Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
File:                     ECeophKZuAo-cdGpgUJ-wAuEnRc.mft (raw, json)
Hash identifier:          Pa0MCBFD7r8mLefC0xhQlx/qNS8qgEPhQ47sk/knmzQ=
Subject key identifier:   61:A3:F0:A9:BD:46:65:DB:00:5F:6E:44:E9:B9:40:91:F4:56:71:5D
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Certificate issuer:       /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial:       019A4DE19C3C0160B62FEA5DF5147D96DFA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
Manifest number:          065D
Signing time:             Tue 04 Nov 2025 08:00:22 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:22 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:22 +0000
Files and hashes:         1: 2EE5sI-lHxPW-m95GPnlbkqBGKw.roa (hash: rZX0WbnFMbiHv4Iw7Uo3xd9gD2qfAlVmi5TezkAjKms=)
                          2: ECeophKZuAo-cdGpgUJ-wAuEnRc.crl (hash: l1ZzJLVsmFTuEboF2TmXcYZf1ExZJh/PWlrAccUJ5nw=)
                          3: GLpitTLoKfeAEOHv7sg-N2mDyyM.roa (hash: DLCIbqmbMU+kzJKE291B9CWch8SKbQOfjzg4SB+dJMs=)
                          4: JksIp8plt8XHk157IJ1eE1-tvto.roa (hash: wgY/0YYKwrZFlsYl68IwR2OteHvDDcA3JQTOM7ecfhk=)
                          5: UohPfLpYQFWq1aE3FZr-DrIx55E.roa (hash: KnJXUEOwlaB/y/AXpGglu/TyZvgBRRpzdQU4qGeto24=)
                          6: wGte5Are8NpBD8KTHQ531vUjpFs.roa (hash: G9rpZQy7UTdVZ8RG/8ciW3S8lvdFNXdVuqbWWEiXC7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:9c:3c:01:60:b6:2f:ea:5d:f5:14:7d:96:df:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
        Validity
            Not Before: Nov  4 08:00:22 2025 GMT
            Not After : Nov  5 08:00:22 2025 GMT
        Subject: CN=61a3f0a9bd4665db005f6e44e9b94091f456715d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0f:7e:41:5c:8f:b8:28:96:11:da:90:cd:bb:
                    ae:57:db:27:64:2d:3a:76:ae:21:4e:27:5f:e7:96:
                    ca:0f:52:7d:a1:68:31:ba:c2:59:54:9a:03:95:40:
                    8f:13:18:86:ac:ac:1a:f4:b6:d3:8d:79:21:b4:7d:
                    a8:e4:6f:5f:1d:6e:af:64:5b:af:34:6c:be:1c:49:
                    11:95:2a:15:1a:c9:a9:c0:b0:31:5f:44:f5:02:cd:
                    e9:ad:02:13:92:80:10:ab:ef:69:20:d7:d5:9a:da:
                    3e:33:aa:57:6e:00:3b:cb:db:3f:7b:f6:0a:b7:78:
                    cf:e0:25:65:c3:c4:3c:47:b0:80:69:70:53:20:3a:
                    ff:e7:54:0a:0a:d0:69:3c:a0:6d:a1:a5:0c:70:dd:
                    40:9c:d7:0d:ec:af:37:ad:4b:e7:45:a7:73:02:f3:
                    c4:91:00:42:fb:8c:58:57:61:e5:c9:65:65:d6:4f:
                    2a:61:81:63:44:79:f1:d8:48:b1:5e:3d:2c:ab:d2:
                    d6:ed:eb:24:b7:2b:4a:c2:f5:a3:09:cd:ed:cd:5a:
                    7f:51:8f:c6:d6:09:04:c5:3f:28:91:d3:d1:ce:95:
                    94:07:cf:f0:6e:71:0f:46:da:4a:21:aa:3c:ce:2f:
                    2a:f8:a0:81:c3:16:31:61:4b:10:dc:44:8c:22:f3:
                    3e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A3:F0:A9:BD:46:65:DB:00:5F:6E:44:E9:B9:40:91:F4:56:71:5D
            X509v3 Authority Key Identifier:
                keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:44:12:83:8e:ca:a9:3b:b8:85:e3:84:3e:b2:ea:1b:53:5a:
         bf:45:e4:f2:f7:b8:76:cb:7d:c2:14:45:27:ad:34:ee:55:19:
         18:d1:79:c8:10:c0:a4:01:e8:03:69:23:8a:b9:6b:70:61:70:
         10:03:b2:e8:5a:9b:66:54:18:fb:25:e0:64:2c:6d:77:20:6a:
         21:8e:ab:ae:aa:5a:c8:12:9a:97:03:34:a9:cd:ba:d2:27:22:
         18:ce:e2:3c:e4:32:64:33:4d:ca:f3:d8:ce:7c:a0:80:ef:88:
         d6:38:30:42:f4:4a:92:d7:ea:c1:9b:64:2c:cc:35:7f:ca:97:
         c9:4d:f7:8f:6b:6f:90:b8:e1:c2:05:eb:fe:96:aa:e0:cc:5c:
         5d:07:d0:b2:28:05:b3:d4:d7:8a:14:08:5c:11:7b:c5:9e:e1:
         bb:51:6d:71:3c:0d:2b:2e:45:ba:72:61:41:8d:b8:15:2e:b1:
         a6:2a:ba:3e:b0:77:25:77:f1:dd:58:7e:bd:cc:8f:f3:91:c1:
         ff:5e:bc:15:31:4f:93:a2:d1:08:4c:a2:2d:75:e0:ea:2d:75:
         9f:37:8f:d5:f3:a3:8a:8b:8f:3b:00:14:c4:39:ef:4b:e6:54:
         85:fd:98:f2:20:43:3f:25:92:e4:6c:d1:da:71:83:b4:5c:6c:
         3e:87:89:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:21 2025 by rpki-client