Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
File:                     eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft (raw, json)
Hash identifier:          dKq4KqmbaCxGgQ7UPg6n8Bs8TNxZB8P0UJZORqyeVS8=
Subject key identifier:   B0:CD:56:B8:0D:A5:01:E2:4F:63:AA:2A:DB:B9:80:CC:86:FA:90:3A
Authority key identifier: 7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A
Certificate issuer:       /CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a
Certificate serial:       019A4E4FFE46C3667F183346F0EF0E60D2E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
Manifest number:          0740
Signing time:             Tue 04 Nov 2025 10:00:56 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:56 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:56 +0000
Files and hashes:         1: eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl (hash: y9iMl3/fZC69/IOiZauYOeSYtq9Uz60opLPAc1iwtY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:fe:46:c3:66:7f:18:33:46:f0:ef:0e:60:d2:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a
        Validity
            Not Before: Nov  4 10:00:56 2025 GMT
            Not After : Nov  5 10:00:56 2025 GMT
        Subject: CN=b0cd56b80da501e24f63aa2adbb980cc86fa903a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:51:94:c2:ed:d1:d7:b5:0b:95:fa:80:25:67:
                    f1:b4:6e:41:92:c5:5b:22:85:15:ef:e3:15:05:f9:
                    c7:7f:7c:c7:88:5a:c1:77:23:c0:94:b2:f2:6e:42:
                    5f:6c:b8:82:a1:e2:da:59:4a:a3:24:e8:3c:2c:c3:
                    d3:83:64:1a:ac:56:18:eb:da:2b:25:f7:22:0d:f7:
                    a7:32:4a:e4:53:1f:51:45:1d:e9:32:e0:8f:af:48:
                    1d:54:cc:93:da:f4:e7:ac:13:e8:b5:7f:11:e7:9b:
                    43:a5:98:bb:f1:d3:23:c9:34:75:6d:26:4b:1b:f0:
                    ac:2e:d2:8b:9d:1b:73:cd:a8:40:c5:32:10:18:c3:
                    70:a2:32:53:ac:0d:bf:1e:c8:35:6c:1c:74:1a:98:
                    bb:ca:08:05:2c:27:5f:1f:60:17:e8:40:74:23:88:
                    50:8d:47:8b:53:5c:d7:c8:e2:87:bc:9f:8d:f8:0d:
                    c1:3d:db:31:3b:77:6a:8b:40:dd:bf:07:5a:6b:cd:
                    5e:0b:09:62:9a:f4:e5:5f:d0:e1:f4:30:29:d9:7d:
                    e9:47:1b:45:16:2e:e7:f1:ac:89:d3:bb:0a:9b:bd:
                    7c:11:45:35:2e:a3:bc:48:9d:78:69:96:5a:73:3b:
                    b8:52:bd:6e:3e:8a:a6:2f:54:b3:9a:1f:e0:c8:53:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CD:56:B8:0D:A5:01:E2:4F:63:AA:2A:DB:B9:80:CC:86:FA:90:3A
            X509v3 Authority Key Identifier:
                keyid:7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:97:b0:4b:03:00:9e:b3:b2:62:a6:1e:1a:5f:78:fd:92:21:
         bc:66:eb:b8:4b:65:c4:e0:3f:9e:d7:eb:58:54:12:22:59:26:
         f1:8d:58:f8:b3:e6:3c:dd:bf:7a:06:fc:bd:6a:33:25:58:1d:
         fb:ea:47:f4:10:a7:49:8b:5b:78:21:66:a0:f7:ef:3c:45:6d:
         8b:11:9f:3e:87:32:fe:48:c3:8f:33:18:34:31:10:66:4f:0a:
         a0:64:34:1d:18:42:d7:95:43:94:2b:c5:8c:d0:8a:00:40:ec:
         d4:f2:c2:0a:53:60:ea:af:2a:f1:c8:30:ef:63:2a:d5:5f:71:
         fd:a8:d7:dd:e0:f3:48:cb:b3:36:5b:aa:12:64:17:19:94:0c:
         37:19:12:53:45:d4:ce:14:62:07:6e:e5:04:8f:63:fe:b5:95:
         57:03:43:1c:03:07:67:eb:eb:68:41:d7:b2:85:ca:cb:35:6c:
         d5:b0:72:3e:41:79:71:24:57:e9:f9:76:da:8c:ad:22:b6:a9:
         92:04:dd:0f:2b:54:59:e3:62:6f:59:10:5a:52:f5:0c:2b:32:
         87:5b:4d:d9:f9:3b:b1:a3:90:e3:e2:1a:b7:fd:b4:79:23:19:
         69:ee:09:ac:b0:86:4a:ff:ac:f9:fa:8b:69:18:06:37:0a:59:
         08:15:05:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:58 2025 by rpki-client