Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
File:                     EqZX80JMjdVSFa-FO5MwfDZsU4o.mft (raw, json)
Hash identifier:          UrNE4K3XPxQouMCuApQGdnw+n0I/s59NWf9E3/s8vsU=
Subject key identifier:   43:5F:CF:2B:B5:C0:0E:18:6F:FD:0E:D9:3D:E7:0F:81:42:7D:7F:82
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Certificate issuer:       /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial:       0199FC2186EF029FF8C171B02B42C6A991D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
Manifest number:          09E7
Signing time:             Sun 19 Oct 2025 11:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:19 +0000
Files and hashes:         1: EqZX80JMjdVSFa-FO5MwfDZsU4o.crl (hash: 86Q8hBFoYlvj15hhKA6tGx2WT8f/dIaaCF7jJF/nafQ=)
                          2: oswo9YKLg0u3JC1IbA7Gj8m0msI.roa (hash: iMLKS98/HXnStabev/m1xnD9F47lNw2WEBo8S/dBQpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:86:ef:02:9f:f8:c1:71:b0:2b:42:c6:a9:91:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
        Validity
            Not Before: Oct 19 11:01:19 2025 GMT
            Not After : Oct 20 11:01:19 2025 GMT
        Subject: CN=435fcf2bb5c00e186ffd0ed93de70f81427d7f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:98:2b:c0:14:96:70:3f:67:71:72:f7:c8:26:
                    0b:df:5b:12:ae:d4:24:d7:bc:28:7c:9a:3d:0a:71:
                    7e:4c:86:20:a6:9f:54:84:cc:b5:cc:e2:2b:02:1b:
                    fc:d9:d8:a0:42:bf:43:d5:7a:88:61:84:42:5c:a3:
                    1d:f5:da:23:cf:86:6f:35:5c:fc:d5:87:e0:80:c7:
                    91:6e:42:c7:39:a5:f4:7d:07:72:e6:ca:48:58:15:
                    f0:c2:39:30:0d:c6:c5:f8:b8:80:8a:8d:c4:83:8a:
                    15:cc:37:c6:ea:97:a8:e9:a3:a9:86:ff:94:de:2f:
                    80:3c:7b:42:15:b6:c3:a0:2c:8a:6f:4d:c6:4e:d2:
                    05:db:48:f5:07:bc:36:25:3f:7d:4b:74:4c:f7:95:
                    43:e7:ff:54:0b:e2:7f:bd:19:b7:8b:75:82:f4:86:
                    6f:a7:12:bb:55:b3:94:0d:bd:3e:82:da:00:39:14:
                    32:ea:84:fe:30:2d:b9:b6:fd:ff:a1:b7:9c:c3:b1:
                    71:e2:69:9e:c2:2b:e5:a6:6c:cf:d8:ca:d0:85:a0:
                    fd:d9:43:29:60:6b:a2:ea:1b:6a:93:02:6c:0b:33:
                    0f:1a:28:ab:54:2a:c1:07:04:fc:58:ca:a8:3f:85:
                    4a:47:58:81:42:a8:57:0e:3f:c3:4e:be:1c:2b:d1:
                    4f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:5F:CF:2B:B5:C0:0E:18:6F:FD:0E:D9:3D:E7:0F:81:42:7D:7F:82
            X509v3 Authority Key Identifier:
                keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:59:9e:a1:fa:b5:4a:1b:d9:3f:73:ac:58:b9:ea:1d:17:14:
         01:00:e6:94:66:f1:66:47:89:b7:de:ad:01:88:b1:eb:6c:b3:
         e1:74:c8:d4:91:47:02:96:b1:f0:52:7f:ca:a1:f1:8b:15:ef:
         89:ef:fa:4e:8f:09:24:5a:70:27:52:a3:85:aa:1f:09:be:01:
         53:a9:dc:84:31:c1:bc:e3:f8:f7:6f:0b:dc:95:f4:69:13:8d:
         28:40:cb:25:b9:eb:7a:d9:69:10:4d:91:66:e7:46:e0:c4:4e:
         a2:31:6a:48:bb:ea:ec:7c:59:6f:f7:6d:62:4b:fb:dd:f6:2a:
         7c:9a:16:b4:29:f4:7c:7d:b1:b7:d8:d2:10:f1:af:9b:df:c4:
         26:6e:ec:4d:63:c3:2f:10:5c:11:85:41:31:84:22:cc:5e:b3:
         a6:7a:58:76:4b:0e:55:df:69:ff:2c:e9:e3:6b:da:d0:8a:7d:
         04:15:f0:37:cb:da:33:73:1f:b1:61:7e:3c:3d:79:52:19:61:
         3d:84:f8:56:d6:55:f8:fd:dd:cc:7d:8b:9c:46:db:1a:cc:6e:
         e1:93:f3:f6:9d:26:5b:55:05:e8:49:d9:b5:66:3d:0d:73:63:
         b4:22:cd:b9:a4:30:91:bd:f5:dc:41:9f:61:1a:c1:95:9e:dc:
         fa:bd:35:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:03 2025 by rpki-client