Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
File:                     EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft (raw, json)
Hash identifier:          scrCo5xPdyU5uy94XYrTGC1aIr1efCiJxjOZR/cxOpA=
Subject key identifier:   A3:6B:33:F7:F3:96:84:00:2B:53:27:D3:80:D3:AB:76:FA:46:72:14
Authority key identifier: 11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA
Certificate issuer:       /CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
Certificate serial:       0198D661260DE9DC8EECB2A6C75433A3D3ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
Manifest number:          0AAD
Signing time:             Sat 23 Aug 2025 10:02:27 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:27 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:27 +0000
Files and hashes:         1: EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl (hash: aW1XOlW5TeXZSoZAAL2H8HY0IAbu822bNP+EC7khIkM=)
                          2: zKEsruxE4cDY7eG8e5BdPLgZZLk.roa (hash: Nz28QZnXJ3PO2kQqaWAGQuglhdiOX9sRFv6wk4pN+lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:26:0d:e9:dc:8e:ec:b2:a6:c7:54:33:a3:d3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
        Validity
            Not Before: Aug 23 10:02:27 2025 GMT
            Not After : Aug 24 10:02:27 2025 GMT
        Subject: CN=a36b33f7f39684002b5327d380d3ab76fa467214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:70:33:0a:81:2c:00:d4:63:34:1b:80:9a:2e:
                    b8:c2:24:0b:13:b8:03:ff:a1:06:63:a5:a5:be:b8:
                    08:63:a9:6b:3b:23:a6:d3:21:e2:0e:53:5c:ef:9a:
                    30:0f:c9:68:1b:c4:40:01:b5:7c:31:3c:6d:08:c2:
                    21:b2:ad:3a:a6:b9:ff:bc:93:83:a0:c0:e7:28:ae:
                    a8:df:94:85:27:92:e7:39:76:64:f2:d6:7f:33:e5:
                    4b:9b:aa:12:56:10:a8:67:4f:2d:57:21:86:7b:91:
                    89:d4:d0:77:b5:69:1e:52:e6:25:a8:40:38:64:e4:
                    8e:d8:c1:f3:91:7b:bd:7a:28:37:1d:3e:af:f4:ab:
                    c3:0e:d1:8d:92:2e:fe:4b:16:34:82:02:54:d3:8e:
                    62:c9:bc:1f:08:3f:27:c4:9a:e0:75:a6:2a:93:cd:
                    a6:f3:0c:32:04:cd:47:59:00:02:b2:3e:71:58:26:
                    4a:f3:9f:0c:c3:4f:ea:ae:ef:79:77:42:e9:b1:89:
                    f4:14:5d:73:8a:32:e6:56:a7:10:e5:84:c4:26:c6:
                    eb:d5:90:39:d7:a7:03:6a:dc:d1:49:b7:cf:47:4a:
                    18:72:04:37:3a:05:36:33:75:60:ef:65:f8:c0:de:
                    f1:e2:80:3e:ff:40:47:34:47:bc:9d:63:ae:6b:a1:
                    7f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6B:33:F7:F3:96:84:00:2B:53:27:D3:80:D3:AB:76:FA:46:72:14
            X509v3 Authority Key Identifier:
                keyid:11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:72:4d:9d:cb:bf:a2:55:b8:00:08:bf:d0:08:c1:52:a3:de:
         84:61:ad:10:15:73:bb:eb:0b:da:26:32:63:a3:f4:05:00:de:
         69:15:26:dc:a0:34:6d:cc:7c:b9:f5:40:ce:e5:87:5c:9f:4f:
         d0:8f:57:03:5e:c2:58:c4:ba:91:f8:76:a7:6b:15:30:ea:9c:
         db:a7:4b:07:a3:4a:94:6a:ec:0c:9c:f0:04:06:2c:39:4b:bf:
         77:7f:9d:19:3b:50:d8:c3:13:31:84:13:22:c7:7f:b3:a2:6a:
         a5:5a:8c:c9:96:0c:42:f6:40:84:64:9b:a8:df:df:5a:a9:00:
         30:f7:b9:00:3e:08:ab:05:45:4d:7e:f9:99:67:cb:c9:c7:9f:
         5d:ea:d7:44:5e:e1:1a:6a:57:cb:be:43:8f:7d:b1:87:04:cb:
         eb:07:80:24:a2:40:04:9d:19:37:af:2e:fd:d9:f6:a5:e3:aa:
         ae:45:c1:d9:9a:f4:2b:68:34:91:1c:79:02:ba:d7:95:3e:7c:
         b4:25:b7:f2:f8:5a:a5:9f:9b:90:b3:0f:4c:82:06:51:83:c8:
         d3:54:4e:c0:0b:0f:87:20:2c:26:23:6c:e3:f6:86:e7:77:bd:
         b2:78:be:49:70:ce:d7:85:d3:07:6b:69:77:b9:dc:dc:82:05:
         82:96:38:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:38:31 2025 by rpki-client