Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
File:                     eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft (raw, json)
Hash identifier:          7bvABIns98pmi8HDvPXuTChddv0s67zv0LiAI5mKTlg=
Subject key identifier:   98:76:E3:C8:6B:F5:D6:93:B4:26:CA:95:93:8E:00:73:92:11:38:FC
Authority key identifier: 7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A
Certificate issuer:       /CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a
Certificate serial:       0198394D34BF2AD7896551023505D5447206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
Manifest number:          062C
Signing time:             Wed 23 Jul 2025 22:00:17 +0000
Manifest this update:     Wed 23 Jul 2025 22:00:17 +0000
Manifest next update:     Thu 24 Jul 2025 22:00:17 +0000
Files and hashes:         1: eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl (hash: UdqzeY50eMfXCDNgfNR2rtBqbZvdrDH8EnFu3gjqwxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:39:4d:34:bf:2a:d7:89:65:51:02:35:05:d5:44:72:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a
        Validity
            Not Before: Jul 23 22:00:17 2025 GMT
            Not After : Jul 24 22:00:17 2025 GMT
        Subject: CN=9876e3c86bf5d693b426ca95938e0073921138fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e1:48:59:64:57:1b:28:49:f1:89:53:35:b2:
                    f3:27:8e:30:11:45:e4:58:fd:96:e2:91:ce:02:15:
                    ab:1a:96:1f:62:91:8f:37:88:70:ff:4c:38:30:aa:
                    84:d3:54:67:55:10:01:c8:ea:7d:be:f4:00:4c:6a:
                    82:88:01:ef:a0:84:f3:26:b6:76:f3:70:cd:cd:62:
                    4b:cc:bb:9e:f1:c8:56:dd:fc:b0:5a:37:6a:77:18:
                    3d:d6:b1:bf:dc:b1:9a:3d:ec:c7:29:4f:b5:75:bc:
                    07:05:1b:0d:33:01:4b:e7:67:9d:d5:4b:10:2c:91:
                    20:ed:93:3f:75:34:6d:0f:96:1d:dc:79:29:91:a5:
                    13:4d:32:89:8f:2b:af:86:14:c7:80:ae:b8:43:bd:
                    3a:8c:1e:de:2b:8b:bc:37:c2:d8:6b:37:e4:36:15:
                    c7:71:0e:5d:8b:93:c8:49:cf:bd:ee:5e:d5:47:55:
                    37:54:96:ac:50:3c:7d:b8:cc:81:3d:10:3a:ea:77:
                    14:49:9f:99:75:b2:f2:1e:ac:71:56:71:a9:49:66:
                    57:38:24:5d:9f:e5:14:a1:31:7f:3a:c6:7f:0b:f1:
                    4b:e7:70:af:ff:3c:fb:97:b6:cd:ce:6c:a0:f2:cf:
                    55:8e:ca:5e:73:5e:41:f8:67:7f:2a:ca:28:99:79:
                    40:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:76:E3:C8:6B:F5:D6:93:B4:26:CA:95:93:8E:00:73:92:11:38:FC
            X509v3 Authority Key Identifier:
