Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
File:                     74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft (raw, json)
Hash identifier:          5Ew8A0On8+NnjPFx0p5XOYWuo+5O5f/ys1Dp65Tj1p0=
Subject key identifier:   BE:AF:AF:5B:10:A2:20:46:6B:D0:53:57:1B:99:8B:19:DD:B8:75:25
Authority key identifier: EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC
Certificate issuer:       /CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
Certificate serial:       019921E74503D9DB7BACECBA209FAFD0C8FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 02:00:28 +0000
Manifest this update:     Sun 07 Sep 2025 02:00:28 +0000
Manifest next update:     Mon 08 Sep 2025 02:00:28 +0000
Files and hashes:         1: 74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl (hash: sFPkZVULEJvVqaBPlQh8qy4vvfXZ1L16rRtFCvCpyN0=)
                          2: lMqQBQxUd3_rITgUX_Xd15bHhcs.roa (hash: xYWVB8Ylsxp8fpKTzhWqmzpng/adcMSNJZDIutd8YK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:45:03:d9:db:7b:ac:ec:ba:20:9f:af:d0:c8:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
        Validity
            Not Before: Sep  7 02:00:28 2025 GMT
            Not After : Sep  8 02:00:28 2025 GMT
        Subject: CN=beafaf5b10a220466bd053571b998b19ddb87525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:20:3e:63:5b:5e:7d:57:1b:ee:81:56:ac:e3:
                    be:7c:92:15:3a:9c:6f:3f:b0:a6:18:a1:84:03:eb:
                    da:97:85:fa:29:f6:df:4e:65:58:20:5d:88:ed:71:
                    c5:2c:fe:b3:39:73:3b:cb:21:d1:1f:76:a7:df:41:
                    e1:17:65:a4:05:8d:79:d3:2f:99:2c:bb:35:93:d6:
                    27:dc:82:22:cf:ad:52:9d:cc:69:43:7a:07:12:0c:
                    bc:fe:d2:4e:a0:06:c3:ec:05:24:ae:b3:6c:60:91:
                    63:a3:9e:73:b6:7a:e5:b1:5c:59:47:fb:11:7f:d7:
                    ce:59:cb:cd:3f:0a:20:0f:95:74:1c:80:2a:3b:55:
                    64:60:fc:23:00:71:fb:bd:ff:15:59:66:d8:8c:cd:
                    fa:ea:27:08:5f:43:db:f5:fe:f0:80:c6:7b:4d:2c:
                    88:13:ce:4b:bc:13:4d:95:56:dd:36:15:e8:c3:d3:
                    97:2c:3e:d6:c6:27:8a:52:af:07:d4:32:46:b4:5c:
                    09:28:8e:15:f9:5c:fc:0b:1c:68:47:fe:f2:71:e9:
                    47:eb:49:fa:f3:2b:70:c9:4d:8d:5c:97:25:87:cf:
                    b5:22:aa:fe:b9:7e:bb:f4:e5:e4:24:a1:ee:9f:b7:
                    6d:3d:1b:0b:2e:c6:53:71:ad:a0:ee:08:96:9e:59:
                    2d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:AF:AF:5B:10:A2:20:46:6B:D0:53:57:1B:99:8B:19:DD:B8:75:25
            X509v3 Authority Key Identifier:
                keyid:EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:90:e4:ec:24:e7:16:52:c2:06:1e:25:6b:5a:6a:85:43:c4:
         d9:b8:84:27:63:64:0b:34:91:b7:23:de:9e:d9:77:c5:b9:f2:
         45:93:2c:6b:43:8d:17:e0:6d:c9:22:be:e5:19:5d:df:3e:b1:
         df:77:6a:f2:24:e6:f4:a9:fc:19:47:a8:7a:72:a6:a8:87:0c:
         bb:a5:32:70:25:9f:7c:37:4b:5a:18:0f:d3:c3:0a:e6:24:c9:
         79:72:6f:f5:2b:e1:f0:51:ac:52:91:29:ba:0b:6b:46:e2:24:
         92:fa:66:bc:a8:94:4b:a7:08:44:86:98:f2:4e:e0:88:e6:91:
         09:1d:ae:0a:3a:c6:cc:26:44:2f:70:7e:62:97:1a:2e:bd:bf:
         ec:bc:87:38:7d:53:2c:60:a8:3c:a4:d0:96:12:58:e5:1d:f8:
         f2:f2:81:e4:be:8b:ec:30:5a:cf:5c:cd:02:9a:97:b6:fb:fd:
         6d:cb:11:6d:55:65:40:f2:7b:2e:ce:3d:21:38:4c:41:a6:9d:
         af:d0:8e:80:e5:73:cc:ad:0d:51:66:4d:81:18:3d:f4:09:1e:
         05:4a:f9:07:91:4a:a1:8d:c3:5b:31:4f:2b:6d:80:9a:66:4a:
         64:e5:a2:e8:54:bc:04:69:f0:1f:b9:ec:59:2a:b6:7c:03:52:
         2c:97:d3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:16 2025 by rpki-client