Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft
File:                     EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft (raw, json)
Hash identifier:          epADAbWtJdTvFmA1dUB/27XppjR9iPZ44AnDttEUb5A=
Subject key identifier:   8C:BA:64:63:B3:17:A3:64:61:F5:0C:0D:CC:BD:22:A7:15:ED:02:8B
Authority key identifier: 10:8E:CB:64:BA:29:98:B6:C4:15:01:42:72:38:51:89:22:D6:30:E4
Certificate issuer:       /CN=108ecb64ba2998b6c41501427238518922d630e4
Certificate serial:       0199FC213D7EE16BD40C4EE34FB1F6149EF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EI7LZLopmLbEFQFCcjhRiSLWMOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft
Manifest number:          17
Signing time:             Sun 19 Oct 2025 11:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:00 +0000
Files and hashes:         1: EI7LZLopmLbEFQFCcjhRiSLWMOQ.crl (hash: mOOqn9OwCnW7jDoItO4qyfKlSz4d9yKTOo6tfFkoTG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EI7LZLopmLbEFQFCcjhRiSLWMOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:3d:7e:e1:6b:d4:0c:4e:e3:4f:b1:f6:14:9e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=108ecb64ba2998b6c41501427238518922d630e4
        Validity
            Not Before: Oct 19 11:01:00 2025 GMT
            Not After : Oct 20 11:01:00 2025 GMT
        Subject: CN=8cba6463b317a36461f50c0dccbd22a715ed028b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ce:5d:4d:2d:05:13:d9:d5:e9:62:9d:68:d7:
                    9a:86:fc:18:18:35:f9:bb:60:34:c6:d0:7b:cd:73:
                    b8:78:45:a7:3f:21:69:c0:10:ab:be:a7:9d:53:98:
                    5a:73:a7:99:dc:a9:f4:45:9d:65:63:de:ab:97:17:
                    1c:ae:1a:2e:c7:de:77:e3:5b:7a:15:45:c6:86:b8:
                    b5:4a:5d:9e:2c:74:ed:18:1f:41:11:cd:b7:c5:7f:
                    1d:d7:f1:52:95:85:e6:fc:68:23:01:31:08:fa:8b:
                    31:b6:12:23:b1:e3:8b:6c:1b:ed:55:9f:b8:74:c0:
                    9e:83:d6:0e:2e:db:97:d2:3a:70:11:d5:b8:1b:78:
                    ce:d4:1b:13:6d:a8:d0:b1:25:27:22:97:49:5e:fb:
                    26:e9:d4:46:1a:21:f9:6e:71:38:07:59:95:14:8b:
                    3b:1b:9f:78:4c:7c:6e:97:af:37:fb:4b:e3:fb:cd:
                    30:d8:b0:89:ac:9b:ee:13:4a:c8:72:93:ba:b9:dd:
                    36:ca:d6:17:70:08:47:76:38:ed:10:18:bf:86:de:
                    93:c1:c8:de:8d:4e:5c:5d:b8:1a:ab:06:bf:63:cb:
                    8b:df:44:07:89:d9:02:d9:25:1b:19:5d:3b:eb:39:
                    22:7b:eb:b3:04:a8:f5:ae:bf:a6:3a:8a:93:19:c9:
                    83:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BA:64:63:B3:17:A3:64:61:F5:0C:0D:CC:BD:22:A7:15:ED:02:8B
            X509v3 Authority Key Identifier:
                keyid:10:8E:CB:64:BA:29:98:B6:C4:15:01:42:72:38:51:89:22:D6:30:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EI7LZLopmLbEFQFCcjhRiSLWMOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a6e69d-d32d-4bb1-95b8-b7f1193ba202/1/EI7LZLopmLbEFQFCcjhRiSLWMOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:5a:f7:0b:8f:cb:9e:ee:aa:29:00:fc:71:1f:a9:af:7d:25:
         bf:91:31:c4:dc:13:bd:20:3d:45:e3:08:a1:b1:fe:d7:cf:85:
         56:0b:1a:65:b7:04:de:a2:9f:56:3f:fa:cc:53:62:80:1b:22:
         ef:b8:87:b3:5b:74:3a:db:c5:78:f9:71:f4:d8:72:b4:73:fc:
         99:da:c3:1d:ee:16:95:3b:0d:e5:0a:10:bb:8c:95:28:cd:25:
         7b:ed:b0:9e:ad:57:5e:07:53:89:4e:96:4a:a1:0d:13:cf:2a:
         0b:a4:76:3a:c2:c3:11:ba:98:4b:98:52:59:cc:c8:97:98:cc:
         f4:fc:10:ed:d6:80:f2:68:41:f1:be:22:c9:d8:31:4a:ea:e8:
         62:6d:95:1e:c1:9c:69:8b:b2:4e:2a:fa:18:96:2d:43:43:88:
         a5:20:23:19:76:c3:49:ea:e2:ac:20:bf:20:b4:58:bc:fb:f6:
         44:9d:81:2e:16:a4:1b:da:8b:bb:3c:29:d9:59:e1:65:8f:3d:
         77:12:15:72:e6:4d:1e:28:73:d4:ee:2f:0f:74:16:a4:e2:58:
         f8:25:3c:b9:3b:d1:6b:47:d0:91:9e:c1:55:c3:3e:bd:ce:d2:
         8a:58:83:da:22:2f:ec:fe:17:2a:88:af:38:43:7f:8e:60:76:
         95:f7:21:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:29 2025 by rpki-client