Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
File:                     tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft (raw, json)
Hash identifier:          TCy6QJM6AVkzFX+HXpv9fo8dcK7r8DUGz/IzbuaNgZE=
Subject key identifier:   B7:7D:75:C1:3B:8C:09:EE:8A:47:62:3F:30:84:FF:03:BF:D8:B0:A9
Authority key identifier: B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73
Certificate issuer:       /CN=b443b3486de7826fd6b0e2aec026597b6207b373
Certificate serial:       0199FB4593237284E2641CC6B892858676EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
Manifest number:          0745
Signing time:             Sun 19 Oct 2025 07:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:04 +0000
Files and hashes:         1: tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl (hash: avAs73R9vnXYn/im7Hsm5cSymZW4PxLNcoFuTpqCcJk=)
                          2: wT4e9Ao8jFQGwyLrCGIT4nZjT4c.roa (hash: pBWXcPqjDxvwQjU9omFEQSPm1JUMryg0VPK+ErbtywE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:93:23:72:84:e2:64:1c:c6:b8:92:85:86:76:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b443b3486de7826fd6b0e2aec026597b6207b373
        Validity
            Not Before: Oct 19 07:01:04 2025 GMT
            Not After : Oct 20 07:01:04 2025 GMT
        Subject: CN=b77d75c13b8c09ee8a47623f3084ff03bfd8b0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:38:57:81:cc:ee:5c:ca:c7:73:6b:6a:39:d9:
                    1d:64:bd:4c:17:4b:06:f0:70:81:37:40:0e:f4:a5:
                    e8:38:fe:5c:55:45:89:dd:20:18:29:c8:70:fb:af:
                    d3:a6:d9:57:76:47:57:88:04:c2:87:06:61:73:88:
                    11:e1:79:34:2a:db:85:16:35:a1:36:1b:2c:0f:e3:
                    a3:26:ff:af:b4:81:31:df:c5:71:d2:91:62:83:08:
                    f8:38:ce:b1:ae:76:4d:b2:02:7c:84:68:cd:21:93:
                    04:29:24:ea:20:b6:c4:4f:bb:55:ac:fe:83:6c:b8:
                    33:33:89:03:3a:8b:4b:f9:d6:fc:2e:db:46:40:e1:
                    6f:70:30:49:a6:24:28:9f:c2:f7:50:fa:f4:97:d9:
                    d7:a7:a5:74:6f:ca:9a:6f:79:3e:c0:bd:1b:e3:c7:
                    b8:ce:06:87:42:31:84:88:1e:9e:81:e6:6b:4b:93:
                    29:8f:cb:48:34:b3:4a:e8:16:e3:e9:24:e0:0b:87:
                    64:f0:23:71:82:90:18:db:f0:79:0a:60:cf:75:fb:
                    cf:44:8e:7d:3e:a4:0d:56:34:ef:6b:f4:4e:ff:cd:
                    5b:76:0b:06:a1:a4:ac:00:d2:3f:11:00:bc:06:02:
                    80:9d:88:1d:32:cf:56:d3:1a:86:f8:04:38:85:fc:
                    58:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7D:75:C1:3B:8C:09:EE:8A:47:62:3F:30:84:FF:03:BF:D8:B0:A9
            X509v3 Authority Key Identifier:
                keyid:B4:43:B3:48:6D:E7:82:6F:D6:B0:E2:AE:C0:26:59:7B:62:07:B3:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEOzSG3ngm_WsOKuwCZZe2IHs3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/74271c-69a7-4a86-966d-2a1451e7e3c1/1/tEOzSG3ngm_WsOKuwCZZe2IHs3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:89:eb:f0:23:39:91:a4:ea:23:08:6d:81:1d:d9:34:e8:3a:
         88:97:20:b8:d6:e0:59:4d:bd:8c:2a:f3:c3:ad:43:ce:57:c4:
         80:df:2b:5f:c2:dd:eb:18:82:74:32:29:d6:3d:c1:46:3b:e1:
         f1:df:3d:96:23:91:40:39:d9:b2:9a:99:e3:af:73:0e:56:a2:
         65:52:48:cc:51:cf:8b:5d:c3:47:21:24:9f:77:8e:35:67:af:
         73:b9:41:43:94:fd:b6:a5:1e:21:80:b4:8d:e4:79:01:36:de:
         58:cc:18:8d:dd:c3:fd:d7:77:db:c7:99:0c:7e:86:20:e3:05:
         02:e9:13:11:f1:c8:f4:09:05:d6:b7:f8:00:6a:f2:ca:83:16:
         5d:3a:25:a5:7d:49:19:bd:ca:fe:63:eb:77:61:1d:54:4c:96:
         61:1d:08:c0:81:b1:81:d6:07:55:49:ff:d6:1f:6d:9e:57:29:
         07:91:f9:c8:76:aa:79:9d:58:7d:2f:96:93:a5:6e:f1:cb:f2:
         30:c3:9b:0d:84:62:b2:98:ef:f6:e5:3f:e0:61:10:67:d4:43:
         be:5c:59:b5:27:66:28:7c:2f:dd:53:60:9b:43:03:d2:65:c7:
         7e:ae:05:94:dd:e5:87:b7:47:e3:8b:b1:c9:e1:ce:bc:72:06:
         67:c5:7f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:08:29 2025 by rpki-client