Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
File:                     ElaCoB4i5CM4yoXHJVubP54q6jA.mft (raw, json)
Hash identifier:          SLPo2plVfUfoVJIgimJ7aN9gP5uoLWiMW0WycVzRGAo=
Subject key identifier:   D8:37:D9:78:45:F7:24:02:51:5F:A3:45:67:13:D4:B9:24:73:22:6A
Authority key identifier: 12:56:82:A0:1E:22:E4:23:38:CA:85:C7:25:5B:9B:3F:9E:2A:EA:30
Certificate issuer:       /CN=125682a01e22e42338ca85c7255b9b3f9e2aea30
Certificate serial:       019847E49C737095A111899B097F82643B61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
Manifest number:          0436
Signing time:             Sat 26 Jul 2025 18:00:21 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:21 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:21 +0000
Files and hashes:         1: ElaCoB4i5CM4yoXHJVubP54q6jA.crl (hash: T7tZJ+4e3hm88y/CQB0eT5hsRWLeMOrS2Th3JnWdaRk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e4:9c:73:70:95:a1:11:89:9b:09:7f:82:64:3b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=125682a01e22e42338ca85c7255b9b3f9e2aea30
        Validity
            Not Before: Jul 26 18:00:21 2025 GMT
            Not After : Jul 27 18:00:21 2025 GMT
        Subject: CN=d837d97845f72402515fa3456713d4b92473226a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:85:8d:d7:f7:90:6e:08:2f:45:0c:41:44:cf:
                    26:01:1a:46:eb:18:0a:f2:11:d9:aa:4b:b1:9d:d7:
                    bf:0c:dd:bd:e1:19:65:68:32:34:80:35:76:18:41:
                    d6:36:1e:04:89:78:52:64:9c:a1:1c:79:91:fc:1b:
                    be:01:67:36:18:3a:ce:e7:62:04:45:9c:40:88:f8:
                    ed:40:2e:59:c1:84:d1:04:78:9a:e7:4f:5f:42:eb:
                    fc:2f:fc:56:7d:4e:ee:a3:9c:9b:07:9b:9d:6e:7c:
                    21:66:49:ce:2d:e6:7a:59:1e:0c:f6:13:18:6d:7b:
                    ff:c3:90:06:09:4b:17:8e:b1:0b:cf:16:b4:61:39:
                    68:7d:87:58:bf:9a:b9:63:46:f7:cc:16:17:76:21:
                    82:b8:14:6e:23:28:75:fe:c7:9d:6c:d2:1b:31:01:
                    b6:b0:dd:32:88:fa:0c:03:70:d6:53:c4:dc:b1:0e:
                    45:41:bc:fc:27:3b:ec:0a:c1:43:13:d8:4e:cb:7e:
                    82:27:4a:95:9c:90:4b:4b:3d:79:27:fb:ce:29:09:
                    de:e1:3d:b7:95:22:1a:81:95:d4:ae:d5:2e:bf:35:
                    35:f9:07:b6:70:ac:55:83:d5:80:9a:f9:51:0c:1a:
                    3a:58:89:19:c9:10:28:55:1d:73:da:00:31:f3:66:
                    a0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:37:D9:78:45:F7:24:02:51:5F:A3:45:67:13:D4:B9:24:73:22:6A
            X509v3 Authority Key Identifier:
