Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
File:                     EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft (raw, json)
Hash identifier:          3oAkOnSF5f7liUKuxno9URJAtG8F+3Qd8n5mrQI/Z30=
Subject key identifier:   AE:FB:53:D3:37:13:AC:29:D0:48:C0:D0:0B:DC:05:A7:0E:A7:F5:E1
Authority key identifier: 11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA
Certificate issuer:       /CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
Certificate serial:       019D98F53A6BDF529FCAF8E1E528BF2EA090
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
Manifest number:          0D25
Signing time:             Fri 17 Apr 2026 01:01:41 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:41 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:41 +0000
Files and hashes:         1: EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl (hash: hb1H9El09J8YJuvDPDYxD9V66tBNmL/1pPcq+29yrDk=)
                          2: H8jNWlhdfl7nRCwiQ_yYCw9IePk.roa (hash: QUSltaSgdTXR2x5Kqx3Kj2QU9KF/OL830wGX48az1XI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:3a:6b:df:52:9f:ca:f8:e1:e5:28:bf:2e:a0:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
        Validity
            Not Before: Apr 17 01:01:41 2026 GMT
            Not After : Apr 18 01:01:41 2026 GMT
        Subject: CN=aefb53d33713ac29d048c0d00bdc05a70ea7f5e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e6:22:49:bb:56:70:a8:e5:1d:12:c8:93:8c:
                    5c:bc:e7:ab:47:72:98:ae:0a:22:37:de:50:bf:14:
                    d6:2e:e6:32:a7:e9:30:ce:bf:0d:32:b1:1b:69:48:
                    e4:ab:c7:b7:ea:b6:23:64:66:5d:33:13:74:55:56:
                    0d:97:aa:d4:e3:a2:50:4a:f3:37:f7:08:e1:7a:79:
                    79:36:4d:2c:71:f9:37:04:39:4a:05:c9:eb:74:18:
                    47:93:13:57:d9:ae:ea:88:0d:8d:57:ee:62:f8:93:
                    a8:00:7d:86:87:35:c1:82:d2:45:68:f2:b3:9a:53:
                    f9:e7:53:5d:91:7d:91:0c:f5:94:85:91:ab:26:87:
                    ce:85:c3:d2:ae:4b:51:79:8b:6d:b3:bb:2d:17:43:
                    d4:07:45:85:65:5d:aa:ab:e1:6c:14:23:5b:f2:53:
                    34:63:48:d5:06:b4:d3:38:f9:0c:55:09:2d:23:b2:
                    a9:90:2f:ac:bf:a4:d7:60:a7:da:ea:79:6b:b3:d9:
                    62:97:ae:b7:a2:a5:48:8c:35:4f:b9:26:0e:3c:2c:
                    a3:ba:a0:0a:c3:e5:2f:88:c1:e8:9c:79:e4:00:d7:
                    79:43:de:0f:6f:e4:ed:62:ec:28:58:ce:bd:57:b7:
                    64:33:8f:18:5a:ad:a8:ce:a7:26:b8:2d:ac:7e:46:
                    73:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:FB:53:D3:37:13:AC:29:D0:48:C0:D0:0B:DC:05:A7:0E:A7:F5:E1
            X509v3 Authority Key Identifier:
                keyid:11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ee:19:3f:84:09:e2:cf:cb:18:78:10:c9:fa:52:80:df:fb:
         c3:1b:ea:c5:d9:ce:b0:2e:b3:10:04:38:b4:2b:79:f5:b7:ca:
         6b:81:c9:81:2a:ec:ef:a8:80:75:d0:9c:7d:58:7a:0d:e6:ac:
         e9:81:4e:46:85:e9:b9:a2:cc:1c:60:c7:71:e2:7f:18:5c:19:
         1b:0e:94:2a:74:a1:bf:be:7d:3f:f3:d5:ff:0c:f5:d0:ba:52:
         5c:ff:e7:47:65:88:8b:50:15:68:a5:00:d1:c8:83:2d:ac:f2:
         4c:2b:30:61:44:6d:af:c5:81:f9:b5:40:97:ae:5f:6b:4b:4e:
         65:ce:c8:ba:d3:b6:31:85:dc:1e:d6:d0:17:36:cb:7f:5c:63:
         99:56:f4:d9:52:51:47:a3:04:35:e3:c2:db:cf:4e:29:59:7f:
         5f:8b:ed:4a:96:00:85:b7:4c:30:e1:54:77:62:db:70:a2:74:
         0a:b1:75:6d:b8:17:c5:c6:21:e4:15:bc:22:97:b0:0c:66:e6:
         38:51:ac:eb:c0:f7:b6:e2:71:7f:62:76:5e:2d:ff:7e:e4:60:
         3e:29:b0:29:d2:c6:fb:d3:3b:ff:00:45:68:94:3f:25:96:32:
         80:c7:bb:fa:7a:ce:d1:38:ab:e0:a9:91:a4:11:e7:97:0d:ed:
         cb:9c:93:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:23:11 2026 by rpki-client