Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
File:                     ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft (raw, json)
Hash identifier:          eRjAA0+VWSwGgYZ/h25J9vPPtlMaZST0ptnw/Bwqkus=
Subject key identifier:   E2:FB:FE:69:D0:A2:7E:40:92:8F:7E:1E:57:EF:9B:57:51:DA:76:CA
Authority key identifier: 10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39
Certificate issuer:       /CN=10b43613535ffaa73d9acc503c71a28fa17b3839
Certificate serial:       0199FDD93523DAB88EB37A9788409F0EA9B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
Manifest number:          0D84
Signing time:             Sun 19 Oct 2025 19:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:34 +0000
Files and hashes:         1: ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl (hash: UDiuNKETgUOkoXfdrvulxghlxI6kQjoKXguI38169is=)
                          2: _HSn7eAJ1-GN-PARSBNdWZcI_CM.roa (hash: PSxIhhf7j8l1h9bP9LYjz403TkZ/7uIEMgwPHzFFKaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:35:23:da:b8:8e:b3:7a:97:88:40:9f:0e:a9:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b43613535ffaa73d9acc503c71a28fa17b3839
        Validity
            Not Before: Oct 19 19:01:34 2025 GMT
            Not After : Oct 20 19:01:34 2025 GMT
        Subject: CN=e2fbfe69d0a27e40928f7e1e57ef9b5751da76ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:fd:5d:91:4b:02:e2:b2:d1:b9:45:82:22:
                    5c:39:58:95:b8:cc:af:a7:84:12:a3:99:3c:b8:aa:
                    f4:be:14:35:75:5f:82:51:8d:fc:71:fb:69:eb:14:
                    a1:42:f1:7c:ab:63:54:ea:01:bf:14:5d:24:12:24:
                    fa:90:11:c0:0c:fb:44:fd:b7:4b:d8:19:d9:19:e1:
                    98:ae:62:85:bf:4b:57:f7:63:f8:31:f4:a4:73:fa:
                    b6:33:6a:52:ae:8f:5e:7c:3a:ca:db:59:41:36:17:
                    25:1c:4a:15:ba:51:45:73:a7:20:ce:cb:7e:f1:37:
                    69:3d:46:2b:da:92:fe:42:54:e9:53:48:50:a8:12:
                    05:7a:79:8a:c2:d6:0b:99:6d:55:5a:ce:9f:b1:e9:
                    11:0e:f0:2e:3e:e0:f0:42:89:3a:30:f9:53:d8:94:
                    ff:c8:d7:4a:76:ff:96:97:ba:68:36:ac:39:5b:06:
                    a4:c5:f9:dc:d9:8a:64:11:d9:23:26:96:96:5d:e0:
                    f5:c8:b0:06:0d:73:62:54:0f:60:3a:9f:cd:03:71:
                    49:6b:13:8d:25:2b:d6:52:c4:80:41:42:b1:65:0e:
                    d7:38:bf:ff:21:4e:b9:55:04:f4:3b:0b:7b:46:33:
                    96:37:77:f5:3b:11:17:b1:8d:d2:61:32:a0:d9:8d:
                    f9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:FB:FE:69:D0:A2:7E:40:92:8F:7E:1E:57:EF:9B:57:51:DA:76:CA
            X509v3 Authority Key Identifier:
                keyid:10:B4:36:13:53:5F:FA:A7:3D:9A:CC:50:3C:71:A2:8F:A1:7B:38:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELQ2E1Nf-qc9msxQPHGij6F7ODk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2ee71b-8ffe-4eb6-9434-cf3c1a79e634/1/ELQ2E1Nf-qc9msxQPHGij6F7ODk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b3:af:2e:5a:91:6e:23:40:33:51:14:b9:95:6e:7f:70:de:
         11:ac:c0:06:12:6c:e2:25:54:b5:6f:53:cb:80:5c:73:37:b8:
         c0:73:98:25:34:8c:3a:cc:4c:32:09:04:38:0c:a0:3d:29:69:
         66:56:c9:26:b5:9a:78:a0:9a:f1:ef:7b:f6:aa:3a:22:26:c7:
         3f:cb:19:93:c1:7a:d2:fe:9e:34:a2:47:81:e4:f7:6d:e4:d6:
         e9:53:25:26:79:84:56:c5:19:a4:9d:1c:86:ab:5c:77:d7:b5:
         18:19:57:ed:5e:45:4f:07:0c:83:35:1a:b0:a6:5c:66:63:25:
         89:83:10:13:34:9b:48:01:cc:01:7e:a2:5c:d9:70:e7:cc:06:
         cf:4e:0a:ca:4a:74:f3:58:cd:79:a3:d1:bd:1a:b7:cb:4d:17:
         20:03:5a:6b:f2:b4:38:be:1d:d7:d1:87:d8:03:c4:c5:05:a9:
         28:76:53:a4:97:17:63:4c:3d:91:fb:4d:ad:01:05:3d:f3:e1:
         a7:9a:ef:3e:75:e6:a2:eb:a1:25:d0:f0:dc:39:df:5f:ab:3a:
         3a:ae:37:6a:54:65:b4:20:ac:74:fe:2f:bd:76:90:53:e9:ca:
         38:74:79:61:53:25:a5:42:a2:93:a2:7b:cf:7a:ac:e9:bc:f7:
         e9:3b:9b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:13 2025 by rpki-client