Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
File:                     ELZc9vpeH8roz4TJcB44vftjqrM.mft (raw, json)
Hash identifier:          9WXaHH92mPJySC8s1XRMKXErjqYmNEMrUbrQGmVj1E4=
Subject key identifier:   2E:97:A3:52:A0:3E:4E:E3:EE:90:B4:B5:BB:31:9E:B2:5C:F6:CE:4C
Authority key identifier: 10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3
Certificate issuer:       /CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
Certificate serial:       0197B7EA53081DEF72B41FB09A932FFC8899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
Manifest number:          0E62
Signing time:             Sat 28 Jun 2025 19:01:16 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:16 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:16 +0000
Files and hashes:         1: ELZc9vpeH8roz4TJcB44vftjqrM.crl (hash: c3O9evLs7qc5lHFgW66WgUpkihR+kFezOVlSiQALw7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:53:08:1d:ef:72:b4:1f:b0:9a:93:2f:fc:88:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b65cf6fa5e1fcae8cf84c9701e38bdfb63aab3
        Validity
            Not Before: Jun 28 19:01:16 2025 GMT
            Not After : Jun 29 19:01:16 2025 GMT
        Subject: CN=2e97a352a03e4ee3ee90b4b5bb319eb25cf6ce4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:12:f4:c5:6f:3f:53:8d:63:c7:9a:2e:46:9f:
                    be:55:7f:48:07:2a:c1:83:1c:19:24:2e:8a:57:8b:
                    ee:df:35:66:77:65:2e:74:11:82:87:cd:fb:8d:f7:
                    ee:2b:86:9b:2f:5e:6f:af:76:4e:01:df:0c:8e:0a:
                    76:bb:b2:64:80:e0:25:8a:a3:5e:88:39:5c:03:1a:
                    6b:69:fa:c4:4b:d6:00:be:81:09:bb:e0:99:91:d6:
                    84:ce:cf:88:24:63:f2:5e:bf:02:32:bc:12:4b:1f:
                    ce:44:3b:a9:34:86:39:9d:d0:ce:b8:30:68:f1:cc:
                    81:6d:29:8e:97:44:a9:2d:fc:82:bd:f0:fc:31:c4:
                    53:ad:a0:19:61:77:ed:4f:d7:c2:d8:60:69:a9:e8:
                    a1:cd:f4:17:b7:e1:10:a8:fd:92:b2:e6:b0:ab:07:
                    de:7f:d0:3c:fc:bd:00:43:a0:9e:0a:59:90:de:12:
                    d4:f7:a1:1f:0c:97:42:1b:68:87:e9:32:0a:92:c3:
                    dc:09:70:d4:79:e4:73:f9:f2:22:ea:d6:0a:32:27:
                    c7:2a:2d:4d:88:66:93:3b:47:71:86:ef:da:22:29:
                    8c:86:14:29:d1:7f:65:d3:6a:0f:80:15:fa:da:b4:
                    1c:ac:00:fc:16:44:e1:59:ed:e7:54:34:6d:d9:98:
                    70:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:97:A3:52:A0:3E:4E:E3:EE:90:B4:B5:BB:31:9E:B2:5C:F6:CE:4C
            X509v3 Authority Key Identifier:
                keyid:10:B6:5C:F6:FA:5E:1F:CA:E8:CF:84:C9:70:1E:38:BD:FB:63:AA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ELZc9vpeH8roz4TJcB44vftjqrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/8090c2-8180-4f3f-8142-a23855872b86/1/ELZc9vpeH8roz4TJcB44vftjqrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ee:84:3f:7e:67:79:a1:51:7e:ce:12:6e:69:f6:bd:31:60:
         c5:5b:85:64:2b:50:51:df:9b:b0:f7:f9:d2:ab:09:de:80:44:
         9c:e9:96:79:fe:0d:bc:6e:74:d3:31:64:bc:fb:48:c7:06:4a:
         4c:49:44:f3:35:db:4c:1e:44:2e:a6:e2:d0:4b:f4:af:3b:0b:
         a5:65:a9:3e:79:f6:31:80:96:ed:e5:11:97:58:5c:85:ec:a3:
         94:48:8a:b4:54:52:06:31:da:66:5f:69:b3:1c:13:ca:e3:48:
         03:fc:22:f8:5a:d9:9e:e8:13:62:bd:5c:43:8a:95:6d:c9:f4:
         28:56:74:0c:20:b1:52:a7:f3:d0:a4:d9:ba:79:59:1c:94:97:
         0d:e6:a1:e4:a0:4d:3e:bc:3c:64:a5:1c:3b:62:fc:94:70:cf:
         41:ff:0c:55:ce:2c:40:30:84:56:36:11:5c:88:50:bb:94:a0:
         9f:ab:2f:05:a4:55:90:01:e9:1e:05:95:93:ea:1a:4e:a4:5e:
         66:25:e9:08:ab:28:f8:0a:1f:56:9d:62:9a:08:be:5e:ba:b0:
         ea:19:9e:32:9b:0c:27:87:e3:8d:3a:8c:af:34:1a:43:51:25:
         37:b3:6f:ef:38:f5:8b:64:ea:63:62:20:0e:7c:c2:d2:c9:05:
         28:21:0a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:01 2025 by rpki-client