Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
File:                     ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft (raw, json)
Hash identifier:          uhyNaozMQm6th3AN+pEvBU76F6PCCFf1YdV8xSs7A6o=
Subject key identifier:   C8:47:FA:34:D7:A8:94:49:DD:9B:60:C5:55:22:4C:FB:E8:0B:05:60
Authority key identifier: 10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39
Certificate issuer:       /CN=10b43613535ffaa73d9acc503c71a28fa17b3839
Certificate serial:       01988EEB85774E79C2E841C62090E89E83C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
Manifest number:          0CC6
Signing time:             Sat 09 Aug 2025 13:00:56 +0000
Manifest this update:     Sat 09 Aug 2025 13:00:56 +0000
Manifest next update:     Sun 10 Aug 2025 13:00:56 +0000
Files and hashes:         1: ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl (hash: 8vwG38TFJgg2LtBC20pyf7rCrlGTA06ZtjFWz5lR9O0=)
                          2: _HSn7eAJ1-GN-PARSBNdWZcI_CM.roa (hash: PSxIhhf7j8l1h9bP9LYjz403TkZ/7uIEMgwPHzFFKaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:eb:85:77:4e:79:c2:e8:41:c6:20:90:e8:9e:83:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b43613535ffaa73d9acc503c71a28fa17b3839
        Validity
            Not Before: Aug  9 13:00:56 2025 GMT
            Not After : Aug 10 13:00:56 2025 GMT
        Subject: CN=c847fa34d7a89449dd9b60c555224cfbe80b0560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d6:0a:8e:a6:13:18:72:31:cb:eb:26:f9:67:
                    0c:66:0d:c0:78:42:69:bd:63:19:98:80:be:ba:76:
                    57:6c:a8:be:f9:17:51:82:3c:46:cc:ac:59:b3:4e:
                    4d:86:2c:87:60:89:f7:e1:20:e9:8b:77:ba:29:21:
                    35:9d:3c:ec:ef:af:d5:6c:55:18:03:85:d8:a7:f4:
                    b5:bd:3a:3d:de:9a:d1:b6:c1:0f:6d:2d:f1:1e:24:
                    20:66:ca:82:be:1e:ba:2d:5e:20:f3:16:9d:06:62:
                    39:bc:ab:39:34:38:03:c6:d0:37:ca:66:24:1a:12:
                    f1:ce:f2:6e:6b:2b:1a:28:3f:52:17:f0:30:fa:eb:
                    13:32:68:9c:a9:7e:b6:8c:b9:62:6a:fd:c8:9e:5b:
                    1d:e8:de:47:3a:b7:74:65:5f:87:20:ae:48:71:5c:
                    c7:4d:64:f3:28:4d:0b:71:46:bb:fb:f3:ec:34:46:
                    25:f7:f7:6b:0d:4b:0e:eb:bb:5b:64:b2:3e:43:67:
                    da:b2:91:c4:c5:33:21:1b:24:48:48:d3:fc:34:a4:
                    e8:8f:de:c1:56:cc:79:b6:43:0c:a7:a2:33:5e:f4:
                    ee:77:09:a7:80:ba:e4:2d:41:ac:f5:0f:9b:6d:17:
                    36:a9:71:a8:c2:2c:82:06:04:7a:f1:37:9b:d0:13:
                    3f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:47:FA:34:D7:A8:94:49:DD:9B:60:C5:55:22:4C:FB:E8:0B:05:60
            X509v3 Authority Key Identifier:
                keyid:10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:53:18:9a:67:bc:ed:29:ff:62:1b:a0:78:a4:d3:82:4d:fc:
         c3:fb:5d:f7:71:c0:fa:70:5c:87:63:05:fb:d9:1a:f3:58:f6:
         ac:c7:f4:eb:de:c2:26:0e:ca:9c:db:8f:7a:7a:3f:21:e8:0e:
         50:1c:2a:15:06:78:fe:0a:02:14:47:d1:0f:93:17:4b:da:0a:
         f5:93:ad:bd:3c:7d:33:af:75:d6:0d:6c:f6:a2:e4:e7:ef:00:
         52:e5:e3:30:1a:03:5a:51:4d:03:3d:90:c5:ed:8e:1a:b6:db:
         e4:99:38:cf:39:6f:10:39:a5:95:ea:67:9b:2d:f0:3f:de:23:
         59:4d:63:63:d0:d1:d1:79:e9:b4:f9:be:47:54:9f:df:78:ed:
         d3:61:e7:1f:96:21:e5:49:19:d9:5f:de:97:6a:02:95:b0:ff:
         56:e4:c0:41:e8:8d:2c:46:8e:bd:7b:24:e9:95:7a:c5:da:f9:
         fc:d8:53:d4:d1:e4:ed:fc:43:18:8a:71:01:34:43:cc:42:47:
         cd:d4:98:8f:26:45:4d:8b:59:8e:24:20:de:78:76:fe:62:33:
         8c:fe:a3:20:79:89:fa:cb:67:57:a9:51:ad:cb:82:08:99:81:
         4c:ac:c4:a3:f0:ff:c2:ac:ba:aa:be:e4:46:d9:4a:c8:6b:b7:
         4c:51:77:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:40:59 2025 by rpki-client