Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
File:                     Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft (raw, json)
Hash identifier:          FanEB1kcnz/cbSDYm9bSyMUc1avuqymqRGCPBQbLIV8=
Subject key identifier:   A1:3D:47:0A:78:E4:CC:39:E7:DA:00:9E:3C:D5:BA:12:70:6B:DA:AC
Authority key identifier: 11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
Certificate issuer:       /CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Certificate serial:       01974D450DDD4E67D83A718928762329959A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
Manifest number:          157E
Signing time:             Sun 08 Jun 2025 02:01:00 +0000
Manifest this update:     Sun 08 Jun 2025 02:01:00 +0000
Manifest next update:     Mon 09 Jun 2025 02:01:00 +0000
Files and hashes:         1: Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl (hash: UoFNGINM/n4cpzTmkKniPHMWg2ITEZYtyOuJWrwER14=)
                          2: LMMZjEog_tQosdiOx9qDUPZ7h2c.roa (hash: ejhewZ8y56OliUtcQtMRcOocpkTmo7inlBUwDmC0qfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:45:0d:dd:4e:67:d8:3a:71:89:28:76:23:29:95:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11c971ff0d25f2034c05ab2958a86f732bc67734
        Validity
            Not Before: Jun  8 02:01:00 2025 GMT
            Not After : Jun  9 02:01:00 2025 GMT
        Subject: CN=a13d470a78e4cc39e7da009e3cd5ba12706bdaac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:30:fc:76:0d:41:90:01:cf:59:63:85:3e:
                    c5:8c:ba:dc:dc:8b:a5:18:25:dc:47:99:19:f4:bf:
                    82:3c:b5:f1:20:53:34:49:ed:39:99:5d:5f:3d:8d:
                    a9:02:85:b5:04:fd:9e:14:3e:c8:e9:10:2a:11:ec:
                    47:1e:62:32:ef:71:ba:17:37:2e:d7:e1:ef:a9:20:
                    6c:c4:29:8f:80:2e:71:a6:6d:8a:11:47:b9:bf:a4:
                    0d:25:36:66:39:0e:dc:d5:92:14:17:c6:63:28:74:
                    e8:68:af:78:fd:f2:24:61:ce:14:ef:12:64:0c:aa:
                    fa:15:09:69:6c:7f:48:39:05:6a:c7:df:06:99:35:
                    e0:c5:c1:33:18:80:22:b0:16:75:ea:40:98:ed:ec:
                    50:5f:77:00:c1:14:17:4b:42:53:a8:25:ee:65:f9:
                    8d:d2:ee:b2:57:f4:d7:20:03:f7:92:a3:73:79:4d:
                    b0:d3:31:e4:12:8d:97:f4:84:ea:00:3c:f2:03:8d:
                    ae:20:7d:0d:1b:f6:da:e4:ad:21:c3:95:9f:cd:10:
                    e4:2c:67:eb:44:da:38:8a:d5:2f:fc:63:06:86:d3:
                    d1:ad:68:ab:3e:ed:d3:0e:00:df:aa:d7:92:11:76:
                    a0:00:54:da:41:da:2d:54:2b:67:76:72:c1:80:2d:
                    13:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:3D:47:0A:78:E4:CC:39:E7:DA:00:9E:3C:D5:BA:12:70:6B:DA:AC
            X509v3 Authority Key Identifier:
                keyid:11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:8d:7f:11:39:d4:4d:4e:c1:fc:dd:2c:f8:b6:02:f8:be:36:
         5d:79:2b:23:c0:0e:fc:14:67:d4:81:1f:e9:79:77:f9:91:33:
         9b:7b:23:a5:1c:85:0b:cc:1a:a2:b2:97:af:b3:b1:d2:0a:08:
         3e:71:60:d6:94:d3:13:7f:1f:ae:4a:cb:ec:87:45:24:a0:ef:
         64:3f:de:f0:d9:14:f1:c0:41:e0:a7:12:11:7b:51:6d:13:42:
         c1:c2:59:cc:36:70:93:bc:1c:98:2e:7a:79:ea:ef:13:46:8a:
         cf:5d:35:d6:51:93:1f:88:45:fb:84:7b:aa:c6:62:87:80:ee:
         d7:82:b5:5c:70:81:5c:29:2d:9f:84:e8:fc:a5:af:f5:82:01:
         cb:4a:fa:c8:31:bc:fd:17:f4:b3:9c:2c:ce:ec:93:c0:3b:ea:
         f6:b3:7d:c2:66:10:24:6b:dd:3c:60:7b:ed:e7:78:ee:86:6b:
         e8:f7:db:28:5b:d4:36:48:b3:2c:24:b0:2b:2d:31:63:60:0c:
         09:87:76:7f:15:cc:9c:9f:62:52:f0:2e:10:8a:54:53:d9:7b:
         db:1e:aa:9f:98:80:06:34:f0:86:3c:90:89:6a:2b:eb:77:f0:
         1d:31:d4:56:00:14:ef:40:4b:e5:63:87:a7:bc:3f:42:1f:a3:
         16:04:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:08:52 2025 by rpki-client