Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
File:                     ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft (raw, json)
Hash identifier:          1/zmN3kdrDTHz1flTovaCaMurqB4LtRsxSlbuxdl7q8=
Subject key identifier:   64:EF:F1:AF:A7:0D:B3:30:46:AF:78:32:DE:19:2F:8B:D7:1B:DA:CA
Authority key identifier: 10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39
Certificate issuer:       /CN=10b43613535ffaa73d9acc503c71a28fa17b3839
Certificate serial:       01984776E3C7BFEB37FF43042D3D2D9FDF92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
Manifest number:          0CA1
Signing time:             Sat 26 Jul 2025 16:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:30 +0000
Files and hashes:         1: ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl (hash: m/SQ+8JVI2y+1XVWmPONDXE9eEWSWgy1B4mx2pX5QRI=)
                          2: _HSn7eAJ1-GN-PARSBNdWZcI_CM.roa (hash: PSxIhhf7j8l1h9bP9LYjz403TkZ/7uIEMgwPHzFFKaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:e3:c7:bf:eb:37:ff:43:04:2d:3d:2d:9f:df:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b43613535ffaa73d9acc503c71a28fa17b3839
        Validity
            Not Before: Jul 26 16:00:30 2025 GMT
            Not After : Jul 27 16:00:30 2025 GMT
        Subject: CN=64eff1afa70db33046af7832de192f8bd71bdaca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:86:76:33:b4:30:63:00:b2:d5:ec:12:bd:16:
                    2a:49:71:3a:89:00:7f:32:61:6f:93:5e:94:c7:cf:
                    16:c3:b9:05:5e:c8:14:bc:b5:34:47:e7:7c:0d:c3:
                    9f:70:7c:42:c3:f5:45:3e:1d:9c:7f:08:cd:58:64:
                    25:84:d4:d0:bb:12:3e:dd:71:db:7e:b1:a0:50:89:
                    a6:2c:a2:86:50:28:22:43:a9:4f:a3:1d:59:9f:56:
                    95:49:df:4e:dd:31:90:27:30:ef:a5:ed:97:39:7e:
                    f0:b8:ba:4f:bb:3b:59:3f:1b:c7:87:36:9c:79:eb:
                    51:68:97:73:cd:92:78:04:0e:46:79:bd:9b:20:7f:
                    d6:30:25:af:5f:6f:f3:ff:b2:8a:ef:a6:ad:59:1e:
                    0a:7f:fa:80:74:bc:43:fa:4d:92:74:1a:17:73:5f:
                    83:68:d5:af:06:75:ea:ae:62:93:6b:e7:9c:3f:fd:
                    e7:68:ae:08:ff:9c:ec:6f:66:75:e6:a9:ac:0d:a9:
                    50:b5:a3:45:69:47:77:d9:e6:29:52:54:0a:8d:28:
                    5b:4a:bf:ba:17:e0:34:95:59:26:a7:3e:a3:cb:19:
                    5d:1a:dc:e2:46:9d:a2:14:cf:18:37:f0:11:bf:1c:
                    24:06:c5:8c:96:61:fe:7c:bd:11:3b:00:0a:5e:12:
                    b7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EF:F1:AF:A7:0D:B3:30:46:AF:78:32:DE:19:2F:8B:D7:1B:DA:CA
            X509v3 Authority Key Identifier:
                keyid:10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:78:52:49:02:13:e3:89:51:f7:9f:f1:f3:57:5c:a6:24:43:
         84:6e:39:7c:71:51:d9:26:8d:9d:0f:d2:65:93:78:cb:23:64:
         e7:ac:f5:42:82:fe:24:f9:7e:83:74:15:86:c3:7a:47:8d:91:
         19:26:04:68:17:79:5c:16:6d:11:2b:47:96:be:22:26:8f:3c:
         25:e4:b4:99:c4:11:1a:2a:03:2f:cc:4b:47:fa:7c:81:ba:96:
         41:de:c0:95:a5:75:be:10:eb:ef:75:d0:62:a1:04:29:a0:2d:
         cb:97:3a:6e:e9:a7:12:20:f4:15:a4:08:ec:ab:a4:f3:30:32:
         6f:ac:c4:4c:ba:bd:32:1d:86:67:9a:e6:e2:3d:d6:dd:d5:7a:
         45:f7:78:20:8e:8e:39:78:c5:f1:02:a1:ab:98:65:e5:fc:1b:
         23:20:f7:9a:d7:17:b7:a7:be:d5:c7:73:25:9f:77:dc:ed:6a:
         bb:2c:90:76:f2:ce:e1:d6:e6:52:22:a0:92:0f:56:0c:70:4a:
         26:55:2a:48:2b:5c:6f:ba:f7:d6:89:78:6f:67:1c:eb:82:ea:
         4e:0b:ae:08:fe:31:13:fc:79:cb:8c:c4:b3:75:ae:2d:21:36:
         51:ba:e6:4c:bf:e2:ca:64:2d:12:14:cd:cc:24:54:85:54:75:
         cd:89:30:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:20:40 2025 by rpki-client