Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
File:                     75S8y9TC4P-PeqsEXhSjEfOy-f4.mft (raw, json)
Hash identifier:          3/7fzEH6evixpvftxjeNS8aDxjV0Pl5hwNWVrwI1UT0=
Subject key identifier:   90:AD:16:4E:54:3D:4F:FF:AF:2E:11:89:2E:E8:0A:84:AC:77:26:DE
Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
Certificate issuer:       /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Certificate serial:       019A0B93B9DC7715205E28757B5B4E561DE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
Manifest number:          02DC
Signing time:             Wed 22 Oct 2025 11:00:21 +0000
Manifest this update:     Wed 22 Oct 2025 11:00:21 +0000
Manifest next update:     Thu 23 Oct 2025 11:00:21 +0000
Files and hashes:         1: 75S8y9TC4P-PeqsEXhSjEfOy-f4.crl (hash: +OlHqB42Lm7mCoPd65F1e4lKSi3qkQl2cFofMxur4kI=)
                          2: x_UGYHPi4KGbhasIbcCsyLRrLvc.roa (hash: TZUXAFaKqC1GafLAz2qnfFwZj2ZE2C3Lq2YMTRrQmKk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0b:93:b9:dc:77:15:20:5e:28:75:7b:5b:4e:56:1d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
        Validity
            Not Before: Oct 22 11:00:21 2025 GMT
            Not After : Oct 23 11:00:21 2025 GMT
        Subject: CN=90ad164e543d4fffaf2e11892ee80a84ac7726de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:da:bc:41:22:6f:2b:df:af:28:6b:60:cc:9c:
                    85:21:c1:19:66:0c:34:42:a3:33:34:de:84:c5:72:
                    49:a7:de:73:2f:54:90:17:3e:5e:2b:ec:f6:29:2b:
                    cc:bb:17:36:94:23:95:ee:98:6b:de:05:d9:f2:c6:
                    1d:3f:2f:40:45:df:3e:cc:7f:5c:d6:2f:3d:3c:f9:
                    fc:0a:55:6c:71:7d:4d:e4:cd:10:d2:a2:c3:8a:30:
                    0d:d7:d2:79:cc:6d:1e:ac:6a:73:ad:bf:91:99:13:
                    b4:e1:8e:44:e0:67:af:b8:3b:d9:28:3e:9b:c6:87:
                    3f:5e:2e:8e:39:fc:6d:32:e1:b6:5d:42:7e:60:fb:
                    8d:7b:98:c9:24:7e:3f:64:3a:fa:ee:8f:66:89:94:
                    6f:2d:85:fc:20:09:50:10:f2:18:4b:92:cd:29:3b:
                    8b:f4:d4:f7:56:90:71:23:d5:ce:9a:85:f0:69:5c:
                    c2:f0:d2:1f:b9:e9:1a:4f:42:2b:3e:38:e6:d8:f2:
                    94:6d:37:9c:11:a2:7f:36:24:fb:fe:81:7d:70:81:
                    c8:2a:4a:43:ce:d1:f3:39:72:b9:f3:42:5a:0b:64:
                    98:02:80:ce:c6:1c:af:67:70:d2:d1:25:04:a0:ae:
                    16:11:dd:5b:f2:39:29:f5:e4:17:4e:0b:b0:e5:dc:
                    2c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AD:16:4E:54:3D:4F:FF:AF:2E:11:89:2E:E8:0A:84:AC:77:26:DE
            X509v3 Authority Key Identifier:
                keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:16:5d:3f:97:e2:bb:2f:7f:8e:5b:34:e4:8a:6f:43:5c:01:
         bd:39:18:42:8d:72:a3:04:09:3f:94:70:81:02:ff:70:37:6d:
         46:15:aa:17:f1:c1:f0:d1:06:59:dc:c6:70:14:ab:bc:31:0d:
         98:ac:07:f1:b8:01:de:aa:32:6e:8a:d5:de:7b:f0:27:d3:5d:
         2a:de:b0:c7:ef:32:00:ef:56:d2:ee:1e:a6:84:77:b8:d0:84:
         10:a2:4f:70:f3:de:d0:59:22:65:19:49:62:8b:0b:49:ca:fa:
         03:70:aa:76:92:a8:5d:0e:ba:c2:f1:61:22:6d:c1:79:1b:09:
         c6:75:57:e9:4d:cc:ab:b4:d4:b5:53:07:1c:2f:ba:7b:92:88:
         2c:a3:59:65:9b:bf:12:3d:70:20:e5:a0:fa:91:fb:13:e9:71:
         c4:23:70:00:47:f5:20:1c:86:c4:f2:cf:9e:00:3c:3b:ef:b3:
         2f:fa:a0:ba:4c:d2:f4:cb:5d:02:73:05:d5:ac:f1:9f:1f:04:
         e3:be:d6:70:38:44:a4:1d:62:60:5f:bd:92:e9:81:a9:04:c0:
         3e:9a:b4:50:d8:29:70:42:e2:68:3f:ae:8a:8e:b9:26:d4:af:
         1c:00:74:65:19:79:64:68:a3:0c:6b:ff:54:a3:14:57:b1:8b:
         bb:b6:12:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:23:00 2025 by rpki-client