apr 27 11:00:20 2025 GMT
            Not After : Apr 28 11:00:20 2025 GMT
        Subject: CN=5df2047dc1bb40d3cc210950d67f4d026255ba0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9f:84:bf:45:d0:13:03:aa:10:71:cb:48:4d:
                    8e:29:f7:c6:ec:11:10:f0:9a:f8:81:fe:4c:c4:76:
                    8f:8d:60:40:6b:c4:15:78:83:13:f9:de:c9:c6:cf:
                    c8:06:f9:7b:5d:74:ed:86:d1:c5:1b:6d:e6:4f:7e:
                    da:12:d6:61:60:63:d3:50:12:1f:19:d3:cd:f5:d8:
                    1a:92:92:94:d6:b6:7b:eb:e3:1f:c2:59:86:f9:d1:
                    09:be:61:d3:96:d4:9c:8b:c7:32:98:db:55:dd:72:
                    32:f6:01:ee:6b:d0:50:9c:28:ab:0d:6e:d0:4a:cf:
                    41:27:85:3f:5a:35:84:4c:92:ea:3f:3f:19:d5:9e:
                    9e:4a:de:36:1a:c8:76:59:eb:5d:b1:19:02:6b:e4:
                    8b:c8:60:77:7c:8e:e3:d9:ab:03:78:d6:6d:f7:72:
                    15:64:08:52:dd:5f:aa:f2:fa:0f:df:5f:0e:50:6f:
                    cc:f8:c8:fa:88:a3:f6:f2:38:33:16:eb:e3:83:04:
                    0e:6f:92:5d:76:c9:31:3e:ca:ea:8d:67:8d:e6:39:
                    61:10:28:4c:00:e0:a2:10:a7:8e:fa:0c:48:1c:9a:
                    d6:8c:0b:db:43:14:94:e0:d6:f0:9f:4f:f6:6b:6b:
                    67:2a:8b:05:ae:9a:b6:0e:a2:28:a7:54:60:a1:02:
                    90:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F2:04:7D:C1:BB:40:D3:CC:21:09:50:D6:7F:4D:02:62:55:BA:0B
            X509v3 Authority Key Identifier:
                keyid:78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:0b:74:b8:f6:68:8a:8f:9f:da:f9:83:f2:33:1b:98:a1:9a:
         57:05:ab:d5:e2:38:63:6c:fd:e6:f4:61:4a:15:63:73:04:13:
         3a:2b:e1:06:bd:c7:37:61:d6:1e:80:7c:8b:89:51:65:31:36:
         72:62:fb:ac:c7:7c:f2:75:d6:4e:1e:22:00:9b:b1:cd:d2:a3:
         49:01:21:15:29:ce:f8:4c:e6:b4:b6:76:93:05:b1:0c:0c:92:
         9e:af:e9:8e:ca:64:df:d1:9c:67:8c:3b:b8:f4:fd:a5:64:fb:
         d5:3c:96:9f:91:a8:79:c9:21:f4:0a:ae:65:1c:8c:54:00:23:
         66:b3:18:ca:67:d1:98:d1:bb:25:08:23:e8:6e:01:2c:b7:69:
         d4:3f:9c:b8:9f:7c:93:39:d5:ee:f2:a4:70:8c:fd:5a:71:ca:
         55:28:28:2a:60:04:b8:80:ba:39:10:a3:85:75:96:2f:e8:80:
         88:b5:3a:50:2a:ad:84:27:89:de:03:c5:18:34:af:e3:fc:d3:
         50:37:7c:95:1f:02:1b:4d:02:ae:91:0d:2b:1b:b8:94:ca:2a:
         6e:7a:0f:40:65:2e:77:5b:c4:9c:37:e0:f4:c5:40:50:8b:a1:
         a3:8c:58:70:bb:10:59:47:e4:15:6d:ca:69:7a:22:45:6a:77:
         33:38:ef:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:11:07 2025 by rpki-client