Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
File:                     ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft (raw, json)
Hash identifier:          0AQvYWz5XjTIORVFd89LW9XqaL3W+cs9hytPWoo3G0Q=
Subject key identifier:   CF:9E:65:65:4A:91:F9:D8:88:D7:F8:72:79:F1:FC:51:F7:6C:4B:90
Authority key identifier: 10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39
Certificate issuer:       /CN=10b43613535ffaa73d9acc503c71a28fa17b3839
Certificate serial:       0194BB9726A062C5A84AB5D25E2C518967DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
Manifest number:          0ACB
Signing time:             Fri 31 Jan 2025 09:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 09:00:32 +0000
Files and hashes:         1: ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl (hash: 1Ml13vFhIM36lJ46yKOqi/q45G74fRi4jEAwU1sh1Ls=)
                          2: _HSn7eAJ1-GN-PARSBNdWZcI_CM.roa (hash: PSxIhhf7j8l1h9bP9LYjz403TkZ/7uIEMgwPHzFFKaA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 09:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:97:26:a0:62:c5:a8:4a:b5:d2:5e:2c:51:89:67:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b43613535ffaa73d9acc503c71a28fa17b3839
        Validity
            Not Before: Jan 31 09:00:32 2025 GMT
            Not After : Feb  1 09:00:32 2025 GMT
        Subject: CN=cf9e65654a91f9d888d7f87279f1fc51f76c4b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e3:04:7f:0c:48:20:51:fc:f8:fe:6c:9b:b4:
                    3f:8f:74:d1:d8:5d:87:49:bf:97:f2:f7:0b:d5:d8:
                    e8:66:e0:bc:9c:58:fc:af:ce:ec:8a:96:7f:76:42:
                    35:de:a2:69:15:71:76:63:ab:bb:e2:5a:f6:90:67:
                    19:fe:37:c3:87:39:60:08:90:69:fe:4c:c5:6f:89:
                    1d:9d:c1:78:14:77:73:3d:37:59:f6:f0:c6:9e:92:
                    60:c4:c2:af:53:1d:ae:de:32:e8:6f:08:9d:10:b9:
                    46:76:9f:7f:12:78:58:11:12:f0:67:0e:5d:e7:a8:
                    c1:c9:fb:51:86:b9:c7:13:e1:52:dd:d7:e6:a7:38:
                    0b:68:b6:60:90:d2:cc:d3:2a:d5:04:f5:21:0c:c1:
                    40:35:ec:d2:f6:ed:d7:05:b6:95:4f:a0:8e:35:c9:
                    92:0a:ab:5c:db:14:36:fc:ad:ed:25:6c:21:74:11:
                    14:ea:35:e8:c0:cf:48:dc:92:13:60:26:f5:15:61:
                    d6:ce:4e:d1:9f:a4:ae:e5:75:a1:fd:71:b9:f0:e9:
                    6b:ad:61:4a:b4:27:09:ac:d3:71:b5:b0:49:7c:4a:
                    4d:08:0a:23:10:3a:5b:3c:f6:7b:49:0c:26:4b:d2:
                    56:e0:cd:78:1a:44:e2:f4:9d:ec:ed:fc:d9:5e:56:
                    69:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9E:65:65:4A:91:F9:D8:88:D7:F8:72:79:F1:FC:51:F7:6C:4B:90
