Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
File:                     ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft (raw, json)
Hash identifier:          NaSBD+/GCfbxx797d1kiQ8drOBP8R5rxVX6dUWymkvE=
Subject key identifier:   8B:18:DE:6A:B3:C7:4C:2A:3A:80:F6:00:FC:65:3E:FA:BC:62:60:FD
Authority key identifier: 10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39
Certificate issuer:       /CN=10b43613535ffaa73d9acc503c71a28fa17b3839
Certificate serial:       019A228A020EA4CF500CB1AE923068B99E9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
Manifest number:          0D97
Signing time:             Sun 26 Oct 2025 22:01:01 +0000
Manifest this update:     Sun 26 Oct 2025 22:01:01 +0000
Manifest next update:     Mon 27 Oct 2025 22:01:01 +0000
Files and hashes:         1: ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl (hash: IHcttHj24z+pie7R1C49dTQBnTZF0DOxjnM60nspmuE=)
                          2: _HSn7eAJ1-GN-PARSBNdWZcI_CM.roa (hash: PSxIhhf7j8l1h9bP9LYjz403TkZ/7uIEMgwPHzFFKaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:8a:02:0e:a4:cf:50:0c:b1:ae:92:30:68:b9:9e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b43613535ffaa73d9acc503c71a28fa17b3839
        Validity
            Not Before: Oct 26 22:01:01 2025 GMT
            Not After : Oct 27 22:01:01 2025 GMT
        Subject: CN=8b18de6ab3c74c2a3a80f600fc653efabc6260fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4c:30:51:c7:4a:3b:65:0d:f9:62:64:fe:d8:
                    65:31:d8:9a:93:bc:9e:88:fd:26:f8:6f:7a:3d:5a:
                    4a:d8:63:e1:e0:da:3e:0a:b7:6d:27:61:53:97:42:
                    d4:79:c2:8a:f3:67:89:98:4a:8d:ca:23:7b:46:00:
                    72:61:ff:7a:5f:8a:ac:dd:5b:1e:c1:49:b6:f4:5f:
                    8d:a1:f0:14:c1:f4:0e:f0:fc:c9:fd:60:bd:69:b7:
                    e6:1a:35:a5:26:1f:76:3c:c3:d7:00:ad:43:0c:28:
                    1a:3d:a6:2b:7a:e9:fb:c1:88:d8:81:86:fd:33:3a:
                    52:9c:d4:d8:da:b7:76:ee:52:b9:7b:c3:8e:02:5b:
                    c6:d9:b4:85:99:b8:09:df:51:25:cc:1e:2d:1e:b5:
                    64:fe:a3:19:87:d3:b9:c2:e8:c1:40:f3:fd:0b:7c:
                    d9:d5:75:72:31:95:57:4c:13:b1:f8:1f:27:94:a4:
                    b6:63:e4:d2:c3:97:81:c5:40:cc:b2:0b:ac:1f:ad:
                    c4:ab:0c:47:4a:1f:7f:ab:d9:e3:9d:b0:e3:40:e4:
                    78:89:85:01:a2:26:be:7f:9d:c7:a7:fd:5e:69:30:
                    50:78:a7:02:b5:1e:fd:5f:f5:4b:33:bb:8d:10:10:
                    28:b6:f1:f7:b8:1a:de:8a:b1:00:80:45:8b:32:b9:
                    9d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:18:DE:6A:B3:C7:4C:2A:3A:80:F6:00:FC:65:3E:FA:BC:62:60:FD
            X509v3 Authority Key Identifier:
                keyid:10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:d6:c8:7f:ee:c0:dc:aa:1e:8a:e5:d6:36:f0:f3:0b:94:d3:
         cb:e8:6c:56:a1:64:c1:48:97:2e:49:d3:52:75:27:de:54:a4:
         70:3e:ee:fc:09:14:55:60:86:e1:a5:08:03:bd:9d:75:b0:ed:
         f3:c9:a7:81:9b:88:6b:3e:67:12:8b:98:20:83:83:29:3e:78:
         3e:05:8d:66:5e:85:6e:f4:9a:6b:2c:0f:99:17:8b:a6:56:34:
         e1:76:95:fd:16:c1:e8:64:69:7e:e4:90:1f:a8:d5:d7:50:51:
         15:05:ca:64:72:cb:e0:58:1f:3f:a7:9d:ad:4c:61:8d:4b:a2:
         07:fc:e9:6b:7e:1a:3a:9f:ca:cc:f2:68:2c:27:cf:48:e1:78:
         71:4e:e7:4d:65:d5:8a:66:92:66:36:01:d5:64:4d:1b:ce:be:
         7f:00:c6:cd:9f:64:b9:c5:86:b0:92:de:2d:3f:5d:1e:10:2f:
         94:c0:0e:53:2f:d1:57:71:02:80:42:75:69:ab:1d:b1:3f:97:
         de:31:7f:a7:c6:dd:8d:9d:87:7c:16:fe:b2:2c:74:34:44:87:
         98:6f:c9:bb:69:ac:50:cc:b0:6d:6c:1f:fa:02:ee:4d:79:fe:
         51:5d:2e:99:c7:9e:5e:9e:a4:8e:b5:0b:dd:8b:2a:e4:cf:e5:
         85:f8:a9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:09 2025 by rpki-client