Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
File:                     EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft (raw, json)
Hash identifier:          UxOGZwVxKCy1Fw8NTmpj45PGfs2p8o9zP0ZljkgrA/U=
Subject key identifier:   CD:5D:97:E2:D1:A4:2A:0F:78:1E:64:4E:BE:52:F9:C1:26:CE:CF:68
Authority key identifier: 11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA
Certificate issuer:       /CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
Certificate serial:       01976D06D288B33FB57A7C85726035A194CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
Manifest number:          09F2
Signing time:             Sat 14 Jun 2025 06:00:53 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:53 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:53 +0000
Files and hashes:         1: EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl (hash: 4+f0293u+pQGnw8tN/JWwg3Z/DWdcauKnpbQoheZjig=)
                          2: zKEsruxE4cDY7eG8e5BdPLgZZLk.roa (hash: Nz28QZnXJ3PO2kQqaWAGQuglhdiOX9sRFv6wk4pN+lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:d2:88:b3:3f:b5:7a:7c:85:72:60:35:a1:94:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
        Validity
            Not Before: Jun 14 06:00:53 2025 GMT
            Not After : Jun 15 06:00:53 2025 GMT
        Subject: CN=cd5d97e2d1a42a0f781e644ebe52f9c126cecf68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8e:fc:cb:ff:52:21:33:ad:d9:0a:64:c4:aa:
                    26:07:9c:39:df:81:b0:98:ee:03:b5:2c:ca:5b:22:
                    68:16:19:7c:c3:1f:37:69:7e:c8:ee:c3:4a:b7:89:
                    cb:31:51:e9:69:d5:c9:aa:ed:dc:71:c9:7a:e3:74:
                    2a:72:dc:41:00:eb:53:99:f3:cd:5d:c4:92:81:25:
                    1d:b5:6c:00:cc:a9:3c:cb:23:4f:f5:4b:df:68:7f:
                    1f:48:37:13:52:d8:ad:51:18:e7:24:05:ae:3c:fe:
                    4e:86:ce:9b:a0:2a:3b:52:a8:88:ec:54:35:36:37:
                    93:99:42:86:48:a4:8f:cf:7c:f7:43:9b:4c:0c:77:
                    94:c1:6f:67:45:ad:a5:55:a7:e1:e1:07:ca:42:a7:
                    a0:ce:ac:4a:7d:47:c4:44:33:67:c8:20:be:d8:66:
                    5c:f5:93:84:e3:4d:c6:f6:f8:85:3c:c5:46:37:65:
                    0d:a7:2a:84:ea:d1:ab:eb:28:47:d2:17:72:03:c8:
                    48:69:ba:6c:7a:5b:d5:42:25:42:ca:ed:21:f3:40:
                    e7:3c:b5:f2:6b:98:f6:1d:9b:6c:e4:05:3c:3a:c6:
                    98:c9:47:b6:60:ad:f0:a2:c1:35:1b:3b:84:d8:3f:
                    0a:a2:5f:2b:0d:cf:20:e6:89:0e:66:da:d8:66:85:
                    96:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5D:97:E2:D1:A4:2A:0F:78:1E:64:4E:BE:52:F9:C1:26:CE:CF:68
            X509v3 Authority Key Identifier:
                keyid:11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a5:96:3e:72:81:fa:5b:ad:2b:b7:0e:e4:fd:5f:27:c6:16:
         f3:f6:6f:20:9f:0a:47:26:74:37:86:31:34:42:b3:c0:fb:55:
         65:23:72:cc:86:12:72:15:37:a7:ec:79:3b:ca:d3:d7:5b:09:
         76:b8:40:4f:5c:c7:72:a2:63:4e:e2:91:d8:77:16:76:79:a5:
         a9:58:18:cc:7f:79:d6:ad:8e:fd:71:59:8f:6b:e3:34:c9:c7:
         cb:f0:8c:ee:22:2c:7b:01:8f:0a:de:02:c4:57:5d:1b:5d:4d:
         6d:2e:c0:7a:d1:f5:24:ea:4b:53:6a:fa:ae:55:7c:1e:d5:94:
         66:39:49:70:d4:b6:0f:60:10:60:45:ae:84:14:d3:ae:f0:a3:
         e5:84:dc:f6:db:d1:3c:f4:e5:61:59:37:59:6f:25:21:11:85:
         7b:0f:e5:fc:85:17:9b:c0:1a:5a:e5:c1:9d:8d:6e:11:3e:5a:
         27:02:13:dd:59:5c:7c:86:5c:dc:04:22:91:02:24:bb:99:31:
         52:3b:08:b4:6d:18:be:5c:a8:15:dd:38:c4:2a:6c:39:23:20:
         a1:d9:cd:86:3c:f1:ef:25:0a:8b:0c:b2:8a:0d:0e:1b:f0:e5:
         83:f1:6f:1e:8d:34:0f:96:b5:6f:0f:92:12:d2:92:cb:3a:68:
         bc:9d:64:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:36:55 2025 by rpki-client