Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
File:                     74wzqKYgHUCmAiC9Y5tdNSISZz4.mft (raw, json)
Hash identifier:          rmnnBCSrNKVSXuht0bngfQ8BM+3iRm+AyFuLleWamSw=
Subject key identifier:   39:1C:73:B5:98:66:C2:DD:24:7B:87:5B:1B:0C:02:A5:1A:4C:D4:03
Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
Certificate issuer:       /CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Certificate serial:       01984A77F96B356BE144EAFCBACD9B769CC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
Manifest number:          1414
Signing time:             Sun 27 Jul 2025 06:00:33 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:33 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:33 +0000
Files and hashes:         1: 74wzqKYgHUCmAiC9Y5tdNSISZz4.crl (hash: Ect4KD2HXY9GEXHGeSkgscOZ2GpByyieT3H8KguFIFg=)
                          2: XZUkkjfK1svUa6feBEevTKvtEcA.roa (hash: wyVf5zW45oYKuYL+LlUqTk3eWYEVvuJxk1VRagHAyy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:f9:6b:35:6b:e1:44:ea:fc:ba:cd:9b:76:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e
        Validity
            Not Before: Jul 27 06:00:33 2025 GMT
            Not After : Jul 28 06:00:33 2025 GMT
        Subject: CN=391c73b59866c2dd247b875b1b0c02a51a4cd403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a8:f3:b1:4c:cc:6d:bc:d5:02:a5:e8:91:53:
                    e6:d9:a2:e1:08:6e:07:29:93:8c:a3:8d:bb:8e:f1:
                    2a:1b:e8:99:a7:0c:da:37:c9:df:8d:b8:75:3a:4c:
                    cd:c2:40:1a:0c:19:55:2d:16:6f:cf:1c:c2:ae:30:
                    94:e7:3a:7e:12:bc:78:01:4e:39:7c:1e:01:e4:02:
                    09:99:4f:89:43:23:c2:72:1d:1f:e7:23:52:0b:16:
                    eb:45:20:47:1a:0d:32:72:ed:59:1c:88:4d:ac:53:
                    8f:89:9c:2e:9f:47:2c:57:dd:08:16:4b:4d:af:6d:
                    98:05:48:4f:36:da:dd:0e:b9:e5:73:5c:ff:15:d3:
                    76:d2:f3:33:1f:fd:84:9a:c4:72:85:c6:ec:87:0d:
                    f1:9f:fd:65:9a:19:15:dc:4a:97:b3:22:8d:80:55:
                    2c:63:b2:94:1f:5d:87:f0:33:6d:0f:50:bc:76:d8:
                    ec:0d:5d:0d:eb:44:f7:99:e7:54:51:33:f5:b7:3b:
                    99:ff:f0:00:62:42:ce:71:7b:46:74:d3:f5:04:38:
                    b5:94:59:c8:42:54:7e:1b:b7:c4:8a:d0:2d:ae:b6:
                    65:91:37:a2:13:ae:94:b0:71:96:a4:96:e7:22:f1:
                    87:77:d2:31:df:c0:f2:a8:80:a6:7c:6b:a7:4a:d3:
                    09:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:1C:73:B5:98:66:C2:DD:24:7B:87:5B:1B:0C:02:A5:1A:4C:D4:03
            X509v3 Authority Key Identifier:
                keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d9:06:a2:72:a9:01:bf:b3:e5:47:45:98:6f:ff:d2:f5:a4:
         a6:f4:0e:44:a8:67:9b:7e:47:99:f3:10:b4:de:a4:7f:e1:8f:
         19:66:b3:f7:7c:64:0c:74:b0:50:ce:30:aa:ee:86:bf:3a:04:
         43:4e:0e:3e:bf:76:92:85:36:6c:4d:34:8e:d0:fc:6e:52:82:
         f2:44:3e:14:36:35:ff:b4:62:af:4c:78:7d:dd:70:07:d3:48:
         95:ce:96:15:37:11:15:51:72:b0:0d:dd:2b:72:3d:a1:c9:2f:
         b7:19:c7:1c:67:85:9a:54:42:9a:05:b3:0f:94:84:be:58:8b:
         c8:a2:37:42:7a:ff:ef:bf:3e:c4:8f:91:1f:38:d5:f9:a0:14:
         04:2f:8a:eb:b6:87:84:de:3e:4a:74:65:1c:d1:2e:2a:74:64:
         e3:cb:75:f4:f7:75:d3:5b:83:01:54:85:80:17:fd:82:d7:f0:
         be:ba:9c:1f:b9:b3:79:89:63:15:3d:e6:3b:ee:1b:21:54:58:
         dd:3f:63:ad:16:ae:3c:8c:b9:f0:30:94:4f:d0:14:8b:c8:9f:
         4f:db:c1:37:1a:08:6b:01:e6:89:db:55:33:ba:8c:3b:ea:51:
         6f:cc:93:58:b3:e4:09:3c:f1:e0:c8:21:d5:a5:3c:a1:3a:7d:
         a6:22:d9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:15 2025 by rpki-client