Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
File:                     EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft (raw, json)
Hash identifier:          ujLzNNVKcYhLnaf4QDUgYxeZyFqv9YK6TS/iseIiUYo=
Subject key identifier:   ED:2E:CC:53:F2:B8:9A:DA:1D:9C:EF:AA:5E:5C:A9:EB:78:08:5C:0F
Authority key identifier: 11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA
Certificate issuer:       /CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
Certificate serial:       019F194381216194D78EC9A22A74FEEAAF08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
Manifest number:          0DEC
Signing time:             Tue 30 Jun 2026 16:01:22 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:22 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:22 +0000
Files and hashes:         1: EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl (hash: LIGHqBhWP86QxgNvtp0ejtd0GPiNxnl2pJpxpBK2G1c=)
                          2: H8jNWlhdfl7nRCwiQ_yYCw9IePk.roa (hash: QUSltaSgdTXR2x5Kqx3Kj2QU9KF/OL830wGX48az1XI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:81:21:61:94:d7:8e:c9:a2:2a:74:fe:ea:af:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca
        Validity
            Not Before: Jun 30 16:01:22 2026 GMT
            Not After : Jul  1 16:01:22 2026 GMT
        Subject: CN=ed2ecc53f2b89ada1d9cefaa5e5ca9eb78085c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4a:4f:b4:13:ee:c0:fe:91:65:d7:b0:b4:be:
                    76:47:5c:91:4d:53:3f:91:84:69:44:54:28:d8:23:
                    14:1b:bd:a1:b2:2d:ae:5e:46:57:b4:f2:30:01:63:
                    6f:5a:5e:56:e3:15:3e:21:9e:1d:4e:f5:ca:31:86:
                    b1:95:c2:20:d4:ee:87:a1:22:a2:35:97:92:ae:98:
                    83:a0:b9:64:04:b7:7c:ce:8d:7f:53:d3:52:43:27:
                    78:dc:5c:1e:ec:dc:92:25:be:a7:02:77:32:0f:ea:
                    cb:98:6f:ca:78:53:a4:86:53:85:83:39:06:0a:d8:
                    0a:25:6b:61:be:52:80:fd:c5:b6:54:02:3b:e2:71:
                    62:25:b1:65:d7:94:89:4e:51:db:54:ee:cb:cd:54:
                    d2:c2:ca:a8:00:19:ee:e1:26:8e:45:69:10:1c:0b:
                    07:16:ef:9a:de:a4:5d:ae:78:9b:da:32:6b:2a:9a:
                    a8:08:28:cb:c6:2c:f3:1d:90:b1:de:41:15:21:0d:
                    b9:31:c5:84:82:99:a8:2b:7a:be:05:ac:45:d2:2d:
                    75:26:ab:b1:6d:88:22:cd:42:c8:15:17:3c:b7:c1:
                    70:18:93:e7:35:94:d0:95:7e:d7:b8:f0:5d:1c:22:
                    1c:48:f7:33:79:a7:46:df:8f:33:af:f3:b5:21:26:
                    f1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2E:CC:53:F2:B8:9A:DA:1D:9C:EF:AA:5E:5C:A9:EB:78:08:5C:0F
            X509v3 Authority Key Identifier:
                keyid:11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c3:2b:2a:f2:d7:4e:b1:e5:75:16:89:15:fd:39:96:a4:1e:
         cc:92:99:b2:9f:6b:1b:7e:a4:46:86:12:b7:31:10:65:43:52:
         4d:3a:ac:ed:73:2e:be:26:cc:b8:4b:7c:4a:16:42:4f:bb:ea:
         05:4e:09:5f:bb:29:ef:f9:fe:d4:f8:0d:44:ff:f5:5a:50:42:
         1d:15:f3:2a:4e:cb:ef:df:dd:e7:e2:46:18:80:bb:c8:ea:eb:
         30:a9:44:8b:7c:53:de:54:71:cb:28:ff:8e:68:ed:ad:9b:2f:
         75:45:38:6a:5f:9f:8a:d2:b5:70:c8:fb:89:4b:0f:13:fa:5b:
         c6:ff:a5:2a:2a:a0:6a:74:ec:64:da:e6:12:e7:8c:14:d8:08:
         67:79:8b:2f:d8:05:c4:55:ca:58:0a:49:1f:a4:c0:44:8e:5b:
         05:3b:50:08:b2:ef:a1:c9:1a:8b:23:5f:d6:6b:97:60:2c:07:
         5b:e8:67:bf:b3:24:b4:c5:d8:92:ee:a2:ca:b9:cd:f6:4c:7d:
         00:4e:7d:74:55:e7:c9:3e:eb:c8:9a:7f:4e:03:6b:4e:87:95:
         65:76:59:55:44:25:29:03:8b:b0:cf:19:ad:a1:6b:f8:ff:2b:
         64:fd:6c:2f:18:59:73:65:8d:bf:17:4b:ec:eb:4f:71:2e:27:
         f6:c1:69:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:34 2026 by rpki-client