            X509v3 Authority Key Identifier:
                keyid:10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:43:f6:8b:4c:96:5b:b8:87:d2:03:5c:4f:86:bd:11:ea:c2:
         7e:82:e6:55:aa:00:43:9b:0b:c6:83:2c:5a:07:c6:5c:e5:50:
         2d:bc:a9:3e:45:7a:8c:36:67:8e:ae:54:32:5b:c4:21:bc:47:
         95:35:6c:22:a5:5e:d4:c1:4e:09:80:5c:d7:cb:c0:64:b4:61:
         ce:03:d5:fe:a8:37:9c:ba:57:01:72:fd:28:95:2d:93:b4:f3:
         74:77:80:5a:9f:63:e6:1c:25:4b:9a:57:ef:2a:7a:b3:38:aa:
         dd:4d:8d:ab:c2:53:b1:d2:8d:47:a8:84:ac:54:a5:c4:38:e3:
         85:73:4e:de:34:74:d9:38:90:4d:20:59:d8:e0:fd:44:16:54:
         7e:cd:5e:f7:3a:85:0f:87:a2:91:31:2a:fe:64:19:15:a5:f6:
         2b:35:ab:c3:9c:82:fc:54:00:67:a5:cb:ca:10:bf:47:4f:03:
         be:96:5c:46:13:25:46:56:9f:7a:df:d0:f4:0b:9c:79:af:bb:
         ee:36:75:bd:e7:ec:35:59:bb:cc:0c:2c:fe:7d:b7:25:3f:46:
         6b:08:3d:c6:36:94:6f:8f:7c:8c:58:4e:4c:a8:5c:35:d1:ff:
         20:f8:99:b2:8a:f9:6e:20:05:87:28:8a:f4:d8:f5:44:df:8c:
         f9:17:6e:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lyagYsWoSrXSXixRiWfeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYjQzNjEzNTM1ZmZhYTczZDlhY2M1MDNjNzFhMjhmYTE3
YjM4MzkwHhcNMjUwMTMxMDkwMDMyWhcNMjUwMjAxMDkwMDMyWjAzMTEwLwYDVQQD
EyhjZjllNjU2NTRhOTFmOWQ4ODhkN2Y4NzI3OWYxZmM1MWY3NmM0YjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOMEfwxIIFH8+P5sm7Q/j3TR2F2H
Sb+X8vcL1djoZuC8nFj8r87sipZ/dkI13qJpFXF2Y6u74lr2kGcZ/jfDhzlgCJBp
/kzFb4kdncF4FHdzPTdZ9vDGnpJgxMKvUx2u3jLobwidELlGdp9/EnhYERLwZw5d
56jByftRhrnHE+FS3dfmpzgLaLZgkNLM0yrVBPUhDMFANezS9u3XBbaVT6CONcmS
Cqtc2xQ2/K3tJWwhdBEU6jXowM9I3JITYCb1FWHWzk7Rn6Su5XWh/XG58OlrrWFK
tCcJrNNxtbBJfEpNCAojEDpbPPZ7SQwmS9JW4M14GkTi9J3s7fzZXlZphQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+eZWVKkfnYiNf4cnnx/FH3bEuQMB8GA1UdIwQY
MBaAFBC0NhNTX/qnPZrMUDxxoo+hezg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yZWU3MWItOGZmZS00ZWI2LTk0MzQt
Y2YzYzFhNzllNjM0LzEvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8yZWU3MWItOGZmZS00ZWI2LTk0MzQtY2YzYzFhNzllNjM0
LzEvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEP2i0yW
W7iH0gNcT4a9EerCfoLmVaoAQ5sLxoMsWgfGXOVQLbypPkV6jDZnjq5UMlvEIbxH
lTVsIqVe1MFOCYBc18vAZLRhzgPV/qg3nLpXAXL9KJUtk7TzdHeAWp9j5hwlS5pX
7yp6sziq3U2Nq8JTsdKNR6iErFSlxDjjhXNO3jR02TiQTSBZ2OD9RBZUfs1e9zqF
D4eikTEq/mQZFaX2KzWrw5yC/FQAZ6XLyhC/R08DvpZcRhMlRlafet/Q9Aucea+7
7jZ1vefsNVm7zAws/n23JT9Gawg9xjaUb498jFhOTKhcNdH/IPiZsor5biAFhyiK
9Nj1RN+M+RduUA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:35:58 2025 by rpki-client on console-fra.rpki-client.org