Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
File:                     EdJ3EZBuQdC_164BvAo40-eeJgE.mft (raw, json)
Hash identifier:          ERb/Gfptyu3tKXov8NbifikPPtE/kIveG4xi7crN5mM=
Subject key identifier:   29:30:8E:2D:6B:9E:AD:CA:01:5D:8A:53:E7:B1:41:A7:8E:54:7B:C8
Authority key identifier: 11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01
Certificate issuer:       /CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
Certificate serial:       01987C0A0E3BC392E3584049814A2A3A0BEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
Manifest number:          161E
Signing time:             Tue 05 Aug 2025 21:01:30 +0000
Manifest this update:     Tue 05 Aug 2025 21:01:30 +0000
Manifest next update:     Wed 06 Aug 2025 21:01:30 +0000
Files and hashes:         1: 2RYqLOOOCbthDUAcjKq8EsDLRUQ.roa (hash: Q1LOM4u7XAO8escJ6IGTLdV2wb9RNCfCJR9rh+j96Ys=)
                          2: EdJ3EZBuQdC_164BvAo40-eeJgE.crl (hash: Xh4jsJB0jUvKv33sSvIU847FilCkfUA/7Jcwk8vDZ/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:0a:0e:3b:c3:92:e3:58:40:49:81:4a:2a:3a:0b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d27711906e41d0bfd7ae01bc0a38d3e79e2601
        Validity
            Not Before: Aug  5 21:01:30 2025 GMT
            Not After : Aug  6 21:01:30 2025 GMT
        Subject: CN=29308e2d6b9eadca015d8a53e7b141a78e547bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:71:64:da:ac:68:fc:c3:96:dd:1c:72:9d:5f:
                    2d:6b:43:2e:71:b6:44:0f:f1:2a:0d:28:f2:58:84:
                    e6:f7:fa:34:3a:bf:02:72:a5:c3:c0:96:cf:c5:d2:
                    c2:f6:ec:29:f0:f5:d8:8f:c4:90:4b:26:0f:5b:59:
                    1d:5c:5f:75:b1:9a:7a:75:c8:1c:c4:6d:3f:c7:12:
                    9b:91:5e:2e:00:2c:91:ff:4a:10:33:36:ae:1e:86:
                    46:c8:a6:10:91:7b:91:12:3f:c5:d6:ba:a0:a0:ac:
                    b3:a3:f2:b8:b6:ca:e0:3f:8a:18:94:8f:26:2e:9b:
                    44:1f:df:86:f9:0d:6b:ba:a2:fc:9f:54:1f:8e:77:
                    f2:7b:f1:f4:29:10:a4:03:ce:51:ef:c2:0e:9d:75:
                    84:36:94:a0:66:38:6b:30:2b:8d:0f:fb:a0:00:8c:
                    47:ec:42:4b:1b:d4:9f:5b:6d:5c:7a:41:e7:fc:90:
                    76:ce:29:8f:3d:95:21:45:c0:b9:fd:0c:66:a4:ad:
                    e8:39:7a:47:c0:a1:5d:cf:16:b1:f4:11:f2:a2:3f:
                    d1:e6:c6:9b:b2:f3:fc:a1:28:48:40:df:b0:79:cc:
                    a7:66:c7:f4:0b:4b:b9:1e:e4:0d:72:a5:47:b7:a4:
                    88:fc:a2:92:09:25:5b:4e:63:30:02:5a:2d:d1:3f:
                    3a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:30:8E:2D:6B:9E:AD:CA:01:5D:8A:53:E7:B1:41:A7:8E:54:7B:C8
            X509v3 Authority Key Identifier:
                keyid:11:D2:77:11:90:6E:41:D0:BF:D7:AE:01:BC:0A:38:D3:E7:9E:26:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdJ3EZBuQdC_164BvAo40-eeJgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/75ad67-6f48-49c5-bf4a-faa74127dc78/1/EdJ3EZBuQdC_164BvAo40-eeJgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:ba:52:64:1b:fa:41:3b:e7:85:e7:50:39:26:fe:2b:95:61:
         61:b1:4a:1e:3b:2a:67:70:71:a2:9a:9f:8d:27:af:8f:80:6e:
         97:ed:32:08:a5:09:6d:ed:c9:3f:f5:80:dd:a6:45:67:dd:94:
         5a:80:ec:25:9a:3a:4b:c9:30:bc:0d:a8:86:3c:55:ad:16:9a:
         cc:c1:c7:04:04:c8:49:09:1d:24:26:4b:14:53:65:cf:6b:f1:
         b3:94:c5:71:8c:b8:bd:d2:3b:c6:d0:ed:c4:1e:b3:37:e4:90:
         a8:96:31:52:68:7d:fe:c9:35:8a:4a:58:cd:30:3f:b6:59:fa:
         bd:fb:38:f4:22:98:48:a5:bc:73:76:0a:0c:43:a3:59:ab:6c:
         ea:cc:06:2a:d1:86:69:a6:97:9a:c0:64:4a:e1:a7:3e:f3:46:
         8c:45:49:ae:79:db:a0:68:7a:7e:19:aa:4e:e2:e1:e9:74:a2:
         7a:78:59:04:3e:4f:c6:93:a1:22:f5:61:50:a2:42:5f:c6:ba:
         98:80:bc:40:31:27:dc:17:2c:ed:8e:d0:2c:de:7b:30:3e:b0:
         35:a4:0c:78:c1:3d:8d:78:95:c5:d0:0e:5d:46:94:93:41:e4:
         ae:11:65:85:d6:18:f1:aa:32:ff:a2:65:e7:d7:57:80:2e:82:
         b3:1a:85:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:03:01 2025 by rpki-client