Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
File:                     ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft (raw, json)
Hash identifier:          xE5AaHMQ8jGEHc8ywUHaM1dzIoAyxqfoLet1IYZ6sto=
Subject key identifier:   BA:6C:F0:61:1D:29:03:5D:AC:3F:2B:35:04:D0:74:0A:03:89:B8:CE
Authority key identifier: 10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39
Certificate issuer:       /CN=10b43613535ffaa73d9acc503c71a28fa17b3839
Certificate serial:       0196BB5AC6F1891A10113D6CF823CE9B7BED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
Manifest number:          0BD4
Signing time:             Sat 10 May 2025 18:00:10 +0000
Manifest this update:     Sat 10 May 2025 18:00:10 +0000
Manifest next update:     Sun 11 May 2025 18:00:10 +0000
Files and hashes:         1: ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl (hash: YhtrlsyMWuTmTkh1r1k3ScPSB45NYsYw5RPPmOYGaLE=)
                          2: _HSn7eAJ1-GN-PARSBNdWZcI_CM.roa (hash: PSxIhhf7j8l1h9bP9LYjz403TkZ/7uIEMgwPHzFFKaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:5a:c6:f1:89:1a:10:11:3d:6c:f8:23:ce:9b:7b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b43613535ffaa73d9acc503c71a28fa17b3839
        Validity
            Not Before: May 10 18:00:10 2025 GMT
            Not After : May 11 18:00:10 2025 GMT
        Subject: CN=ba6cf0611d29035dac3f2b3504d0740a0389b8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bb:f3:81:7c:1d:c6:e3:4c:be:23:da:70:25:
                    d5:2f:b9:a7:63:12:75:0b:f9:12:ec:7e:6c:01:74:
                    cf:14:d5:dc:8a:fe:7f:ab:cd:b4:19:a8:8b:2c:16:
                    49:3e:16:a6:07:28:bb:06:77:ce:30:ac:d1:fc:a8:
                    f5:25:ad:6d:fc:44:e0:42:76:fd:a3:0f:2e:57:aa:
                    68:40:0d:aa:50:09:03:c3:53:6e:2d:cf:4a:df:61:
                    af:f1:be:36:75:a7:18:4c:16:3e:ad:0c:75:35:60:
                    ac:61:f8:6c:52:5f:10:3e:fb:e5:ea:b6:a1:b3:d6:
                    08:f5:43:fe:ea:d5:6b:62:09:4b:8b:61:e2:f1:b8:
                    60:ef:61:67:5d:a0:96:e7:c9:1d:e7:11:02:eb:86:
                    a5:62:07:ae:55:58:c3:19:c8:e5:1c:79:8d:88:21:
                    57:12:8f:df:e8:2b:38:e6:3b:be:e2:9e:4a:d9:6b:
                    34:7c:f0:07:f9:99:16:45:d9:8c:0f:0a:72:e9:8e:
                    02:e5:3c:d6:e0:ff:90:91:87:e1:b1:41:0f:a5:5b:
                    bb:fd:7a:14:9c:9f:b8:4a:d6:41:c3:1b:59:8e:80:
                    33:65:ab:19:48:48:15:f9:98:28:fd:13:fc:67:6a:
                    17:e6:72:83:12:e7:82:98:03:eb:be:51:f6:ea:9d:
                    56:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6C:F0:61:1D:29:03:5D:AC:3F:2B:35:04:D0:74:0A:03:89:B8:CE
