Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
File:                     elJNrL4CqVkxyh1u4ps8iVek7L4.mft (raw, json)
Hash identifier:          C45myWKUolpY04pDQ3QeQSQbfEPZh2R39qVYOzmdI8E=
Subject key identifier:   46:D8:64:E2:5C:90:61:9B:20:B8:05:19:D7:8E:D2:AB:63:62:A4:47
Authority key identifier: 7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE
Certificate issuer:       /CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
Certificate serial:       01974C31CE90005B2C14C17B734F81C95F7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
Manifest number:          038D
Signing time:             Sat 07 Jun 2025 21:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:21 +0000
Files and hashes:         1: elJNrL4CqVkxyh1u4ps8iVek7L4.crl (hash: uZ7IsMNHWslKYlL3POgIbVTwXVo1H/Wt8WRnPE/EU7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:31:ce:90:00:5b:2c:14:c1:7b:73:4f:81:c9:5f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a524dacbe02a95931ca1d6ee29b3c8957a4ecbe
        Validity
            Not Before: Jun  7 21:00:21 2025 GMT
            Not After : Jun  8 21:00:21 2025 GMT
        Subject: CN=46d864e25c90619b20b80519d78ed2ab6362a447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:af:25:fb:41:5e:e6:46:49:3e:af:21:db:04:
                    53:af:90:02:e8:92:8c:0b:cb:f0:47:67:92:55:90:
                    2f:16:a6:b5:a1:54:32:dc:2a:ca:72:51:62:a6:32:
                    27:88:b9:8e:95:49:0e:90:b5:1c:bc:49:69:46:4b:
                    11:a2:35:f7:aa:8d:27:d5:7c:9c:f8:63:4e:f5:27:
                    3d:85:21:e4:b3:79:3e:ff:07:64:b8:d1:8b:69:62:
                    f5:2e:b7:77:35:b0:9e:77:99:23:0b:d0:b7:90:e4:
                    28:8c:8d:9b:a6:7b:57:c8:ed:1c:3d:2e:72:1a:9a:
                    ca:08:b5:b2:92:d4:11:c5:3d:d9:9d:21:d8:4d:63:
                    7f:29:36:6c:69:9d:a1:d9:2c:8e:3e:fe:8d:c5:83:
                    a6:11:96:ce:39:80:18:25:51:94:95:2d:0a:f8:4a:
                    3e:46:8b:cc:a6:c3:2f:83:f1:5c:f6:84:7f:bd:27:
                    8c:d7:cf:11:e3:10:a1:b1:27:ff:ec:98:bc:02:94:
                    d8:f4:d7:0d:fe:19:c6:33:2c:12:5b:47:56:5e:f3:
                    83:ca:2e:05:37:ce:e6:1a:67:d9:fc:74:05:4e:f3:
                    f2:22:70:7b:61:a4:ff:a1:e7:45:ab:c9:3e:dd:23:
                    a4:a9:0c:b6:a6:e0:1c:44:27:70:20:96:00:4d:de:
                    1b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D8:64:E2:5C:90:61:9B:20:B8:05:19:D7:8E:D2:AB:63:62:A4:47
            X509v3 Authority Key Identifier:
                keyid:7A:52:4D:AC:BE:02:A9:59:31:CA:1D:6E:E2:9B:3C:89:57:A4:EC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elJNrL4CqVkxyh1u4ps8iVek7L4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0cfe45-42e7-4bcf-94d5-b8b10c6d5ebf/1/elJNrL4CqVkxyh1u4ps8iVek7L4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:24:77:3c:b5:0d:b4:5f:e9:89:07:75:57:51:e1:78:3f:13:
         01:cd:7b:3f:55:c1:15:1d:65:8c:26:e6:03:4e:97:78:70:6d:
         ce:ac:ae:8c:92:43:23:36:a2:21:e2:6e:43:0c:29:ea:df:59:
         64:a6:25:4b:e1:d2:bb:0c:f6:97:31:66:47:10:25:c1:56:3c:
         1d:ad:c9:20:45:96:af:2f:71:64:c3:28:51:ae:f2:83:e7:f6:
         ee:b6:76:81:94:f1:f3:4e:4f:48:49:49:8d:c0:1c:3e:fb:0a:
         cf:cd:6b:16:ac:be:ac:36:e0:8f:f0:41:c3:25:12:3c:b6:0f:
         6e:3c:a2:e7:07:f3:be:45:2c:bb:28:d3:33:62:d8:1f:0f:44:
         12:26:88:69:46:62:d5:b5:d7:09:35:f3:13:96:7d:56:68:ad:
         a5:6c:46:1d:55:97:1d:e5:47:ca:32:f3:a1:e9:0e:5a:f8:e3:
         20:1a:41:50:be:f9:90:8e:55:b5:2f:cf:26:c1:43:ad:93:1c:
         99:34:1d:15:ad:57:a3:fd:8b:a7:1f:27:e7:07:2f:2b:ef:45:
         7b:86:75:75:7c:ad:bb:7b:e7:1b:4e:ff:9f:24:60:26:59:05:
         a6:7a:2f:f9:7b:eb:f0:cf:c0:1a:5b:37:b8:c0:2a:6a:a5:a6:
         ca:f6:d8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:21:54 2025 by rpki-client