                keyid:7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:f4:b4:a2:ce:5b:30:08:18:6a:63:7f:c8:b7:f0:17:6e:0c:
         1a:d4:4a:ef:50:f2:83:63:b7:80:12:03:e8:33:c9:3c:10:ec:
         26:95:d1:22:bb:ee:d5:f7:e8:4d:c6:7a:44:22:5f:76:f7:b5:
         d8:ab:2a:e4:a0:71:6a:25:df:1b:11:9f:8c:07:46:31:c1:d2:
         a8:a1:95:bc:85:03:1c:37:94:6b:07:d9:7b:d6:34:39:89:61:
         04:09:36:4f:2a:d7:5b:07:99:92:ef:2c:6a:e3:d5:0e:e3:83:
         9e:50:70:2d:a0:a7:91:38:28:79:56:b5:ae:7c:1c:a3:7c:f4:
         b0:f8:3e:90:a4:5a:b4:6a:16:32:46:89:83:d9:b0:a9:cc:82:
         94:3b:5f:7d:74:63:b4:38:ff:a7:55:82:75:11:17:83:4a:a1:
         f3:b8:7c:d8:51:fd:72:0f:4b:f0:94:2d:ab:a8:80:04:7d:41:
         8c:e8:07:f4:fc:d6:0d:1f:22:b3:8c:13:4b:5a:7f:b3:95:c9:
         44:15:24:a2:9f:e9:bc:0b:7d:95:d3:51:18:52:32:41:b8:cc:
         46:29:5d:06:88:66:88:bf:e6:d0:b3:75:c4:28:eb:0f:99:2e:
         c1:bd:08:88:95:74:b8:73:63:e2:0a:f4:43:0f:f3:a7:a0:70:
         68:83:c6:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg5TTS/KteJZVECNQXVRHIGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMjBhODdiODJmNjk4YmJlOTQ5MGE0MjFhM2QxYjQxNjE4
NTVmNWEwHhcNMjUwNzIzMjIwMDE3WhcNMjUwNzI0MjIwMDE3WjAzMTEwLwYDVQQD
Eyg5ODc2ZTNjODZiZjVkNjkzYjQyNmNhOTU5MzhlMDA3MzkyMTEzOGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+FIWWRXGyhJ8YlTNbLzJ44wEUXk
WP2W4pHOAhWrGpYfYpGPN4hw/0w4MKqE01RnVRAByOp9vvQATGqCiAHvoITzJrZ2
83DNzWJLzLue8chW3fywWjdqdxg91rG/3LGaPezHKU+1dbwHBRsNMwFL52ed1UsQ
LJEg7ZM/dTRtD5Yd3HkpkaUTTTKJjyuvhhTHgK64Q706jB7eK4u8N8LYazfkNhXH
cQ5di5PISc+97l7VR1U3VJasUDx9uMyBPRA66ncUSZ+ZdbLyHqxxVnGpSWZXOCRd
n+UUoTF/OsZ/C/FL53Cv/zz7l7bNzmyg8s9Vjspec15B+Gd/KsoomXlAjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJh248hr9daTtCbKlZOOAHOSETj8MB8GA1UdIwQY
MBaAFHogqHuC9pi76UkKQho9G0FhhV9aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWlDb2U0TDJtTHZwU1FwQ0dqMGJRV0dGWDFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yZmJjY2EtNDAwOC00NDY1LTg5YWMt
MDFlMTgzYTkyZjA4LzEvZWlDb2U0TDJtTHZwU1FwQ0dqMGJRV0dGWDFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8yZmJjY2EtNDAwOC00NDY1LTg5YWMtMDFlMTgzYTkyZjA4
LzEvZWlDb2U0TDJtTHZwU1FwQ0dqMGJRV0dGWDFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPS0os5b
MAgYamN/yLfwF24MGtRK71Dyg2O3gBID6DPJPBDsJpXRIrvu1ffoTcZ6RCJfdve1
2Ksq5KBxaiXfGxGfjAdGMcHSqKGVvIUDHDeUawfZe9Y0OYlhBAk2TyrXWweZku8s
auPVDuODnlBwLaCnkTgoeVa1rnwco3z0sPg+kKRatGoWMkaJg9mwqcyClDtffXRj
tDj/p1WCdREXg0qh87h82FH9cg9L8JQtq6iABH1BjOgH9PzWDR8is4wTS1p/s5XJ
RBUkop/pvAt9ldNRGFIyQbjMRildBohmiL/m0LN1xCjrD5kuwb0IiJV0uHNj4gr0
Qw/zp6BwaIPGzw==
-----END CERTIFICATE-----
Generated at Thu Jul 24 00:20:37 2025 by rpki-client