Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
File:                     ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft (raw, json)
Hash identifier:          SPvl5VSaS1C21i4gcG4Nj72fwjmdNihZlI8/TPWiR30=
Subject key identifier:   55:52:CD:18:0A:38:E3:53:6C:0B:75:46:EA:AD:02:94:ED:83:94:E4
Authority key identifier: 10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39
Certificate issuer:       /CN=10b43613535ffaa73d9acc503c71a28fa17b3839
Certificate serial:       01974E20320FFF7B400C42012727E3023F8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
Manifest number:          0C20
Signing time:             Sun 08 Jun 2025 06:00:22 +0000
Manifest this update:     Sun 08 Jun 2025 06:00:22 +0000
Manifest next update:     Mon 09 Jun 2025 06:00:22 +0000
Files and hashes:         1: ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl (hash: iGKTgbhWPEA7htKcksrNIPmrcjaXqDcrieXStcEeHHI=)
                          2: _HSn7eAJ1-GN-PARSBNdWZcI_CM.roa (hash: PSxIhhf7j8l1h9bP9LYjz403TkZ/7uIEMgwPHzFFKaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:20:32:0f:ff:7b:40:0c:42:01:27:27:e3:02:3f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b43613535ffaa73d9acc503c71a28fa17b3839
        Validity
            Not Before: Jun  8 06:00:22 2025 GMT
            Not After : Jun  9 06:00:22 2025 GMT
        Subject: CN=5552cd180a38e3536c0b7546eaad0294ed8394e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:3e:69:79:03:42:94:67:bb:09:3e:d2:92:
                    43:79:c8:cd:b1:5c:e3:62:9a:d7:88:73:00:31:68:
                    10:6e:96:55:5c:d6:86:f7:f8:6a:20:4c:16:4a:ed:
                    f0:72:5a:e5:9d:cb:5b:77:a2:3d:6a:19:32:3e:60:
                    31:29:c6:29:23:d1:f3:bc:04:d4:51:84:fc:e5:f9:
                    87:6e:12:3a:18:95:91:94:87:b0:f5:23:97:fa:29:
                    ad:cc:7e:74:25:2a:10:da:48:a6:f1:4a:46:2f:86:
                    70:81:ed:53:05:ff:ac:98:88:53:bf:b2:cf:ee:d4:
                    a8:fd:37:ca:12:c4:16:06:fb:32:17:95:84:4b:d1:
                    fd:a5:19:2f:a9:ac:df:34:cd:57:40:40:02:4a:e1:
                    83:e7:2a:7f:32:34:9b:ca:1b:b3:e7:95:fa:db:ea:
                    47:4f:7b:a0:69:4e:89:8c:06:75:94:46:22:11:21:
                    a0:2e:99:79:62:2b:66:64:7b:ad:32:18:25:44:07:
                    ed:85:88:19:fe:0d:26:aa:92:05:99:fc:74:60:70:
                    ed:8b:92:5b:ba:65:54:11:92:06:2d:49:29:09:fa:
                    26:50:a2:00:ea:c7:8c:84:a3:c6:e5:0d:c0:cb:62:
                    09:fa:db:50:8f:05:e3:54:eb:30:9c:4e:c1:a3:d6:
                    ab:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:52:CD:18:0A:38:E3:53:6C:0B:75:46:EA:AD:02:94:ED:83:94:E4
            X509v3 Authority Key Identifier:
                keyid:10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:58:74:48:02:de:92:a7:fa:c6:5e:18:58:2e:b5:c6:a0:58:
         91:97:84:25:ac:31:b7:62:ef:08:24:57:df:68:ee:85:ce:a5:
         eb:c4:3d:d7:29:95:ac:7b:18:52:69:14:55:95:21:78:34:52:
         d7:e4:e6:bb:f4:1a:8d:3d:e6:f3:d3:e5:b9:e9:bd:73:e4:c6:
         11:4a:7a:42:4f:37:ff:3c:f6:7b:ab:9e:23:5e:30:e5:45:d1:
         1e:91:62:c7:3d:7b:a8:13:31:b7:fb:a0:12:e5:ae:56:07:e2:
         de:9a:52:04:76:56:78:59:34:10:fc:9c:da:10:df:b1:93:55:
         49:cd:e3:e8:3d:6f:84:21:7a:33:55:9c:fb:f4:e5:d3:a1:ee:
         87:51:b8:37:4a:44:fc:94:16:2d:02:38:64:e6:52:f2:d9:ed:
         b7:f1:10:69:8c:c8:da:92:5d:05:f1:a9:53:95:05:0d:e6:38:
         14:65:79:96:94:5b:1b:3a:cb:7c:0e:95:fc:bf:96:4a:94:e6:
         9f:cc:c2:ff:29:40:ca:be:30:4e:10:9b:f9:f8:0b:68:5b:55:
         a6:67:b4:b3:3e:1b:c8:6b:c0:72:1b:2f:05:a1:ce:44:65:72:
         ba:5b:45:4f:20:76:f7:bf:65:be:37:dd:46:6f:7a:17:77:23:
         68:a3:64:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOIDIP/3tADEIBJyfjAj+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYjQzNjEzNTM1ZmZhYTczZDlhY2M1MDNjNzFhMjhmYTE3
YjM4MzkwHhcNMjUwNjA4MDYwMDIyWhcNMjUwNjA5MDYwMDIyWjAzMTEwLwYDVQQD
Eyg1NTUyY2QxODBhMzhlMzUzNmMwYjc1NDZlYWFkMDI5NGVkODM5NGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSo+aXkDQpRnuwk+0pJDecjNsVzj
YprXiHMAMWgQbpZVXNaG9/hqIEwWSu3wclrlnctbd6I9ahkyPmAxKcYpI9HzvATU
UYT85fmHbhI6GJWRlIew9SOX+imtzH50JSoQ2kim8UpGL4Zwge1TBf+smIhTv7LP
7tSo/TfKEsQWBvsyF5WES9H9pRkvqazfNM1XQEACSuGD5yp/MjSbyhuz55X62+pH
T3ugaU6JjAZ1lEYiESGgLpl5YitmZHutMhglRAfthYgZ/g0mqpIFmfx0YHDti5Jb
umVUEZIGLUkpCfomUKIA6seMhKPG5Q3Ay2IJ+ttQjwXjVOswnE7Bo9arNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVSzRgKOONTbAt1RuqtApTtg5TkMB8GA1UdIwQY
MBaAFBC0NhNTX/qnPZrMUDxxoo+hezg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yZWU3MWItOGZmZS00ZWI2LTk0MzQt
Y2YzYzFhNzllNjM0LzEvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8yZWU3MWItOGZmZS00ZWI2LTk0MzQtY2YzYzFhNzllNjM0
LzEvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlh0SALe
kqf6xl4YWC61xqBYkZeEJawxt2LvCCRX32juhc6l68Q91ymVrHsYUmkUVZUheDRS
1+Tmu/QajT3m89Pluem9c+TGEUp6Qk83/zz2e6ueI14w5UXRHpFixz17qBMxt/ug
EuWuVgfi3ppSBHZWeFk0EPyc2hDfsZNVSc3j6D1vhCF6M1Wc+/Tl06Huh1G4N0pE
/JQWLQI4ZOZS8tntt/EQaYzI2pJdBfGpU5UFDeY4FGV5lpRbGzrLfA6V/L+WSpTm
n8zC/ylAyr4wThCb+fgLaFtVpme0sz4byGvAchsvBaHORGVyultFTyB2979lvjfd
Rm96F3cjaKNkpA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:41:11 2025 by rpki-client