Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
File:                     Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft (raw, json)
Hash identifier:          V2rwI6wa1T7FJ7nSm+M5Da+4rhU6w8ckTjndvJHpdzk=
Subject key identifier:   23:E1:CE:F7:12:B9:60:D4:42:D7:C8:B4:F3:92:56:A8:63:2C:29:16
Authority key identifier: 11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34
Certificate issuer:       /CN=11c971ff0d25f2034c05ab2958a86f732bc67734
Certificate serial:       0198D54DCE25B1318B687A5B892B18E155DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 05:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:42 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:42 +0000
Files and hashes:         1: Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl (hash: 1pQD3srOmLUo9qk3qPl9KDK/p9r8Rix7r8AHrT6pCA4=)
                          2: LMMZjEog_tQosdiOx9qDUPZ7h2c.roa (hash: ejhewZ8y56OliUtcQtMRcOocpkTmo7inlBUwDmC0qfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:ce:25:b1:31:8b:68:7a:5b:89:2b:18:e1:55:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11c971ff0d25f2034c05ab2958a86f732bc67734
        Validity
            Not Before: Aug 23 05:01:42 2025 GMT
            Not After : Aug 24 05:01:42 2025 GMT
        Subject: CN=23e1cef712b960d442d7c8b4f39256a8632c2916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c0:5b:15:c0:b0:e0:66:76:45:2d:65:10:df:
                    d1:82:00:e5:68:41:ef:80:a1:a6:79:e4:65:e9:21:
                    ba:b3:eb:ad:b8:e9:c0:6e:cd:4e:81:5f:d5:ce:66:
                    07:3c:5a:ac:ce:90:0f:91:1e:3e:37:b4:23:54:b8:
                    ec:c1:f5:5a:f5:12:ff:4d:e6:5a:3e:dd:6f:fe:e1:
                    c3:60:35:9a:af:66:84:ea:b3:e1:a2:5a:a6:8e:63:
                    11:03:6a:2f:65:85:70:fb:86:88:6a:fe:96:46:db:
                    59:0b:cd:25:df:7f:26:56:a4:0d:c0:2c:a6:d4:4a:
                    8c:07:23:2e:b8:90:ae:fa:82:c5:ae:8d:cf:da:3d:
                    b1:5e:2c:03:6b:df:2c:98:52:a9:f9:e8:18:3c:2e:
                    b5:fd:b1:21:8a:e3:dc:ce:00:aa:6f:0d:7a:8b:61:
                    e8:30:cf:8d:d6:36:f5:e1:c6:1e:f7:3c:d2:99:70:
                    fa:c7:0e:d3:5c:4d:4e:9e:8d:9a:92:2d:3d:9b:dd:
                    e1:ec:83:8f:37:f0:dc:37:0a:a1:dc:46:ba:cc:49:
                    ec:58:f5:c5:d1:49:61:34:27:17:f1:b0:6f:8c:dc:
                    de:de:52:e9:7a:06:0c:56:ee:1f:7d:b1:1d:1b:7a:
                    ba:ea:f0:06:45:0c:1d:b5:f6:75:65:50:77:13:ec:
                    08:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E1:CE:F7:12:B9:60:D4:42:D7:C8:B4:F3:92:56:A8:63:2C:29:16
            X509v3 Authority Key Identifier:
                keyid:11:C9:71:FF:0D:25:F2:03:4C:05:AB:29:58:A8:6F:73:2B:C6:77:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eclx_w0l8gNMBaspWKhvcyvGdzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a19d02-002a-4cb7-afbb-ef2d7a23f609/1/Eclx_w0l8gNMBaspWKhvcyvGdzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ad:50:aa:ae:69:9b:ee:a6:20:3d:4c:64:9b:7e:51:22:ef:
         14:4c:72:a2:86:87:3f:be:73:dd:cf:ba:c8:c3:cb:02:a1:66:
         15:63:98:15:dd:7f:fa:b3:c6:f8:01:0b:00:2d:d5:2a:70:12:
         ad:bd:05:e8:60:86:fc:42:c0:30:e9:1a:5a:3c:dc:fd:78:22:
         82:29:41:d1:15:1c:29:10:c4:27:a5:40:dc:b4:04:33:8a:85:
         cf:55:8f:8b:8b:88:fb:d0:c3:98:4a:00:51:0a:80:b5:f2:ea:
         f9:92:2a:fb:48:48:39:10:c6:75:31:80:15:1f:4d:1a:c6:52:
         2f:8a:4e:16:df:f8:b4:ed:1f:9c:07:70:7b:16:f0:63:b5:69:
         dc:a9:36:9e:18:92:83:b9:e3:16:4c:f9:c0:e6:69:58:c3:40:
         fc:ab:6d:35:dc:60:a9:d4:8d:1f:37:81:0e:b2:8a:12:3a:3a:
         ae:6b:40:57:8a:85:12:3d:ad:09:86:a2:58:03:76:00:a7:6d:
         d3:10:cc:a4:ad:dd:20:63:5c:df:92:df:1e:0b:98:ed:3d:f1:
         8d:e5:0a:1e:66:c4:b2:98:e0:e4:5b:9c:0f:1d:e9:f4:d2:28:
         1a:e3:e8:48:91:11:01:13:df:c7:a3:e7:62:12:ca:48:1b:7e:
         d2:25:34:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:04 2025 by rpki-client