Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
File:                     ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft (raw, json)
Hash identifier:          vfncBD2rEJZCjF1TzjqzxDEVhQ9/IwFOaoacNTwEuRo=
Subject key identifier:   01:D5:7B:E2:CF:66:35:40:A1:41:A6:DF:72:A3:4C:59:AE:2E:D3:D7
Authority key identifier: 10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39
Certificate issuer:       /CN=10b43613535ffaa73d9acc503c71a28fa17b3839
Certificate serial:       019770E33DFC9AAD3C100526820626A02189
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
Manifest number:          0C32
Signing time:             Sun 15 Jun 2025 00:00:30 +0000
Manifest this update:     Sun 15 Jun 2025 00:00:30 +0000
Manifest next update:     Mon 16 Jun 2025 00:00:30 +0000
Files and hashes:         1: ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl (hash: KpxLh2SyoYTA8btW3KKzy51wTA4XkzgR3BaN3qRQDTo=)
                          2: _HSn7eAJ1-GN-PARSBNdWZcI_CM.roa (hash: PSxIhhf7j8l1h9bP9LYjz403TkZ/7uIEMgwPHzFFKaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:70:e3:3d:fc:9a:ad:3c:10:05:26:82:06:26:a0:21:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b43613535ffaa73d9acc503c71a28fa17b3839
        Validity
            Not Before: Jun 15 00:00:30 2025 GMT
            Not After : Jun 16 00:00:30 2025 GMT
        Subject: CN=01d57be2cf663540a141a6df72a34c59ae2ed3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:3d:74:a2:2f:b0:ca:65:c4:dc:e1:6f:81:
                    9f:b0:26:db:da:7e:39:85:22:d8:74:0f:37:93:ce:
                    80:1f:5e:68:78:27:b0:fb:42:34:54:07:83:92:3d:
                    91:48:fe:09:ba:36:24:f7:57:87:35:3c:ef:77:00:
                    33:6b:b9:b0:54:bc:71:99:b4:be:bf:ee:d3:1d:34:
                    90:a1:d0:ae:cc:f8:f8:00:4a:66:a3:e1:9f:1b:5b:
                    e5:21:0d:44:e9:91:0a:79:88:4a:6d:35:6d:75:ec:
                    09:72:9d:f9:9b:29:3d:5c:a2:ed:6a:35:cc:61:a6:
                    cc:bd:f9:9a:5a:85:6e:8a:21:63:4f:63:9e:07:c3:
                    7b:96:b1:ad:c2:86:cc:87:06:e4:b4:40:1d:e2:b1:
                    1b:6d:19:2e:15:35:92:c2:74:48:93:87:5e:57:3f:
                    48:10:ed:01:ec:bf:f9:bf:8c:0c:9e:4a:c7:79:38:
                    27:78:37:21:d9:7a:d2:42:f0:a0:6f:15:24:5b:39:
                    c1:54:b4:19:e6:0d:11:43:df:3f:f4:10:38:93:43:
                    97:54:a0:fa:03:93:14:2a:dd:d1:6c:e7:0b:70:af:
                    c5:3a:82:6a:e3:7c:5e:7a:3e:50:27:59:28:21:e7:
                    45:7a:9d:1c:51:2b:c0:41:25:e8:a1:67:e1:64:c8:
                    57:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D5:7B:E2:CF:66:35:40:A1:41:A6:DF:72:A3:4C:59:AE:2E:D3:D7
            X509v3 Authority Key Identifier:
                keyid:10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:dc:e0:6f:d7:57:37:51:cd:6a:0d:9b:63:cd:1c:47:82:98:
         15:a3:7a:f3:a5:ff:85:93:f2:8b:6a:39:69:59:ff:8f:7e:70:
         a0:13:d3:ca:11:49:7d:04:f9:32:36:22:19:d6:98:52:9a:20:
         18:e7:cb:0a:bc:4d:59:06:3e:65:49:5a:25:24:a4:31:25:e5:
         93:44:50:9e:56:9c:e9:1f:73:79:c5:ea:9f:06:e4:bd:2c:24:
         c3:a9:a7:e4:c3:62:1d:69:9d:50:7e:78:75:62:37:67:aa:a4:
         bc:23:a2:c8:4e:a7:22:06:cf:f0:9b:cf:b5:b3:65:d0:9c:16:
         d5:06:30:30:7f:58:54:30:10:f5:c5:07:1c:70:f7:76:7d:d4:
         ac:a8:ac:9d:a6:c0:74:59:23:40:89:f0:9d:1b:ba:fa:45:42:
         8a:db:bb:44:80:ff:a8:ed:34:41:ca:fa:84:f5:67:57:63:a5:
         01:52:6b:ca:45:d4:2b:0d:f0:f3:a0:dc:48:4c:c3:82:6c:37:
         39:8f:b1:27:67:04:1e:54:dd:6a:bc:0c:08:eb:52:d4:37:b6:
         ac:51:10:3d:53:f9:ca:45:e8:5c:f9:72:a5:99:a9:ab:a5:2c:
         d0:2c:6d:cf:ab:ff:38:82:4c:8a:7d:d8:f9:77:dc:c0:75:55:
         b8:7c:58:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:21:01 2025 by rpki-client