            X509v3 Authority Key Identifier:
                keyid:10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:01:82:39:6f:96:13:f6:96:8b:99:bc:7f:eb:4b:87:dd:af:
         0a:a3:ad:37:95:e0:f6:6b:9b:be:ae:c2:12:f9:8d:94:1c:f5:
         37:98:f8:f3:fc:b6:f5:2f:bc:1c:63:74:75:9d:4e:30:2f:a6:
         94:f7:87:32:7a:9d:42:e4:e7:8b:77:1b:96:9d:04:79:d3:85:
         a8:c7:c6:63:ec:8d:7d:38:c5:e4:34:e7:99:b8:56:e0:75:4d:
         c8:6a:1d:29:46:30:de:d8:0d:04:2e:e5:8b:55:52:1a:68:bd:
         fb:38:81:88:de:23:20:95:87:89:18:3f:1d:e4:55:c3:36:99:
         cd:c7:0d:b1:4e:c3:56:a0:fa:ff:b1:8b:8f:84:57:e2:e9:c6:
         d6:30:58:50:63:83:ee:53:5a:93:c1:5d:77:7c:0f:26:77:c4:
         8a:e7:8e:e9:eb:84:f3:da:f2:7e:7e:3a:bd:9d:6e:6a:9a:ad:
         82:59:3b:ea:33:8f:6a:d5:43:5a:ce:3f:80:19:d9:e3:22:6e:
         e1:a1:1e:65:94:1f:d1:13:01:74:d8:e4:1e:68:86:2b:91:10:
         d9:33:34:45:99:30:c5:52:a3:82:8c:a9:8e:c7:50:9a:19:2a:
         f4:0e:c1:99:ec:7e:31:a9:de:97:f6:3b:d7:0e:7d:28:a8:ee:
         0c:cc:0d:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7WsbxiRoQET1s+CPOm3vtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYjQzNjEzNTM1ZmZhYTczZDlhY2M1MDNjNzFhMjhmYTE3
YjM4MzkwHhcNMjUwNTEwMTgwMDEwWhcNMjUwNTExMTgwMDEwWjAzMTEwLwYDVQQD
EyhiYTZjZjA2MTFkMjkwMzVkYWMzZjJiMzUwNGQwNzQwYTAzODliOGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbvzgXwdxuNMviPacCXVL7mnYxJ1
C/kS7H5sAXTPFNXciv5/q820GaiLLBZJPhamByi7BnfOMKzR/Kj1Ja1t/ETgQnb9
ow8uV6poQA2qUAkDw1NuLc9K32Gv8b42dacYTBY+rQx1NWCsYfhsUl8QPvvl6rah
s9YI9UP+6tVrYglLi2Hi8bhg72FnXaCW58kd5xEC64alYgeuVVjDGcjlHHmNiCFX
Eo/f6Cs45ju+4p5K2Ws0fPAH+ZkWRdmMDwpy6Y4C5TzW4P+QkYfhsUEPpVu7/XoU
nJ+4StZBwxtZjoAzZasZSEgV+Zgo/RP8Z2oX5nKDEueCmAPrvlH26p1WdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLps8GEdKQNdrD8rNQTQdAoDibjOMB8GA1UdIwQY
MBaAFBC0NhNTX/qnPZrMUDxxoo+hezg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yZWU3MWItOGZmZS00ZWI2LTk0MzQt
Y2YzYzFhNzllNjM0LzEvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC8yZWU3MWItOGZmZS00ZWI2LTk0MzQtY2YzYzFhNzllNjM0
LzEvRUxRMkUxTmYtcWM5bXN4UVBIR2lqNkY3T0RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwGCOW+W
E/aWi5m8f+tLh92vCqOtN5Xg9mubvq7CEvmNlBz1N5j48/y29S+8HGN0dZ1OMC+m
lPeHMnqdQuTni3cblp0EedOFqMfGY+yNfTjF5DTnmbhW4HVNyGodKUYw3tgNBC7l
i1VSGmi9+ziBiN4jIJWHiRg/HeRVwzaZzccNsU7DVqD6/7GLj4RX4unG1jBYUGOD
7lNak8Fdd3wPJnfEiueO6euE89ryfn46vZ1uapqtglk76jOPatVDWs4/gBnZ4yJu
4aEeZZQf0RMBdNjkHmiGK5EQ2TM0RZkwxVKjgoypjsdQmhkq9A7Bmex+Manel/Y7
1w59KKjuDMwNDA==
-----END CERTIFICATE-----
Generated at Sat May 10 19:35:50 2025 by rpki-client