Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File:                     EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier:          Mj98J+3VsGzXVISn2lBvWwtyBH+pOBGIbg/JrsdPPVk=
Subject key identifier:   1C:A4:11:E8:5F:0A:68:38:A7:A7:12:76:31:E2:42:C0:F7:26:CB:FC
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer:       /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial:       0199FBEB2B73028265554E35ADBF43CA5063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number:          0DC0
Signing time:             Sun 19 Oct 2025 10:01:57 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:57 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:57 +0000
Files and hashes:         1: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: amWmMYuX4B/l3lJtu8TwG3ili11xxW7aXnS5Qg/tHQs=)
                          2: sr7Y9_0vrufLFByKjpTwDpWOODI.roa (hash: p+V05XFve48eyskXSquTUKbCo+1z52AfwaKROL12RpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:2b:73:02:82:65:55:4e:35:ad:bf:43:ca:50:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
        Validity
            Not Before: Oct 19 10:01:57 2025 GMT
            Not After : Oct 20 10:01:57 2025 GMT
        Subject: CN=1ca411e85f0a6838a7a7127631e242c0f726cbfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4b:97:cc:8e:67:6d:41:c1:1a:c1:66:36:09:
                    ce:72:44:c7:be:3a:d5:26:71:61:89:f6:bb:1a:7f:
                    10:c2:f6:fd:4c:0f:c4:7a:92:62:01:ca:0b:9a:2f:
                    08:fe:8f:e1:70:89:58:e3:23:8a:54:e0:6c:db:ad:
                    56:1d:22:40:f1:96:93:fc:16:a5:1f:13:bf:15:00:
                    7b:ba:e5:71:cf:55:86:33:9c:87:41:98:86:19:af:
                    6c:93:5c:cf:bb:02:69:65:12:af:e5:9b:32:6a:1b:
                    5d:a6:6a:30:89:44:5a:a2:23:5e:56:72:1e:d2:e6:
                    b2:50:03:f6:e1:62:7b:c2:71:1f:62:a6:bd:e0:0f:
                    fe:1a:a5:50:18:5e:9f:a6:af:a9:84:fe:e6:5f:08:
                    09:7e:3f:5e:bf:0f:61:15:3d:45:d3:6c:1e:37:1a:
                    4e:96:f7:30:fd:8e:df:59:98:4a:91:06:92:cc:c0:
                    a2:ef:a8:e4:5e:44:7d:c9:38:ec:dc:24:6a:b1:00:
                    2f:dd:b6:05:d9:58:8c:cc:24:58:2a:22:4c:62:c4:
                    71:a5:0d:c9:45:6c:e2:02:fb:a3:8c:55:cb:a3:af:
                    42:02:cf:6a:37:97:9d:fe:ae:dd:35:d2:e3:c7:ef:
                    d0:ed:a3:0e:4d:1f:b2:cc:e2:ca:3f:63:dc:82:3e:
                    2f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A4:11:E8:5F:0A:68:38:A7:A7:12:76:31:E2:42:C0:F7:26:CB:FC
            X509v3 Authority Key Identifier:
                keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ea:2a:e7:94:54:c8:75:ea:e4:36:3d:a3:5a:1d:48:00:8f:
         29:34:ea:dd:57:ad:82:4b:0d:c5:08:12:1a:8c:b9:c7:35:ef:
         e7:86:9e:39:6a:82:bd:ec:c4:8d:9b:23:41:9e:d3:24:c6:8b:
         ce:99:e7:e4:69:33:d8:cf:55:f3:e9:42:0d:a7:2c:a9:e7:b4:
         34:05:88:fb:73:59:1b:ff:7d:ad:21:d8:bb:d1:ee:f9:86:24:
         af:b4:2b:3b:80:48:7b:2e:44:e6:bf:01:2b:d1:07:a6:8d:c9:
         66:f0:67:b2:c5:ed:8d:00:17:ae:68:24:ff:f0:47:93:3e:f2:
         f7:55:70:19:1f:2a:d4:04:aa:ac:d5:32:0a:43:43:ea:2f:e3:
         d1:2c:3c:0b:15:71:7c:41:bd:27:0a:5a:69:32:56:46:6d:13:
         6f:1d:97:39:e6:1c:c6:40:fb:6d:6a:18:26:5c:04:99:b4:96:
         4d:59:44:94:26:d7:12:e6:32:fa:05:b3:77:69:ba:b7:40:01:
         75:a9:88:8f:4a:b1:ed:e8:94:61:fe:db:e4:ff:56:d3:61:d5:
         e1:d6:53:f9:b9:e5:ee:83:f5:0b:33:b7:10:45:0a:78:ad:16:
         c4:09:00:f8:1d:51:a4:7b:56:c2:f1:b0:9f:a3:c7:32:ec:23:
         32:d4:70:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:12 2025 by rpki-client