Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
File:                     EqZX80JMjdVSFa-FO5MwfDZsU4o.mft (raw, json)
Hash identifier:          AV8ChkPzogOmQe1ojyt7AOchDEO3lCy08v4lPMhCru4=
Subject key identifier:   E3:C5:32:8E:95:C8:8A:F1:D9:6C:5C:78:34:D5:F3:F7:1D:71:57:E9
Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A
Certificate issuer:       /CN=12a657f3424c8dd55215af853b93307c366c538a
Certificate serial:       01974C3237B374F94210C0D1253DBA164663
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
Manifest number:          0882
Signing time:             Sat 07 Jun 2025 21:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:48 +0000
Files and hashes:         1: 6_cwB_aNOhlx5E_GvZkyarRW0Z4.roa (hash: 7y4sh5xw48OqUBIdhgjLdNsXxahA8MbbBMgBPYk65Lk=)
                          2: EqZX80JMjdVSFa-FO5MwfDZsU4o.crl (hash: hEm839WIb98YWfX1JW1VWUvCGoYrNdetnOrY29HmpB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:32:37:b3:74:f9:42:10:c0:d1:25:3d:ba:16:46:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a
        Validity
            Not Before: Jun  7 21:00:48 2025 GMT
            Not After : Jun  8 21:00:48 2025 GMT
        Subject: CN=e3c5328e95c88af1d96c5c7834d5f3f71d7157e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:f3:38:ca:8d:9d:8a:ee:43:5a:13:ce:51:
                    69:8e:6a:ad:9b:66:88:ba:b0:8e:12:9e:d5:01:7d:
                    60:8d:c8:e1:ce:f8:cc:ad:eb:11:27:67:a4:75:7a:
                    d6:e0:89:84:83:3e:99:7d:05:48:9f:15:1b:0c:b5:
                    34:e1:f0:8b:48:83:54:10:f2:7a:dc:49:40:5f:43:
                    b9:9a:37:55:b9:b0:68:fc:e9:90:74:ff:00:39:72:
                    4e:e7:f9:19:40:f3:af:e8:16:b6:58:cf:90:d7:69:
                    dc:6f:95:69:bc:54:51:db:71:05:32:c3:78:73:3a:
                    b7:ac:05:71:e7:03:65:25:36:84:11:2a:65:ee:fc:
                    3e:97:6d:29:cd:21:a8:f6:57:c3:c6:41:a7:3e:4f:
                    8d:1b:6b:6d:d6:6e:09:af:cc:71:d1:8c:3c:5a:39:
                    28:1d:8e:9b:31:31:0d:5f:ac:58:2a:66:06:8c:9d:
                    6f:44:c8:14:83:7d:2c:36:c3:a0:a5:77:0f:02:3e:
                    55:0b:0b:b9:a8:b0:a2:21:6b:bf:24:2d:38:fb:dc:
                    ce:59:32:b3:ff:07:d1:15:82:9f:e1:97:d3:1b:f7:
                    70:0f:bc:dd:29:77:9e:c1:29:5b:a7:75:a6:94:88:
                    c1:13:80:92:1a:29:f9:c4:7d:29:ef:d7:2d:7b:06:
                    34:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C5:32:8E:95:C8:8A:F1:D9:6C:5C:78:34:D5:F3:F7:1D:71:57:E9
            X509v3 Authority Key Identifier:
                keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:82:78:d6:98:3f:4c:a4:bd:64:65:f4:05:cf:fe:8b:01:d5:
         00:a2:54:8a:58:d2:ce:8d:3b:84:96:64:07:64:2d:75:99:5c:
         e1:34:55:4e:e5:31:57:36:d9:cf:39:9b:4f:d6:f2:bc:ad:e0:
         1b:c1:37:7c:98:72:8a:b1:b7:6c:96:f5:52:17:bc:10:bd:59:
         0e:13:16:44:2f:97:e4:25:62:78:fc:ca:38:c5:34:46:03:fa:
         b1:4e:7d:03:7b:0a:72:2e:6a:8e:b6:ed:7f:23:7a:70:30:39:
         c7:ee:4a:4c:2c:ce:3c:b9:3b:1b:01:8f:02:d2:0c:dc:a6:98:
         02:88:ba:09:a7:6c:a0:b6:ac:00:36:ab:4a:04:e7:fc:b3:71:
         9f:d1:d7:cc:4b:ef:9c:5d:0a:67:f7:42:8d:4a:59:df:16:67:
         58:b0:ff:43:22:f3:5e:08:31:52:1f:f0:b1:64:71:04:4b:23:
         b9:3b:72:30:34:53:cd:b0:41:d4:1d:bc:ee:fd:33:61:c2:c8:
         8e:aa:e6:6e:95:7e:0d:ae:9f:3a:82:3d:fb:06:68:eb:16:5d:
         e9:fc:3b:81:4d:99:4d:45:23:a6:ce:7a:54:bc:62:58:72:73:
         7d:a1:73:e4:93:6c:67:12:aa:e3:d5:bd:8d:5a:f8:da:ef:ee:
         1b:12:60:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:07:46 2025 by rpki-client