Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
File:                     EL2oyoaUjZ_gKdoRGgyecNMEalo.mft (raw, json)
Hash identifier:          ry4+2ny1lqGjoWumwQ53NRp92QOP8iAhlnSuUeub3ww=
Subject key identifier:   D2:42:38:3C:85:3A:72:47:2D:AF:AA:F2:F7:FE:EE:62:8A:8B:47:FD
Authority key identifier: 10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A
Certificate issuer:       /CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
Certificate serial:       01974B569CCDC041AB00B40EDCF61837B910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
Manifest number:          085D
Signing time:             Sat 07 Jun 2025 17:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:56 +0000
Files and hashes:         1: 1-WKKgZBRZsISjM-pPAKq9ZOTfHY.roa (hash: WaCyd+8XHtQ9NQJZXiDHgOg3ILGjfZThoYeSrYEPMP4=)
                          2: EL2oyoaUjZ_gKdoRGgyecNMEalo.crl (hash: xHiP8uL+obFoiKxLph4/HacPOwr9V/3CYXGwea4ReTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:9c:cd:c0:41:ab:00:b4:0e:dc:f6:18:37:b9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10bda8ca86948d9fe029da111a0c9e70d3046a5a
        Validity
            Not Before: Jun  7 17:00:56 2025 GMT
            Not After : Jun  8 17:00:56 2025 GMT
        Subject: CN=d242383c853a72472dafaaf2f7feee628a8b47fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:2f:a4:41:de:fb:c4:5c:46:dd:f6:97:dd:
                    f4:74:19:a8:e6:14:44:4d:f1:0d:93:62:57:5c:78:
                    44:45:71:3f:b3:71:46:4a:49:59:c0:38:df:7f:7a:
                    c9:f4:78:54:3f:e3:45:62:50:0c:e5:53:86:46:16:
                    0c:74:2d:1c:6e:9b:e8:b3:f0:96:3d:13:83:96:4e:
                    c0:cc:87:f4:80:26:a4:5c:d1:8e:63:e5:33:c8:a7:
                    84:f0:36:84:85:9f:f4:45:84:fb:6c:e1:e4:ab:c5:
                    c5:a3:16:7a:f5:26:bb:d5:bb:c9:8b:c5:2e:f7:e5:
                    7f:72:0e:91:40:28:b8:df:ed:3a:4e:f5:ca:7a:23:
                    f9:30:ec:5c:8e:12:50:c3:e3:41:28:c2:a2:bb:56:
                    ac:af:08:67:14:2d:d9:ad:83:e0:86:fa:fa:f8:3b:
                    6b:f7:88:c6:aa:78:f6:8e:24:bd:32:e0:8f:59:69:
                    9c:15:45:3e:fc:0d:19:de:85:3a:60:e8:f8:9e:00:
                    f4:59:33:79:3a:b5:30:d1:1b:b6:67:b2:2a:54:7d:
                    1c:fd:5c:6f:94:91:91:43:ae:bc:f7:f8:52:78:4a:
                    ba:00:40:09:d7:ee:05:c4:dd:dd:3d:e9:ba:54:74:
                    ee:2c:bc:c3:06:10:6b:89:b2:b3:1e:0f:b6:54:25:
                    79:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:42:38:3C:85:3A:72:47:2D:AF:AA:F2:F7:FE:EE:62:8A:8B:47:FD
            X509v3 Authority Key Identifier:
                keyid:10:BD:A8:CA:86:94:8D:9F:E0:29:DA:11:1A:0C:9E:70:D3:04:6A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EL2oyoaUjZ_gKdoRGgyecNMEalo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c0a790-4ed9-44c3-8dfd-0bef9a3baba8/1/EL2oyoaUjZ_gKdoRGgyecNMEalo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c3:fa:29:04:98:7c:8a:d8:7b:db:ff:fd:32:e6:1d:43:9f:
         1c:e6:ce:64:0c:4c:0e:09:1a:de:b4:92:73:57:4c:49:ff:73:
         d3:ad:ac:12:8d:68:c3:6f:38:9d:df:a0:8e:e7:1f:5d:f0:3c:
         eb:e0:7e:2f:88:f2:4d:df:c2:ad:21:b8:7f:6b:bf:59:99:ef:
         ea:89:33:e5:20:fb:2b:d4:92:b1:1d:d6:fc:4e:13:a4:ac:56:
         9c:c3:b4:39:e0:a4:25:67:99:37:b5:0c:b7:be:83:e8:92:42:
         2b:33:59:b9:c6:0c:dc:ab:c5:93:dc:14:63:7b:d3:5e:3b:64:
         a0:51:f7:62:d7:24:5b:18:e0:a6:35:5e:b0:0f:62:38:7d:e0:
         97:7c:5a:e0:7f:22:36:74:7f:14:9e:7e:b1:f7:a6:43:f8:25:
         db:4d:33:62:ce:03:3d:84:1d:a6:06:b5:e2:83:f7:5c:05:5e:
         db:a0:37:17:eb:29:48:a9:1f:eb:2a:5c:ae:84:b8:cc:95:20:
         08:b5:89:8d:c0:21:9c:b5:cd:fa:85:9c:0d:9a:15:53:07:02:
         f6:78:02:df:76:81:0d:18:f2:86:48:16:ba:90:c2:ec:3c:8a:
         07:03:75:4a:cd:7b:84:4a:22:26:9c:7d:21:42:8f:4b:16:d2:
         d4:a3:04:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:16:38 2025 by rpki-client