Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
File:                     EqZX80JMjdVSFa-FO5MwfDZsU4o.mft (raw, json)
Hash identifier:          Gjki9rsvLtj4wMtomTqP+cUixAAdQjEji8e2+YGTp/8=
Subject key identifier:   D8:C3:05:66:3B:77:43:F8:AC:B4:55:D9:F5:1A:B4:4F:82:BD:D1:23
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Certificate issuer:       /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial:       019873E403B2DBC5B08DF10F05F819131521
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
Manifest number:          091B
Signing time:             Mon 04 Aug 2025 07:02:59 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:59 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:59 +0000
Files and hashes:         1: 6_cwB_aNOhlx5E_GvZkyarRW0Z4.roa (hash: 7y4sh5xw48OqUBIdhgjLdNsXxahA8MbbBMgBPYk65Lk=)
                          2: EqZX80JMjdVSFa-FO5MwfDZsU4o.crl (hash: 83LBYzokJCvRamxrPfMrJDGouCCw3vWujKSUmUzkkS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e4:03:b2:db:c5:b0:8d:f1:0f:05:f8:19:13:15:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
        Validity
            Not Before: Aug  4 07:02:59 2025 GMT
            Not After : Aug  5 07:02:59 2025 GMT
        Subject: CN=d8c305663b7743f8acb455d9f51ab44f82bdd123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5a:db:65:d4:d4:f8:e8:1e:a8:66:04:76:9c:
                    1a:2d:8b:d0:94:38:bc:84:2a:6e:e5:dc:63:d0:68:
                    d4:b1:25:35:74:74:9a:0e:4d:4e:f9:8a:1f:30:0e:
                    24:c9:81:e8:e9:be:ed:d5:bd:dc:1c:fa:08:6f:80:
                    ea:ba:f0:d1:5c:c3:8a:63:e3:6d:17:e2:e1:ce:c1:
                    ad:47:dc:2b:0b:07:59:5e:fb:48:2e:66:cf:e2:29:
                    fc:9f:98:d5:a0:4b:4e:22:71:75:76:8f:fc:df:fb:
                    41:52:a0:90:80:56:c2:ed:4f:94:21:8a:40:94:a8:
                    06:f9:e6:61:d8:5f:ab:90:8c:1f:0c:e5:ea:07:21:
                    b5:6e:c4:c7:3c:8b:92:30:41:50:27:31:b4:36:41:
                    9b:8f:78:a8:f4:48:17:0a:7d:8e:f8:63:07:04:8c:
                    ab:99:b9:a8:12:39:82:76:cc:d8:84:fb:ab:69:62:
                    16:0f:b4:49:08:d7:49:0c:0c:e2:a4:ec:0a:7d:5b:
                    2a:64:7d:58:69:64:65:ca:06:c2:6d:6a:d7:c1:78:
                    26:47:16:9e:e6:f4:7f:ae:03:16:03:96:d2:49:62:
                    15:08:cf:58:63:89:bd:76:14:ad:62:a7:dc:0c:20:
                    52:04:da:19:dd:bf:6c:e2:16:ea:37:3c:52:f5:ba:
                    24:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C3:05:66:3B:77:43:F8:AC:B4:55:D9:F5:1A:B4:4F:82:BD:D1:23
            X509v3 Authority Key Identifier:
                keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:49:76:a5:b6:71:07:99:dc:bf:07:4c:20:e3:47:48:73:ac:
         37:ac:a4:a1:c3:89:bf:2f:2d:a9:4b:4b:b2:a5:e6:33:ec:20:
         51:43:7e:17:44:d6:da:da:d0:3d:60:f4:cb:59:17:bc:3a:c9:
         3f:88:cd:bf:29:7b:e7:a0:58:f9:d9:a2:bb:52:5a:31:71:63:
         5a:84:af:db:0b:33:28:42:17:8b:d2:cd:a6:f7:cc:14:b0:47:
         0f:0a:b5:c1:d8:ce:89:82:da:be:9f:52:c9:de:24:2e:5a:90:
         ef:d8:14:35:54:97:9d:26:2c:14:5d:62:33:86:a5:f8:f1:5c:
         9d:b2:cb:c6:e6:f1:dd:34:67:80:f3:50:d0:03:6c:b6:cf:62:
         27:14:a7:47:87:8e:ad:7a:fd:02:f3:b1:74:a4:d2:84:31:c2:
         10:64:66:57:11:63:ab:8f:64:fa:63:e1:7f:c3:f9:e2:cd:6b:
         f8:f0:be:50:11:3a:3e:3a:75:e7:2f:d4:14:be:d2:11:20:33:
         45:4d:6a:6e:86:36:d6:0f:6c:87:2f:60:af:51:e1:58:00:b7:
         7d:c6:6f:e2:a0:04:14:f6:3f:e3:92:06:17:04:0a:80:0a:4e:
         98:91:28:5b:f6:bc:60:89:ad:a4:70:92:cf:aa:2c:e0:d8:bc:
         e7:ef:91:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:01 2025 by rpki-client