Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
File:                     ePDYlQwP20Hf1XxZSCglIGEcFsM.mft (raw, json)
Hash identifier:          gpz7vnLGz3AEAl9ws9TuHsRE50CJxb46VH3z4SOBGVU=
Subject key identifier:   36:D9:4F:D7:B3:BD:C1:F8:E2:A7:4C:7D:3A:AC:0D:20:59:A5:D1:3A
Authority key identifier: 78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3
Certificate issuer:       /CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
Certificate serial:       01976C2AA3A74CD2B32646D03018DCEA30D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
Manifest number:          039E
Signing time:             Sat 14 Jun 2025 02:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:23 +0000
Files and hashes:         1: ePDYlQwP20Hf1XxZSCglIGEcFsM.crl (hash: wQiIDTDie2em6Uuc3Bmz48lX9bKbrBrnk7Nt0C0Oez4=)
                          2: uI19goGgOdv56r27gyNLoOu7fK8.roa (hash: aRMcCZp6MU/f16sSAZBSSpBFMChXSvZTJUWHCtQ3+qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:a3:a7:4c:d2:b3:26:46:d0:30:18:dc:ea:30:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
        Validity
            Not Before: Jun 14 02:00:23 2025 GMT
            Not After : Jun 15 02:00:23 2025 GMT
        Subject: CN=36d94fd7b3bdc1f8e2a74c7d3aac0d2059a5d13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:89:1a:8f:09:2f:84:28:ff:2c:a9:4e:11:9c:
                    82:d3:17:6d:b5:cc:37:0d:58:7c:aa:62:79:ed:ee:
                    b0:63:3d:bf:40:73:b5:3b:fc:d6:57:eb:b5:83:82:
                    4c:4c:b4:f4:e7:99:77:cb:ff:15:10:6e:07:41:22:
                    a8:ad:12:84:17:8d:f7:b9:64:b8:ef:b0:78:48:63:
                    1d:32:ee:15:4b:09:fb:ad:4a:a8:e9:b2:76:76:9f:
                    87:19:5d:22:14:fc:87:03:0c:a8:e4:5a:9a:d0:42:
                    1a:f0:ad:fa:dc:1a:f8:c6:84:7c:b9:9a:59:1b:93:
                    5c:6e:cd:88:78:6f:4d:13:c6:7e:b9:12:63:b3:5a:
                    b1:5b:2c:82:3a:88:63:49:ba:35:e6:43:20:1a:9a:
                    ea:2e:df:7c:4d:6a:7d:4a:2b:8a:f9:21:d2:29:eb:
                    17:7c:29:d7:23:94:fb:af:85:d4:8b:37:29:42:6f:
                    87:e1:89:90:67:c0:49:0c:14:d9:5a:84:f0:49:66:
                    a0:85:1a:ba:e8:ff:7c:ab:b3:9f:01:ab:f5:e5:e2:
                    83:7e:de:ef:8e:7c:b6:9e:2f:8c:29:3d:34:83:fe:
                    a5:7e:59:53:59:3f:dc:0f:c7:5b:9d:ca:56:38:90:
                    5c:5f:18:91:69:74:1a:56:97:e8:b2:88:a1:98:f3:
                    88:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D9:4F:D7:B3:BD:C1:F8:E2:A7:4C:7D:3A:AC:0D:20:59:A5:D1:3A
            X509v3 Authority Key Identifier:
                keyid:78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:25:70:e8:69:a5:4d:91:a6:a8:12:4a:c4:10:83:cb:46:f3:
         1e:08:e3:0e:4a:9d:99:0e:b2:66:b7:4e:89:31:e2:7a:3d:e2:
         ed:ee:4d:78:9b:e0:f8:19:72:e7:75:e0:22:b8:97:d8:57:e8:
         42:d7:42:64:50:b8:cf:94:7e:41:74:6b:de:6f:83:49:dd:35:
         f0:70:81:8d:01:47:59:66:39:b7:9a:10:23:28:78:67:62:29:
         3b:19:6a:f1:38:31:a5:65:03:ad:50:1d:48:fa:28:de:95:4a:
         56:d1:10:1d:c6:da:77:6d:37:d9:34:91:51:0d:95:6e:f0:d0:
         13:95:37:4e:f5:45:3d:08:45:e4:0b:93:39:c6:cd:94:d1:29:
         7a:47:1a:31:1b:b4:54:4b:d2:84:31:8e:29:88:30:25:af:b5:
         65:3d:e2:0a:07:bf:ca:af:bd:27:1d:91:35:70:dd:28:ad:25:
         09:d6:d8:0e:fe:41:1e:3d:12:5d:52:d8:cd:5f:1e:64:50:53:
         da:e7:6c:76:3e:fa:9c:22:46:4d:2a:5b:50:27:a7:de:1e:fc:
         bd:39:59:20:2e:d0:81:2a:4b:dc:53:da:cf:2b:b2:f6:4e:79:
         25:c0:37:60:5e:41:ed:7c:50:a6:6f:68:2d:5e:f4:c3:d5:00:
         41:50:99:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:31:25 2025 by rpki-client