Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
File:                     ElaCoB4i5CM4yoXHJVubP54q6jA.mft (raw, json)
Hash identifier:          hlyue2ZayOedOzIJMZxCkZv6w7pYMUBgYsyqSAfibeI=
Subject key identifier:   15:AD:6B:A7:29:0B:2A:2B:86:32:27:AC:71:9A:56:37:EE:3A:43:EE
Authority key identifier: 12:56:82:A0:1E:22:E4:23:38:CA:85:C7:25:5B:9B:3F:9E:2A:EA:30
Certificate issuer:       /CN=125682a01e22e42338ca85c7255b9b3f9e2aea30
Certificate serial:       0196C3B9838131E3E9705365156603FF929E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
Manifest number:          036D
Signing time:             Mon 12 May 2025 09:00:37 +0000
Manifest this update:     Mon 12 May 2025 09:00:37 +0000
Manifest next update:     Tue 13 May 2025 09:00:37 +0000
Files and hashes:         1: ElaCoB4i5CM4yoXHJVubP54q6jA.crl (hash: Oug1CT0WFzdb3/6QkA6eT1gO7XCF/z4efr6ywEJ8xWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:b9:83:81:31:e3:e9:70:53:65:15:66:03:ff:92:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=125682a01e22e42338ca85c7255b9b3f9e2aea30
        Validity
            Not Before: May 12 09:00:37 2025 GMT
            Not After : May 13 09:00:37 2025 GMT
        Subject: CN=15ad6ba7290b2a2b863227ac719a5637ee3a43ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e2:4d:a2:2a:f1:e3:9f:a4:b5:3f:81:32:e3:
                    6f:f8:32:d6:57:0c:da:33:3a:b1:d6:cf:4e:aa:ed:
                    19:2e:6c:f5:b8:78:57:ae:c7:74:1f:6d:51:bb:89:
                    4d:ca:f2:de:c3:2a:e7:4a:85:c5:7f:9c:4c:44:ad:
                    45:97:9d:6b:ec:4b:4c:ce:98:41:ef:ca:30:43:78:
                    7f:47:17:73:7d:d7:9d:d5:dc:a5:c6:1f:ed:a2:9a:
                    a3:97:49:51:df:a6:ea:48:d1:ea:2e:fd:7c:e6:26:
                    2c:dd:0d:2c:8b:ef:4b:b6:42:fa:7e:a0:36:42:4d:
                    48:81:e3:4e:59:09:99:bd:8e:3c:25:84:c9:9e:c2:
                    7f:26:7e:a4:08:7b:94:c2:3e:82:10:91:c8:57:c4:
                    52:a0:51:eb:8d:b9:9a:fe:c9:2a:95:43:9e:85:bf:
                    20:ca:cc:7d:22:f2:ef:c5:4f:2d:4a:31:34:58:2d:
                    0c:49:60:ee:03:0c:8a:e2:17:a4:74:0a:bd:ab:f7:
                    5f:fd:6a:c0:ea:35:e1:ef:17:37:5b:cd:99:d9:5e:
                    63:06:72:8a:fc:ed:39:5b:45:7c:bd:fe:5a:f6:30:
                    24:08:59:12:0f:ba:c1:39:17:fd:bd:ac:2b:ef:ae:
                    ae:c0:2e:52:bf:af:8b:d7:91:95:b4:66:45:26:cd:
                    56:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AD:6B:A7:29:0B:2A:2B:86:32:27:AC:71:9A:56:37:EE:3A:43:EE
            X509v3 Authority Key Identifier:
                keyid:12:56:82:A0:1E:22:E4:23:38:CA:85:C7:25:5B:9B:3F:9E:2A:EA:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElaCoB4i5CM4yoXHJVubP54q6jA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/afde34-b688-4fbd-bfdd-39b1106cc9f1/1/ElaCoB4i5CM4yoXHJVubP54q6jA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:22:61:fc:5a:48:b6:ba:1e:ef:00:a7:18:f1:93:62:5a:c0:
         57:18:4a:a0:72:17:20:dd:f7:f9:f2:89:60:24:78:02:48:6f:
         a7:f4:f8:58:bf:22:0e:a2:2b:a2:38:7f:06:1f:bb:3f:0b:7c:
         46:f0:02:f0:53:27:b8:17:72:93:9a:31:69:10:92:25:1d:d9:
         e6:0b:d0:54:3e:b7:4d:3c:6b:93:85:d6:85:92:a8:93:f9:05:
         59:fa:29:28:35:94:01:73:0c:d5:c4:10:98:e3:fd:e0:db:9e:
         3c:c6:9d:b1:3d:68:84:2d:ec:cf:2c:38:a3:16:85:f6:76:e5:
         cc:0a:8b:12:37:b3:61:d8:05:b6:fb:41:0e:74:12:2b:5f:74:
         14:cb:42:b8:0f:ca:3f:ca:7b:43:68:6a:14:f9:6c:c2:1a:76:
         15:63:02:00:57:ca:7c:26:94:f4:13:4d:73:c0:96:b3:ce:5c:
         05:11:18:30:0d:eb:3b:c9:19:0d:21:b9:7c:db:45:61:ac:29:
         f7:ae:47:04:3e:83:76:ac:fd:b4:02:48:5e:e1:d3:af:2a:85:
         b6:15:02:6f:fd:8f:af:7d:e8:f8:9c:8b:da:03:6a:8b:33:c9:
         c7:a7:6e:71:b2:81:aa:df:94:ca:99:04:87:2a:ce:a1:6f:4a:
         37:ad:c2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:44:06 2025 by rpki-client