Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
File:                     ePDYlQwP20Hf1XxZSCglIGEcFsM.mft (raw, json)
Hash identifier:          15OaJVrtro1Rj9wLOnw0v4MLuQF8rNJanXxARbkSNgI=
Subject key identifier:   E9:D4:48:B4:54:CD:EB:4F:91:50:6B:93:34:B8:4B:36:52:A2:DB:97
Authority key identifier: 78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3
Certificate issuer:       /CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
Certificate serial:       019874BD97D736C7E2B8C4F21C0532868D83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
Manifest number:          0427
Signing time:             Mon 04 Aug 2025 11:00:38 +0000
Manifest this update:     Mon 04 Aug 2025 11:00:38 +0000
Manifest next update:     Tue 05 Aug 2025 11:00:38 +0000
Files and hashes:         1: ePDYlQwP20Hf1XxZSCglIGEcFsM.crl (hash: gap53POSnN8Ls3NS/yUxgC3WmzKdYoyt7KrURalO9Lo=)
                          2: uI19goGgOdv56r27gyNLoOu7fK8.roa (hash: aRMcCZp6MU/f16sSAZBSSpBFMChXSvZTJUWHCtQ3+qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:bd:97:d7:36:c7:e2:b8:c4:f2:1c:05:32:86:8d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78f0d8950c0fdb41dfd57c5948282520611c16c3
        Validity
            Not Before: Aug  4 11:00:38 2025 GMT
            Not After : Aug  5 11:00:38 2025 GMT
        Subject: CN=e9d448b454cdeb4f91506b9334b84b3652a2db97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:25:cd:27:b8:7c:85:f6:d2:ce:9b:85:7a:8b:
                    71:c4:cd:9d:31:9c:c0:59:9c:8b:80:e3:30:1f:cd:
                    12:e3:26:43:dc:d4:03:7c:ec:03:50:e3:e7:9a:86:
                    9f:39:c5:2c:b7:de:bb:63:3f:0a:bb:de:94:58:1a:
                    c1:f0:2e:28:40:88:21:71:b9:92:b3:45:9c:48:f0:
                    c6:55:91:45:3f:b2:5d:80:2f:e2:bd:38:da:2c:56:
                    f3:27:5b:a3:bb:c1:e4:eb:6f:95:4d:37:6c:09:63:
                    e7:05:6f:8a:e4:e3:47:ba:9a:d8:7c:f2:73:e0:17:
                    01:eb:a1:5d:e6:90:a8:ad:b1:1e:00:65:e2:eb:cc:
                    5e:f4:ae:f1:86:b8:69:97:7b:f3:62:17:96:ba:56:
                    c2:ad:bd:de:b3:e0:ba:54:39:10:bd:dc:0f:0e:55:
                    65:67:b1:13:c5:2d:6a:30:9e:34:4a:31:54:b6:9b:
                    8c:30:3d:6a:8c:fb:7f:4e:c2:e4:fe:28:89:3a:62:
                    31:d5:9b:68:40:af:7c:56:d1:4a:99:fd:6d:18:72:
                    51:fd:04:2c:d0:83:70:d8:16:0e:e3:67:b4:3a:99:
                    a0:01:a0:d9:84:e1:1e:bf:5e:05:b4:21:db:4e:d1:
                    8d:9d:d8:b8:60:04:15:2b:2d:1c:c7:db:4d:a7:91:
                    68:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D4:48:B4:54:CD:EB:4F:91:50:6B:93:34:B8:4B:36:52:A2:DB:97
            X509v3 Authority Key Identifier:
                keyid:78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:cb:4b:5a:1b:f6:ae:09:18:be:3c:b0:e2:a0:16:45:50:f9:
         99:99:59:35:6a:51:a2:a3:de:7f:72:cc:d1:05:f9:85:95:eb:
         c8:22:a6:3c:25:8b:45:02:c6:78:72:f1:02:3f:25:f6:0b:74:
         13:04:e1:84:18:57:77:22:74:26:db:6c:dd:f2:ec:65:b4:4e:
         24:d3:8f:34:c1:14:71:b6:bf:3f:87:d1:dd:d2:01:3f:4a:e6:
         3e:c7:c8:81:5a:92:45:a9:f2:45:f1:73:3f:96:1b:36:a3:88:
         80:c5:a4:aa:01:c0:bf:88:e0:16:65:26:19:d2:1a:35:c0:6d:
         4c:7d:6b:51:52:23:e5:2c:fc:2e:df:11:43:11:f2:2d:59:01:
         0b:e6:58:86:a9:0f:ef:e8:0e:1b:69:85:13:d0:20:7b:7f:a3:
         a1:8d:7e:12:53:a3:26:d0:19:f7:93:98:dc:47:d1:c9:87:b0:
         d2:06:3d:98:82:2d:0b:05:a1:d5:20:53:88:58:20:51:53:d7:
         2e:6f:ee:09:05:08:a5:6e:a7:4f:01:19:d8:e7:c4:c6:ff:0b:
         fa:88:f4:85:53:f5:2f:47:1a:26:db:91:3b:f5:56:78:89:38:
         b1:f0:03:11:e3:4f:73:b3:4e:43:95:09:fc:c4:e3:d6:14:16:
         8b:5e:55:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:19 2025 by rpki-client