Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.mft
File:                     EqosHuQ0mghsdpATpC6LSsK6Gb8.mft (raw, json)
Hash identifier:          q9SuNvLQaACx/8NmVm3Arehfx7SffCUk/m/V4mTH9Zo=
Subject key identifier:   D5:3E:48:64:69:5C:80:51:77:58:1B:97:27:81:4C:C4:01:3D:5A:8E
Authority key identifier: 12:AA:2C:1E:E4:34:9A:08:6C:76:90:13:A4:2E:8B:4A:C2:BA:19:BF
Certificate issuer:       /CN=12aa2c1ee4349a086c769013a42e8b4ac2ba19bf
Certificate serial:       01A179CD159484A8279B79A9CAE2DBA23D31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.mft
Manifest number:          1A55
Signing time:             Mon 26 Oct 2026 20:00:45 +0000
Manifest this update:     Mon 26 Oct 2026 20:00:45 +0000
Manifest next update:     Tue 27 Oct 2026 20:00:45 +0000
Files and hashes:         1: EqosHuQ0mghsdpATpC6LSsK6Gb8.crl (hash: s9QCKnDdKfvUfrcUQKaxpAnz6OE/GHW+evBv9MJgKYs=)
                          2: OG-ZWZfHCWaD7Z-Puldasen5Jog.roa (hash: thCFPWKbwyWEpovqQZHv9ObyQQr7Q4FawLDulYyxWKI=)
                          3: TMnA4OzjFSc5PKpazYmWHcCAACk.roa (hash: gSu9KbW6rtahrOrQHfiR6JyTob/6jze4lexbTQbl0SI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:cd:15:94:84:a8:27:9b:79:a9:ca:e2:db:a2:3d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12aa2c1ee4349a086c769013a42e8b4ac2ba19bf
        Validity
            Not Before: Oct 26 20:00:45 2026 GMT
            Not After : Oct 27 20:00:45 2026 GMT
        Subject: CN=d53e4864695c805177581b9727814cc4013d5a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:b7:5c:0e:8d:f6:1b:e0:b2:71:c3:9a:13:
                    18:b9:cb:b0:70:b1:d9:6f:fb:2f:c5:be:4c:75:27:
                    ca:16:19:06:fc:ba:41:0b:8a:c4:75:55:3d:aa:6b:
                    f5:77:3e:0e:e1:99:f2:c3:3a:6f:fa:30:a9:a1:3c:
                    9f:db:6d:01:7b:5f:b0:9e:5a:3e:59:c2:be:53:7b:
                    1f:f7:4d:3a:aa:95:57:ab:c8:e4:77:82:22:0b:fc:
                    5d:7c:2d:8f:f1:14:41:71:7a:ff:7e:78:76:f0:a2:
                    c7:82:1c:26:d1:bf:04:6f:bc:48:16:9a:cc:93:71:
                    f6:22:01:59:22:43:74:be:85:c5:28:df:31:5a:c0:
                    3b:5e:4a:6e:28:89:83:0d:c8:c6:3c:d0:4d:58:fc:
                    a2:ae:d2:43:f3:7f:10:e3:b8:1e:3d:ba:d7:d2:1d:
                    fb:48:a9:7d:f7:f5:5a:c6:48:de:1e:3b:fa:dd:04:
                    2a:1d:b9:a1:20:49:98:ad:3f:10:4e:9e:cb:4e:b4:
                    2b:56:d7:d8:1d:fc:b0:99:35:e8:4e:77:92:79:15:
                    d4:b5:86:56:0b:a1:07:82:eb:9d:ec:51:44:68:1b:
                    0f:c8:38:f2:95:f0:eb:ba:be:e2:9e:8d:a2:9e:8a:
                    8a:67:6c:c3:af:ca:95:52:51:4e:9e:57:b4:4d:9a:
                    c0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:3E:48:64:69:5C:80:51:77:58:1B:97:27:81:4C:C4:01:3D:5A:8E
            X509v3 Authority Key Identifier:
                keyid:12:AA:2C:1E:E4:34:9A:08:6C:76:90:13:A4:2E:8B:4A:C2:BA:19:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqosHuQ0mghsdpATpC6LSsK6Gb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6077a1-cec6-437c-bc90-d120da3e8e92/1/EqosHuQ0mghsdpATpC6LSsK6Gb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:47:ab:4c:7d:39:15:5b:29:cb:31:1e:55:e8:af:eb:ff:f8:
         6a:2a:5b:34:ab:e9:5b:7c:3d:1e:f0:30:8b:48:b4:9a:7d:85:
         40:ea:c5:bb:7e:82:54:4c:d2:1d:58:94:77:cf:29:3b:ac:99:
         7c:1c:a5:7d:53:44:0c:e0:6d:c4:da:11:26:ab:53:43:81:73:
         14:92:d6:82:75:5f:99:d3:aa:ca:c9:60:c7:5a:3e:5f:7e:d9:
         a8:70:51:d1:db:56:43:a8:93:f5:f1:b4:d3:06:ac:59:06:74:
         45:52:4f:2d:41:d8:3c:5b:80:2d:d1:45:3e:cc:83:38:49:62:
         34:eb:77:d4:a3:9f:a9:e5:a3:c9:6f:38:38:d9:db:1e:29:3e:
         fa:0d:96:f9:72:88:8e:c4:9e:54:24:f1:60:02:7b:66:ec:fb:
         2e:a1:1b:4a:d0:ca:5a:70:05:4c:32:58:e7:1f:a9:de:13:ca:
         6d:3e:7e:19:4c:8d:97:8e:4d:37:6e:cb:d5:16:09:c3:0d:b9:
         e0:c8:37:9b:23:73:c6:39:62:2d:99:45:ee:ef:69:b1:d8:db:
         40:45:d9:be:26:3b:db:6c:67:3f:7c:d8:f6:3c:ef:a7:4a:a7:
         76:20:7b:e4:0e:21:5f:5d:fe:b4:e3:c6:d7:70:80:7c:dd:42:
         7f:62:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:54:32 2026 by rpki-client