Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File:                     EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier:          2tcTCfR9GMoMhx1y9J7coYd2ubaKQxzwLXANhppY/pg=
Subject key identifier:   08:54:15:3F:31:0D:58:A0:C2:2B:ED:A9:3B:42:EC:A2:0C:59:81:BB
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer:       /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial:       0197B6A0A0CBDF89333A4C8DDD07992AD873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number:          0C93
Signing time:             Sat 28 Jun 2025 13:01:09 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:09 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:09 +0000
Files and hashes:         1: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: oOi7xr8PhAi/zNBYcCSEU7u/PFk//9DdOrT4qyJq/+0=)
                          2: sr7Y9_0vrufLFByKjpTwDpWOODI.roa (hash: p+V05XFve48eyskXSquTUKbCo+1z52AfwaKROL12RpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:a0:cb:df:89:33:3a:4c:8d:dd:07:99:2a:d8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
        Validity
            Not Before: Jun 28 13:01:09 2025 GMT
            Not After : Jun 29 13:01:09 2025 GMT
        Subject: CN=0854153f310d58a0c22beda93b42eca20c5981bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:df:ba:f9:54:71:29:43:a9:96:d1:c0:55:b5:
                    b5:8b:86:d7:47:21:7b:39:06:aa:99:5e:0d:bc:04:
                    1d:fa:8d:bb:6b:a8:f7:f9:cf:83:24:39:ca:ce:de:
                    b3:5a:e2:89:1a:76:60:97:24:dd:17:6e:e8:75:5a:
                    ea:fc:e8:b4:18:be:b6:35:27:e0:a1:0c:e3:43:68:
                    29:b1:bd:9e:d8:bb:32:ae:16:0f:9e:20:56:50:21:
                    49:3a:5d:ff:63:29:7b:98:7b:1e:d8:47:f3:4a:2f:
                    1e:69:e6:21:83:ef:72:65:7b:d6:cc:d7:b6:64:98:
                    5a:c3:a8:0c:cd:c8:32:17:1e:e1:47:5b:15:65:2d:
                    d7:89:05:7b:d7:e5:89:e3:c5:64:eb:70:9b:a9:36:
                    0c:f0:9f:40:33:8a:03:00:87:f1:55:b6:4a:16:94:
                    49:98:61:33:84:82:ab:f6:80:03:81:ce:ca:dc:3d:
                    7d:cd:29:a9:a2:7d:6e:af:db:16:88:e7:ec:69:1b:
                    f8:84:e7:80:1f:0e:2c:ae:e3:9f:f4:57:67:b9:53:
                    e0:c4:5d:9d:c7:2d:80:d2:f5:cd:cd:03:b6:1a:b0:
                    a6:59:bb:fe:56:3f:2b:40:07:fc:71:0d:fb:5f:e9:
                    0e:5d:22:92:0b:fd:ec:48:7e:b4:ab:aa:0f:e7:b1:
                    be:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:54:15:3F:31:0D:58:A0:C2:2B:ED:A9:3B:42:EC:A2:0C:59:81:BB
            X509v3 Authority Key Identifier:
                keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:5b:d5:c0:6d:bb:15:c0:1a:b8:9f:ca:4e:38:da:be:5d:fa:
         18:7b:19:9e:b5:32:0a:20:1e:38:69:09:10:1f:87:0c:ba:52:
         79:a4:e4:ef:4f:f6:57:b3:e1:0e:5b:b2:1d:92:67:a6:b0:ba:
         4b:9a:ba:59:fb:b9:de:a8:6d:77:5e:09:cd:ef:f1:c8:ed:79:
         50:c9:2b:10:56:0c:47:19:dc:59:75:c7:8b:85:5f:72:69:e8:
         57:b7:0a:d7:8a:4e:f4:5d:c2:38:66:b1:cc:84:08:4c:70:d8:
         67:22:59:36:38:13:a7:12:53:75:1c:c2:0e:83:aa:36:4a:2d:
         a2:09:6d:25:9f:da:2e:82:44:70:9e:b3:b9:81:d6:0b:ec:e5:
         40:d7:0c:0a:b7:cf:83:23:4d:b8:a2:90:e2:78:e4:17:69:e2:
         86:8c:e0:23:ae:12:f7:7f:0e:c3:6d:88:35:7f:6a:5c:ea:20:
         78:0f:ae:e0:87:a8:61:27:35:19:d0:82:3c:3c:64:82:3d:fb:
         41:4b:6d:7b:94:10:5b:64:d8:4a:ae:ec:94:7c:72:e8:a3:e4:
         8d:b2:d8:e1:c0:c9:1a:f3:d2:c3:9f:4c:38:74:e8:9e:f3:47:
         a4:18:e6:fd:1c:50:76:0e:2b:b4:47:87:a2:5c:77:2f:a8:03:
         eb:51:72:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oKDL34kzOkyN3QeZKthzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMDg0YjdkMzc4Yjk5M2M1ZjVlNzQ5ZjZhMzQ0ZGUyM2U0
NWFkMDAwHhcNMjUwNjI4MTMwMTA5WhcNMjUwNjI5MTMwMTA5WjAzMTEwLwYDVQQD
EygwODU0MTUzZjMxMGQ1OGEwYzIyYmVkYTkzYjQyZWNhMjBjNTk4MWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d+6+VRxKUOpltHAVbW1i4bXRyF7
OQaqmV4NvAQd+o27a6j3+c+DJDnKzt6zWuKJGnZglyTdF27odVrq/Oi0GL62NSfg
oQzjQ2gpsb2e2LsyrhYPniBWUCFJOl3/Yyl7mHse2EfzSi8eaeYhg+9yZXvWzNe2
ZJhaw6gMzcgyFx7hR1sVZS3XiQV71+WJ48Vk63CbqTYM8J9AM4oDAIfxVbZKFpRJ
mGEzhIKr9oADgc7K3D19zSmpon1ur9sWiOfsaRv4hOeAHw4sruOf9FdnuVPgxF2d
xy2A0vXNzQO2GrCmWbv+Vj8rQAf8cQ37X+kOXSKSC/3sSH60q6oP57G+lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhUFT8xDVigwivtqTtC7KIMWYG7MB8GA1UdIwQY
MBaAFBEIS303i5k8X150n2o0TeI+Ra0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iYmZjYzQtYTI3Ny00YjQzLWIyNWMt
YTI0ZDY4ZTM2NzA1LzEvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9iYmZjYzQtYTI3Ny00YjQzLWIyNWMtYTI0ZDY4ZTM2NzA1
LzEvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFvVwG27
FcAauJ/KTjjavl36GHsZnrUyCiAeOGkJEB+HDLpSeaTk70/2V7PhDluyHZJnprC6
S5q6Wfu53qhtd14Jze/xyO15UMkrEFYMRxncWXXHi4VfcmnoV7cK14pO9F3COGax
zIQITHDYZyJZNjgTpxJTdRzCDoOqNkotogltJZ/aLoJEcJ6zuYHWC+zlQNcMCrfP
gyNNuKKQ4njkF2nihozgI64S938Ow22INX9qXOogeA+u4IeoYSc1GdCCPDxkgj37
QUtte5QQW2TYSq7slHxy6KPkjbLY4cDJGvPSw59MOHTonvNHpBjm/RxQdg4rtEeH
olx3L6gD61Fymw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:55:59 2025 by rpki-client