                keyid:12:56:82:A0:1E:22:E4:23:38:CA:85:C7:25:5B:9B:3F:9E:2A:EA:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:8f:00:ab:10:75:06:cb:ad:9a:e3:2f:d8:80:2f:40:f5:03:
         78:09:f2:b9:c0:b5:a4:9d:f1:03:9d:e4:a8:57:29:7b:c5:c8:
         95:bd:4f:64:98:01:4a:04:bd:4e:c3:43:27:1d:a4:26:6f:ff:
         21:1b:47:f7:35:10:88:29:10:a5:12:fc:36:f2:80:f6:8b:ff:
         42:dd:bb:90:89:b2:7b:39:de:fc:a1:e9:ae:ee:fc:f7:48:1d:
         41:5d:03:c8:75:43:77:98:c4:c1:d6:cd:81:da:00:04:4c:3b:
         6e:e0:ea:bb:55:fc:a4:79:06:c2:fc:4c:20:42:0b:72:21:5d:
         d8:89:4e:dc:01:1b:ab:60:d9:c7:5d:1e:a5:97:da:45:a7:a6:
         ed:79:2f:43:f5:16:17:fd:46:76:27:98:d9:12:61:89:0a:e8:
         fe:5f:09:ef:0e:76:a8:c2:da:f0:bc:e3:48:06:02:2f:b1:94:
         68:d6:45:b9:6b:76:dd:1c:55:5e:34:c1:61:11:b6:44:67:b6:
         2f:7c:7a:a6:ed:d9:f4:ca:7d:e8:53:db:62:37:5c:51:a3:d3:
         e8:f6:37:50:94:cf:21:9b:c5:e2:c9:c6:60:97:62:8c:87:06:
         a0:fc:05:bc:fd:82:2b:ae:68:5e:09:d7:29:59:33:30:65:2f:
         87:27:ca:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhH5JxzcJWhEYmbCX+CZDthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNTY4MmEwMWUyMmU0MjMzOGNhODVjNzI1NWI5YjNmOWUy
YWVhMzAwHhcNMjUwNzI2MTgwMDIxWhcNMjUwNzI3MTgwMDIxWjAzMTEwLwYDVQQD
EyhkODM3ZDk3ODQ1ZjcyNDAyNTE1ZmEzNDU2NzEzZDRiOTI0NzMyMjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYWN1/eQbggvRQxBRM8mARpG6xgK
8hHZqkuxnde/DN294RllaDI0gDV2GEHWNh4EiXhSZJyhHHmR/Bu+AWc2GDrO52IE
RZxAiPjtQC5ZwYTRBHia509fQuv8L/xWfU7uo5ybB5udbnwhZknOLeZ6WR4M9hMY
bXv/w5AGCUsXjrELzxa0YTlofYdYv5q5Y0b3zBYXdiGCuBRuIyh1/sedbNIbMQG2
sN0yiPoMA3DWU8TcsQ5FQbz8JzvsCsFDE9hOy36CJ0qVnJBLSz15J/vOKQne4T23
lSIagZXUrtUuvzU1+Qe2cKxVg9WAmvlRDBo6WIkZyRAoVR1z2gAx82agPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNg32XhF9yQCUV+jRWcT1LkkcyJqMB8GA1UdIwQY
MBaAFBJWgqAeIuQjOMqFxyVbmz+eKuowMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWxhQ29CNGk1Q000eW9YSEpWdWJQNTRxNmpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZmRlMzQtYjY4OC00ZmJkLWJmZGQt
MzliMTEwNmNjOWYxLzEvRWxhQ29CNGk1Q000eW9YSEpWdWJQNTRxNmpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hZmRlMzQtYjY4OC00ZmJkLWJmZGQtMzliMTEwNmNjOWYx
LzEvRWxhQ29CNGk1Q000eW9YSEpWdWJQNTRxNmpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfo8AqxB1
BsutmuMv2IAvQPUDeAnyucC1pJ3xA53kqFcpe8XIlb1PZJgBSgS9TsNDJx2kJm//
IRtH9zUQiCkQpRL8NvKA9ov/Qt27kImyezne/KHpru7890gdQV0DyHVDd5jEwdbN
gdoABEw7buDqu1X8pHkGwvxMIEILciFd2IlO3AEbq2DZx10epZfaRaem7XkvQ/UW
F/1GdieY2RJhiQro/l8J7w52qMLa8LzjSAYCL7GUaNZFuWt23RxVXjTBYRG2RGe2
L3x6pu3Z9Mp96FPbYjdcUaPT6PY3UJTPIZvF4snGYJdijIcGoPwFvP2CK65oXgnX
KVkzMGUvhyfK1w==
-----END CERTIFICATE-----
Generated at Sat Jul 26 21:01:14 2025 by rpki-client