Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
File:                     eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft (raw, json)
Hash identifier:          qQt6S4PjZ1Ok904TN/82Vak2px8Jsa+rFYIeA4HmNcM=
Subject key identifier:   2D:9F:19:F6:E0:1E:27:CA:3C:1E:32:D0:64:F2:8A:48:E3:E5:85:57
Authority key identifier: 7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A
Certificate issuer:       /CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a
Certificate serial:       019D284E0566A9B0AEA835C21A94A1C305CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
Manifest number:          08BA
Signing time:             Thu 26 Mar 2026 04:01:34 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:34 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:34 +0000
Files and hashes:         1: eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl (hash: 8A41LJs9FmlDBb4PPrVKO+HyOI3Pw+5G4bmT3GaLhRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:05:66:a9:b0:ae:a8:35:c2:1a:94:a1:c3:05:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a
        Validity
            Not Before: Mar 26 04:01:34 2026 GMT
            Not After : Mar 27 04:01:34 2026 GMT
        Subject: CN=2d9f19f6e01e27ca3c1e32d064f28a48e3e58557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:29:bf:40:bd:a7:75:be:9e:f7:82:23:ac:
                    8b:3b:dc:ca:e3:c8:d3:ef:65:58:78:ad:9f:49:26:
                    fb:c1:cf:67:c6:4d:0f:ce:ab:75:9d:4d:2a:6b:ca:
                    20:b7:34:a2:d7:e6:51:a8:6c:6e:0d:a8:68:b4:49:
                    40:80:41:9b:01:9d:7f:4c:42:f8:60:49:43:d3:43:
                    18:28:c9:67:d6:30:29:50:92:31:7e:b5:d3:e7:3c:
                    7b:c9:c3:e6:2b:68:80:e5:7e:e5:55:5a:ef:04:5a:
                    8e:37:46:04:7c:74:5a:b4:32:06:4c:cc:ce:95:91:
                    3f:e6:05:e9:bc:1d:dd:4c:1c:e5:12:72:73:cb:ad:
                    f4:2c:35:b4:a6:5d:d8:23:e4:c8:9d:2a:d5:7d:ea:
                    8c:53:06:44:c5:1c:c3:8c:03:2b:84:e1:de:9b:cf:
                    d2:00:fe:72:ac:29:e9:8b:de:a7:29:19:17:bf:69:
                    f4:a8:30:c3:cf:49:72:d8:e6:91:60:ff:39:bc:fe:
                    27:0c:04:80:f6:e5:3b:bd:a6:a3:77:66:02:58:0c:
                    77:1a:25:4e:f3:bc:7d:50:a1:07:68:05:8f:d3:fe:
                    3f:ca:d1:3d:75:39:86:70:2e:02:93:22:6a:da:04:
                    ac:35:08:b7:ec:26:cc:d1:de:a3:d5:ab:e8:ab:dd:
                    d5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9F:19:F6:E0:1E:27:CA:3C:1E:32:D0:64:F2:8A:48:E3:E5:85:57
            X509v3 Authority Key Identifier:
                keyid:7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:84:73:06:36:c8:5e:b9:8b:92:94:f9:50:ac:b5:39:ea:ed:
         78:09:50:d2:53:f9:a1:34:a4:ea:f5:94:4f:29:df:03:2e:bb:
         52:23:bc:3b:46:96:92:68:12:f9:4d:52:d4:72:1d:36:f2:4b:
         a0:f2:46:18:59:5b:61:04:ca:92:94:4e:65:06:35:db:a0:5b:
         f3:ca:14:66:86:c8:f0:ac:ed:9b:14:40:cd:f0:65:70:b5:07:
         e3:d5:f4:43:c5:30:54:e4:d5:61:57:58:0f:61:00:4d:34:a1:
         94:ae:57:5d:0c:fc:57:75:68:4c:0a:64:88:ef:f8:cf:b2:e1:
         fe:00:9d:4d:94:66:53:42:80:52:4a:8c:1c:1c:0c:fc:2c:33:
         02:04:e0:22:a8:64:25:f5:93:dc:1a:30:0a:33:f7:7e:1f:97:
         3b:fb:47:e3:be:4e:09:a4:15:68:54:1d:97:d9:fb:14:1f:43:
         26:ef:b9:1c:3d:8b:2e:66:ed:c1:25:06:a5:ff:2a:1d:16:09:
         1c:da:53:5c:a3:f1:cf:bc:51:c1:c1:71:a4:6b:40:8e:59:f0:
         c0:df:8c:42:ab:33:9e:1d:3c:0a:ef:0e:a0:40:40:38:a9:ac:
         5c:11:78:73:ca:a9:d2:a4:ab:e4:73:78:df:3b:86:ef:7f:ed:
         85:d2:2c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:56 2026 by rpki-client