Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
File:                     eqhsgVbwgG3MzcItzE1hdbj6mJM.mft (raw, json)
Hash identifier:          +0+cHXOYQO+p9mOjnhg8waq4y9lFyvRyM3jP7emcgng=
Subject key identifier:   56:C5:F1:3A:FC:E8:F7:46:EB:46:58:54:78:0D:C9:FE:EC:14:1B:2A
Authority key identifier: 7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93
Certificate issuer:       /CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
Certificate serial:       0197496842A96DB82EB9B7CE7D5BC37DC5F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
Manifest number:          1202
Signing time:             Sat 07 Jun 2025 08:00:58 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:58 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:58 +0000
Files and hashes:         1: eqhsgVbwgG3MzcItzE1hdbj6mJM.crl (hash: u+2a40xIFmiEJO07rXK6qwx+ZmF9wdEh/q1iMJZtQRw=)
                          2: r8_0uelpgxeJEhOZBb5I-C3t9Dw.roa (hash: qSHcoGbD5w1VMiNKpysCXUtKw278KTgr4tRmUU21kpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:42:a9:6d:b8:2e:b9:b7:ce:7d:5b:c3:7d:c5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
        Validity
            Not Before: Jun  7 08:00:58 2025 GMT
            Not After : Jun  8 08:00:58 2025 GMT
        Subject: CN=56c5f13afce8f746eb465854780dc9feec141b2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:11:b9:8d:64:37:82:1e:60:d1:ad:75:21:
                    68:17:15:19:64:42:30:d5:69:36:84:b5:e0:90:e0:
                    7a:d3:4c:02:97:b6:1f:48:d0:3b:dd:89:21:38:13:
                    c8:88:ef:58:52:43:0e:df:36:57:aa:4b:b8:2e:0f:
                    0b:99:e9:2b:ed:ca:e5:7f:1b:a5:ab:7a:2e:c9:64:
                    98:99:b3:50:51:0a:12:06:f6:6a:93:d5:1d:78:54:
                    32:26:cc:a7:44:d6:87:e8:48:5f:82:36:1d:a8:52:
                    72:6c:3c:a6:ac:5a:82:9d:41:d0:5d:ca:88:cb:56:
                    51:46:e1:6a:bc:b6:42:98:6c:2d:ed:a6:37:86:1d:
                    da:92:4a:8f:8b:5d:c2:bc:51:4c:27:0f:25:5f:b0:
                    70:27:ec:17:13:2d:27:6d:fd:35:2d:dc:df:d3:26:
                    fb:ec:8e:08:17:c2:a7:a6:46:dd:f6:24:03:0b:25:
                    b2:f8:2d:c1:e2:68:35:1f:a0:1a:6b:7a:27:4b:b3:
                    f5:c3:69:07:97:90:60:91:e0:a3:43:41:83:eb:6a:
                    84:e1:df:8f:52:de:62:68:d6:fe:5b:4b:81:58:ae:
                    f7:d4:10:d3:23:96:b7:94:12:61:5a:1c:c4:a4:7a:
                    5d:aa:d5:25:ea:a1:59:ff:74:c1:f4:0b:3b:60:22:
                    c4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C5:F1:3A:FC:E8:F7:46:EB:46:58:54:78:0D:C9:FE:EC:14:1B:2A
            X509v3 Authority Key Identifier:
                keyid:7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ee:cb:c2:ac:95:9c:f8:00:7d:44:73:48:3c:60:7e:d1:45:
         b9:0a:26:51:04:45:f7:73:93:2b:31:b0:8d:19:76:25:d1:17:
         a6:80:9d:ff:07:83:0b:e6:04:98:8f:59:b0:c5:32:40:eb:31:
         da:b7:a7:a2:6f:40:8c:96:fa:39:86:7c:6a:d6:29:1d:f3:1a:
         d0:b4:c9:5f:6d:8f:81:eb:2e:eb:e3:0e:ab:b9:00:79:91:f8:
         f4:a9:bd:d8:b8:6c:ef:48:96:af:1b:a7:ea:9e:bd:fc:f5:24:
         87:af:db:4b:22:d6:c2:2e:48:51:b1:4f:dc:ab:bd:1a:ec:40:
         e4:16:69:0d:f2:80:06:be:4f:d0:5d:ea:bb:f6:22:de:29:ee:
         61:0a:3b:e9:ca:6d:a3:07:8b:48:8a:57:47:b4:78:d4:3c:bf:
         49:f7:4a:ea:cb:0d:31:2f:44:17:4c:7f:e9:7c:cf:82:7b:64:
         25:da:d7:42:da:c4:68:4c:99:2d:bb:cf:4b:e1:c1:74:ae:89:
         0a:c4:0b:1e:34:e6:9e:f0:ea:c8:eb:5d:e2:ca:76:4f:26:fe:
         07:bc:9a:6c:2c:66:93:84:69:58:10:7b:51:49:68:43:c2:26:
         ca:1e:21:c4:83:c4:51:26:0d:0d:c9:88:f3:57:1b:77:26:d1:
         d3:a9:52:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaEKpbbguubfOfVvDfcXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYTg2YzgxNTZmMDgwNmRjY2NkYzIyZGNjNGQ2MTc1Yjhm
YTk4OTMwHhcNMjUwNjA3MDgwMDU4WhcNMjUwNjA4MDgwMDU4WjAzMTEwLwYDVQQD
Eyg1NmM1ZjEzYWZjZThmNzQ2ZWI0NjU4NTQ3ODBkYzlmZWVjMTQxYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYIRuY1kN4IeYNGtdSFoFxUZZEIw
1Wk2hLXgkOB600wCl7YfSNA73YkhOBPIiO9YUkMO3zZXqku4Lg8Lmekr7crlfxul
q3ouyWSYmbNQUQoSBvZqk9UdeFQyJsynRNaH6EhfgjYdqFJybDymrFqCnUHQXcqI
y1ZRRuFqvLZCmGwt7aY3hh3akkqPi13CvFFMJw8lX7BwJ+wXEy0nbf01Ldzf0yb7
7I4IF8Knpkbd9iQDCyWy+C3B4mg1H6Aaa3onS7P1w2kHl5BgkeCjQ0GD62qE4d+P
Ut5iaNb+W0uBWK731BDTI5a3lBJhWhzEpHpdqtUl6qFZ/3TB9As7YCLEaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbF8Tr86PdG60ZYVHgNyf7sFBsqMB8GA1UdIwQY
MBaAFHqobIFW8IBtzM3CLcxNYXW4+piTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMmQ0ZDgtNGY3Yy00NzU2LWE0NjEt
ZmFmZGJlZDU3NGFkLzEvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9iMmQ0ZDgtNGY3Yy00NzU2LWE0NjEtZmFmZGJlZDU3NGFk
LzEvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASe7LwqyV
nPgAfURzSDxgftFFuQomUQRF93OTKzGwjRl2JdEXpoCd/weDC+YEmI9ZsMUyQOsx
2renom9AjJb6OYZ8atYpHfMa0LTJX22Pgesu6+MOq7kAeZH49Km92Lhs70iWrxun
6p69/PUkh6/bSyLWwi5IUbFP3Ku9GuxA5BZpDfKABr5P0F3qu/Yi3inuYQo76cpt
oweLSIpXR7R41Dy/SfdK6ssNMS9EF0x/6XzPgntkJdrXQtrEaEyZLbvPS+HBdK6J
CsQLHjTmnvDqyOtd4sp2Tyb+B7yabCxmk4RpWBB7UUloQ8Imyh4hxIPEUSYNDcmI
81cbdybR06lSKQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:32 2025 by rpki-client