Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
File:                     E2elkhpPFIx4qmwh-E8s_I2I6ck.mft (raw, json)
Hash identifier:          vqF4blDldv894xXYcCJw9aPL/UYLdWPyidqADzjXNdQ=
Subject key identifier:   28:C8:10:9E:72:4F:B1:7E:42:4C:47:C0:80:ED:C3:E3:13:D1:09:EA
Authority key identifier: 13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9
Certificate issuer:       /CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
Certificate serial:       01984852BD43309542FF8026E3DFB56CE9C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
Manifest number:          15FE
Signing time:             Sat 26 Jul 2025 20:00:38 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:38 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:38 +0000
Files and hashes:         1: E2elkhpPFIx4qmwh-E8s_I2I6ck.crl (hash: DyFg52+VDACBQ09EQywNQcmVyDaMa18hsP8mvjQQcF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:bd:43:30:95:42:ff:80:26:e3:df:b5:6c:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
        Validity
            Not Before: Jul 26 20:00:38 2025 GMT
            Not After : Jul 27 20:00:38 2025 GMT
        Subject: CN=28c8109e724fb17e424c47c080edc3e313d109ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:30:3e:fa:cd:cc:58:c3:43:cb:0f:70:04:74:
                    9b:6c:51:67:98:1c:3d:fd:9f:af:87:94:e0:5b:fc:
                    e8:fd:8b:04:cb:44:30:1e:3a:ea:6c:4e:3e:8e:68:
                    e3:5f:b9:f9:cd:da:2d:c9:69:fd:f7:aa:31:5b:34:
                    bf:ef:bf:c0:66:e5:98:62:33:52:82:b3:69:e7:cb:
                    db:44:5b:f8:92:0c:08:e2:58:c8:f0:f3:39:cb:97:
                    c8:2b:00:88:94:e7:af:4a:c9:0b:33:e1:1d:3c:ef:
                    1e:d9:e5:eb:5e:c5:1f:d8:91:cd:1d:50:fc:db:71:
                    87:77:e4:42:17:98:06:2a:44:fd:9b:30:10:ba:13:
                    0b:14:aa:fe:5f:88:17:f1:63:b5:5b:2d:1d:28:73:
                    8c:f0:7c:1b:ed:ee:0b:8b:ba:a9:43:ee:87:23:14:
                    6f:19:76:eb:a0:2d:74:3a:f7:2c:e6:0d:80:43:b3:
                    b9:ef:61:a1:cf:ae:f1:b6:e4:d0:ca:4a:7c:73:d4:
                    84:b3:d7:71:0e:45:b4:38:96:8a:31:e5:fb:aa:3f:
                    17:cd:0f:23:b0:9c:2e:1f:8f:4b:ae:70:10:50:e4:
                    7b:5d:46:cc:ed:9f:71:98:a1:69:41:31:6e:67:0c:
                    6f:04:fd:b9:15:b7:98:ca:e6:61:c8:93:50:1f:7c:
                    3e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C8:10:9E:72:4F:B1:7E:42:4C:47:C0:80:ED:C3:E3:13:D1:09:EA
            X509v3 Authority Key Identifier:
                keyid:13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:5c:68:65:52:c3:a1:8c:af:c1:c6:70:f0:3b:94:0c:d7:5c:
         3a:77:53:06:82:6a:28:7b:42:0b:4d:30:5d:1a:2f:60:bb:ef:
         f5:da:e1:ae:6b:09:cc:0d:68:6d:26:d9:e1:42:fa:61:a4:7c:
         42:e8:1a:4a:70:64:3d:e7:ed:dd:3c:c1:52:4a:35:6c:ef:fa:
         2d:53:82:70:14:57:bf:08:8a:c2:7a:3f:14:69:dd:9b:c2:43:
         86:e7:55:ee:a9:79:3c:3a:a2:a8:c8:dd:ce:ae:ce:03:22:94:
         f1:6a:f4:27:ef:e4:25:6c:64:16:b9:27:43:e2:32:cb:90:42:
         c6:9e:a9:b5:ea:23:09:60:86:5e:e2:70:59:fd:3d:c6:56:22:
         57:d5:a8:e0:94:93:65:33:b6:b0:00:28:d5:4a:52:19:dc:7e:
         b0:45:54:5f:aa:14:5c:47:dc:18:32:ea:93:ce:b3:67:9b:d6:
         66:ae:2b:6f:ce:59:71:73:5b:16:04:c0:38:8b:e6:6e:4c:41:
         be:dc:10:37:6d:04:95:fa:86:77:c5:7d:8d:ad:63:7c:02:54:
         be:b1:b1:b9:e2:53:08:ff:52:df:bb:01:13:78:65:8c:b6:fc:
         18:b1:45:e2:77:b9:4d:98:1d:2a:b0:f4:ca:f7:4d:3b:a5:af:
         7f:f7:4f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:14:13 2025 by rpki-client