Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File:                     EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier:          wAXyFdPiUhLyOsi55kABhAn/KOYM31RGVa35MMU4iVo=
Subject key identifier:   A4:5A:2D:15:8B:ED:06:D1:FE:E2:78:69:05:97:86:0E:00:C4:3B:84
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer:       /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial:       0198D850DEAA04D848B20F4E7D2A0F9C7681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number:          0D29
Signing time:             Sat 23 Aug 2025 19:03:55 +0000
Manifest this update:     Sat 23 Aug 2025 19:03:55 +0000
Manifest next update:     Sun 24 Aug 2025 19:03:55 +0000
Files and hashes:         1: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: qmsRSEnpuLFH/O7zYwAlZGWRkffR0KNDmaG5hOmHiG0=)
                          2: sr7Y9_0vrufLFByKjpTwDpWOODI.roa (hash: p+V05XFve48eyskXSquTUKbCo+1z52AfwaKROL12RpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:50:de:aa:04:d8:48:b2:0f:4e:7d:2a:0f:9c:76:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
        Validity
            Not Before: Aug 23 19:03:55 2025 GMT
            Not After : Aug 24 19:03:55 2025 GMT
        Subject: CN=a45a2d158bed06d1fee278690597860e00c43b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:10:df:d1:f7:4c:a6:f9:9d:d7:80:fd:2f:ac:
                    5e:a7:76:ac:06:36:b7:60:37:5d:4d:28:8e:20:48:
                    d6:b9:66:fc:45:d6:ad:37:f4:3f:03:01:89:ce:c9:
                    56:36:6a:2a:6a:55:8a:51:6c:e1:1c:f6:8b:01:f8:
                    26:36:c9:d2:fa:73:f6:2a:00:94:fc:f1:22:54:d9:
                    a8:8d:a4:59:50:f0:e3:05:22:d2:72:e8:b3:4c:40:
                    6f:9e:3e:d9:23:46:c0:6e:33:6b:23:f1:38:98:e7:
                    b1:29:74:b6:0d:29:e8:f0:d2:12:aa:50:e2:82:35:
                    70:6c:e5:e4:d7:dc:96:d6:e0:df:ff:aa:54:e8:8f:
                    95:a9:0e:02:36:a3:5a:cc:70:d2:1f:77:ab:5c:5a:
                    52:a8:5b:86:4d:bc:2f:06:80:77:9c:0f:88:cc:27:
                    5a:80:76:ae:f8:81:8c:61:45:5b:d3:63:29:fe:8d:
                    5e:41:fb:6b:36:ee:d6:d9:d0:8b:f3:b0:a1:49:ca:
                    91:10:00:59:1c:e5:d0:8c:71:9b:86:ee:44:f4:71:
                    3d:a8:9d:e1:61:ff:f4:0f:d3:47:12:d6:9c:ee:9c:
                    75:4f:ce:65:47:5e:d5:f3:87:8d:cb:90:d9:de:d1:
                    a4:27:01:5f:63:c6:7e:29:8d:26:6e:aa:c9:23:7e:
                    55:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5A:2D:15:8B:ED:06:D1:FE:E2:78:69:05:97:86:0E:00:C4:3B:84
            X509v3 Authority Key Identifier:
                keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c2:af:87:43:52:35:5f:85:c1:28:e7:b6:3b:09:c9:77:98:
         db:a7:86:9f:9a:82:c7:77:e3:65:56:f2:58:bf:1f:70:95:1e:
         fc:83:70:51:0b:5c:80:c8:6c:5a:f3:49:c8:50:fb:f2:5a:8b:
         c2:9b:0f:51:e2:6d:d0:02:3f:72:5f:0e:98:9f:55:e3:26:5c:
         b6:f8:11:9f:c7:17:5d:10:07:56:14:17:19:a4:30:ba:42:f9:
         10:5a:41:e1:9e:54:5f:ce:3b:a5:a9:a5:bf:51:6e:72:73:27:
         1e:23:05:85:c7:da:d4:20:09:68:46:f3:00:7c:38:c5:4b:7e:
         d5:6e:0b:67:3b:b0:bc:c5:91:5e:3b:10:35:5b:2c:72:cf:7b:
         b5:28:dd:1c:4d:fc:da:bd:a0:9e:69:52:56:3d:2f:d5:58:72:
         5e:97:0a:eb:bb:14:fc:0f:b9:ac:bd:39:e4:66:1f:65:81:9c:
         dc:6a:42:1f:25:62:66:46:6a:53:54:01:00:b8:ac:c8:5c:9d:
         bb:e4:71:d4:a2:15:34:e8:c6:f8:7f:8a:e9:38:c9:65:43:85:
         de:2d:51:d4:05:c5:16:8b:ed:59:33:22:c3:98:e4:67:19:60:
         ca:8e:c6:e1:05:90:7e:b8:49:d4:fe:9b:50:5a:d6:98:c0:c1:
         41:98:22:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:47:18 2025 by rpki-client