Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
File:                     EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft (raw, json)
Hash identifier:          i0kRwlx9Ntl7rQbR/ovpN8M6vJicRpqk8+K2MSASde8=
Subject key identifier:   B8:DC:BC:A3:5F:BE:27:1A:06:5F:A2:89:E6:A6:CC:D9:CF:71:16:F5
Authority key identifier: 11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA
Certificate issuer:       /CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
Certificate serial:       019873E3DC9A82D55B670C61770FE51EF4B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
Manifest number:          0A7A
Signing time:             Mon 04 Aug 2025 07:02:49 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:49 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:49 +0000
Files and hashes:         1: EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl (hash: kyhd6C+wYorZKjjZ11m8hvpHY/tTtaS6ZmcC39W55DM=)
                          2: zKEsruxE4cDY7eG8e5BdPLgZZLk.roa (hash: Nz28QZnXJ3PO2kQqaWAGQuglhdiOX9sRFv6wk4pN+lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:dc:9a:82:d5:5b:67:0c:61:77:0f:e5:1e:f4:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
        Validity
            Not Before: Aug  4 07:02:49 2025 GMT
            Not After : Aug  5 07:02:49 2025 GMT
        Subject: CN=b8dcbca35fbe271a065fa289e6a6ccd9cf7116f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:a8:bd:87:df:d7:26:9a:80:02:40:6c:c6:
                    49:9c:1e:63:ac:61:b3:1d:84:95:31:ae:0c:01:c3:
                    e6:9b:fb:b4:ec:23:55:e9:f5:28:8a:70:d3:8a:c5:
                    b0:b3:44:e8:ab:7a:f6:39:84:ba:30:57:d3:fa:cf:
                    39:63:9d:d5:63:74:05:2b:2b:c7:1b:40:9c:37:ea:
                    32:11:26:a9:00:32:84:69:05:75:a2:e1:e4:2e:6d:
                    96:80:ae:e4:91:be:1c:f4:89:24:3f:88:88:4b:37:
                    a8:f4:da:3a:7e:04:d7:e2:22:a4:90:40:46:b6:3a:
                    84:af:30:00:fd:d6:8e:7e:d7:82:28:35:52:49:fa:
                    0e:34:d4:b3:42:aa:fc:f5:af:5e:af:33:2a:96:af:
                    cc:7c:d3:67:55:3d:bb:ee:ae:db:b0:ff:7a:de:33:
                    0c:9e:7a:b0:19:6b:1c:cc:b7:80:57:11:15:99:98:
                    d7:4d:a4:d8:b1:5c:52:52:8f:45:eb:11:9c:83:0e:
                    13:09:ca:61:4d:99:0b:de:a4:a1:c3:b2:fc:29:03:
                    c1:c5:1e:34:0a:25:dd:87:5c:b6:0b:07:f5:58:1c:
                    25:45:84:c4:54:ea:93:76:61:fd:21:29:0a:ea:a6:
                    ac:10:c4:67:8f:b7:4f:d6:15:19:c3:95:8e:ef:2d:
                    cd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DC:BC:A3:5F:BE:27:1A:06:5F:A2:89:E6:A6:CC:D9:CF:71:16:F5
            X509v3 Authority Key Identifier:
                keyid:11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:30:4d:c3:2c:fd:25:f3:68:c2:03:08:22:ce:ae:4a:89:2e:
         c8:a0:3c:81:e9:ae:21:52:07:35:23:f4:46:8e:01:76:cc:22:
         86:19:6a:81:ad:90:f8:9c:4e:a1:1c:9c:67:b0:54:d5:12:04:
         90:ca:fd:4a:b7:12:62:9b:db:b7:69:b6:d6:1e:64:76:83:63:
         20:29:af:7e:73:9e:e2:25:2d:27:6e:6b:5b:59:34:ea:16:6e:
         76:4f:85:f3:68:da:c5:c1:ef:50:8e:d9:ef:03:91:22:62:17:
         ea:a5:9d:74:79:16:01:c1:9d:38:55:a8:d1:94:09:1b:8a:4b:
         8b:f8:44:fc:9f:66:65:19:01:bd:8b:f1:8e:21:b8:97:0d:51:
         c0:d4:87:c5:cf:67:20:69:6d:68:6c:fc:25:9b:5e:40:26:9a:
         04:5f:12:a4:c1:1c:1d:c2:0e:c4:67:ce:d3:66:0e:a9:3f:f7:
         73:64:18:ca:e0:89:92:b9:6d:96:09:e2:1e:ef:ba:8e:51:c0:
         46:e4:c1:65:1a:87:5d:2e:50:b6:ef:6d:39:5d:b7:7e:7d:55:
         ca:b2:30:8e:cd:a5:53:1d:fe:35:b8:f7:8b:17:4a:6a:9a:c9:
         f0:15:ed:65:80:fb:91:c9:e8:2d:c3:98:c9:b6:64:2f:b3:58:
         e7:c4:df:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:56 2025 by rpki-client