Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
File:                     elBBBN9nzv6N7h0YqWhQqaZMLJU.mft (raw, json)
Hash identifier:          hqjxe1nwqpWOurFpHUVHALQhOSwmp9vRjMAQC/Sqvcw=
Subject key identifier:   C8:C8:83:61:E2:CC:A7:45:43:F2:F7:C7:93:9F:45:FE:7D:FC:60:D8
Authority key identifier: 7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95
Certificate issuer:       /CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
Certificate serial:       0197B7B333102EAB0DE88112CFC6810A02A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
Manifest number:          05B4
Signing time:             Sat 28 Jun 2025 18:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:03 +0000
Files and hashes:         1: elBBBN9nzv6N7h0YqWhQqaZMLJU.crl (hash: tRa+Aumo+8aO0TfP3Yj19fbJWGVo55BsY4QPuSidUWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:33:10:2e:ab:0d:e8:81:12:cf:c6:81:0a:02:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
        Validity
            Not Before: Jun 28 18:01:03 2025 GMT
            Not After : Jun 29 18:01:03 2025 GMT
        Subject: CN=c8c88361e2cca74543f2f7c7939f45fe7dfc60d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fa:a3:63:f1:77:e4:34:58:33:59:07:db:6d:
                    14:f3:93:92:f7:66:00:8d:c3:48:5f:9c:b0:17:d5:
                    fa:c0:53:8d:98:62:ce:24:d8:84:d5:ac:83:63:0b:
                    65:7f:93:67:59:99:3e:82:a4:26:e4:63:b8:76:ca:
                    5e:33:b1:02:15:bb:14:cd:81:eb:59:37:4a:cd:68:
                    5a:06:15:db:17:df:8f:f7:17:0e:94:9f:13:0c:63:
                    48:25:f4:09:89:9d:48:43:bf:5c:13:33:66:8c:7a:
                    a9:d9:29:26:fe:33:d7:94:b4:ab:ee:1a:ed:ff:3b:
                    af:f9:a2:74:97:86:b0:83:3e:3b:81:46:0a:15:9c:
                    d2:6d:8d:bc:84:43:48:7a:50:ac:22:63:bd:23:87:
                    10:1e:d2:d9:0c:c5:37:2d:f6:e2:8e:23:48:7b:b1:
                    c5:be:80:80:d5:02:43:73:c4:1f:f3:5e:a0:b2:3d:
                    90:e1:c5:02:5e:9c:1a:fc:68:62:3f:ef:0f:f9:b5:
                    ee:6c:96:f1:ec:23:b5:be:f1:f6:7a:4c:e4:f8:48:
                    40:f8:5d:3e:90:a9:b3:cb:e9:1d:b9:78:7e:ea:ff:
                    24:85:9d:5d:73:b2:67:ba:a7:30:b2:48:69:8d:94:
                    59:28:00:6f:8e:cc:44:0b:3f:5c:ad:92:44:cf:b7:
                    50:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C8:83:61:E2:CC:A7:45:43:F2:F7:C7:93:9F:45:FE:7D:FC:60:D8
            X509v3 Authority Key Identifier:
                keyid:7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:38:98:cd:9e:e1:ce:e6:3b:cc:90:0e:df:ae:94:59:d2:d6:
         46:df:e1:b2:6f:41:94:dd:5a:cb:aa:d5:c1:3a:ca:96:a9:0c:
         47:b5:5f:65:fd:ae:b4:ec:f8:63:82:c1:9e:d7:82:28:a5:bb:
         aa:95:a4:c1:ba:4f:30:82:3a:24:76:cd:12:42:ce:5c:c2:e7:
         76:1a:60:7f:a8:97:c6:c0:e1:c3:ba:a5:05:ff:88:aa:9c:75:
         e0:7e:4c:a5:9e:c4:a9:f4:cc:3f:ce:1e:8f:9b:e9:ae:26:ad:
         00:0e:c8:a6:fa:0b:89:f7:63:6b:40:b0:ec:ba:dc:5a:f5:72:
         af:c4:60:b6:4a:fb:d6:50:8b:05:93:ec:76:f4:57:c6:54:a1:
         83:fe:20:ee:86:2f:c2:19:9f:34:7c:78:22:83:99:47:d7:cd:
         02:36:cc:be:a4:5f:5b:64:33:16:fd:6c:1b:92:bb:e1:37:70:
         09:7c:12:89:d9:37:10:33:fb:0f:cf:6d:03:9d:d9:46:40:78:
         0b:51:67:0f:4c:aa:0a:d3:37:12:57:6b:f2:de:54:eb:08:96:
         3f:19:66:c2:a1:07:0d:9b:06:e8:94:fc:50:73:0e:2d:10:95:
         bb:55:54:78:e5:05:9b:14:e2:35:eb:17:82:70:25:fb:08:15:
         86:80:6a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:11:52 2025 by rpki-client