Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
File:                     74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft (raw, json)
Hash identifier:          t0joySdGLDd5z07gwko3xPmrJCqCzS2N0Sl0Xb2K0Vs=
Subject key identifier:   AD:74:82:BC:B9:89:6A:ED:E8:CA:28:D8:17:8C:F0:1D:CB:53:C5:7C
Authority key identifier: EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC
Certificate issuer:       /CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
Certificate serial:       019A71EEC955F4881461AFE736346B038A4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
Manifest number:          171F
Signing time:             Tue 11 Nov 2025 08:01:05 +0000
Manifest this update:     Tue 11 Nov 2025 08:01:05 +0000
Manifest next update:     Wed 12 Nov 2025 08:01:05 +0000
Files and hashes:         1: 74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl (hash: z80Wqcv5vhqzS7s5+kQmOHFrBr7q8DRBsc8Zj9wKIJ4=)
                          2: lMqQBQxUd3_rITgUX_Xd15bHhcs.roa (hash: xYWVB8Ylsxp8fpKTzhWqmzpng/adcMSNJZDIutd8YK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 08:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:ee:c9:55:f4:88:14:61:af:e7:36:34:6b:03:8a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
        Validity
            Not Before: Nov 11 08:01:05 2025 GMT
            Not After : Nov 12 08:01:05 2025 GMT
        Subject: CN=ad7482bcb9896aede8ca28d8178cf01dcb53c57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:02:cd:a9:9b:3e:68:26:d8:77:19:5e:cc:97:
                    78:59:77:c8:e4:17:4b:ed:f5:f2:a2:47:6e:47:4e:
                    4c:53:5c:87:fb:cf:03:b4:0a:0c:26:3d:a8:52:c1:
                    36:33:d1:d5:d1:c5:2f:65:e1:c2:28:d7:fd:cb:8b:
                    02:e9:17:54:fa:e0:90:fe:79:00:24:ca:5e:3b:78:
                    6e:b1:c6:c6:c4:75:05:14:0a:2e:8a:b2:b3:a6:a8:
                    fa:9a:54:ef:12:a7:39:f7:9a:96:74:61:01:0f:28:
                    75:2b:46:5b:b8:89:50:e8:8f:87:75:24:b4:3c:c0:
                    41:92:67:ea:02:69:72:7a:02:dd:b9:4a:f2:36:5e:
                    d5:34:97:c4:38:33:f3:dc:0f:ec:49:0d:0a:c4:75:
                    8c:80:e2:25:9e:8c:04:2b:86:6d:cf:0c:4b:e4:dc:
                    5b:25:55:99:fb:3c:67:2e:ba:e4:8a:64:c1:28:7d:
                    d1:11:9f:83:1b:a5:28:10:4d:7f:0f:c7:9c:c9:0a:
                    99:bb:b2:86:81:52:c5:0b:d8:47:9d:8e:61:86:d1:
                    06:ff:dd:f0:d9:8d:23:9f:27:6d:b5:27:c3:30:29:
                    d8:3e:5e:56:fe:9a:ce:3b:93:61:86:1a:fd:06:61:
                    35:e6:77:a6:9f:20:fd:b5:23:87:dc:74:e0:a6:96:
                    be:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:74:82:BC:B9:89:6A:ED:E8:CA:28:D8:17:8C:F0:1D:CB:53:C5:7C
            X509v3 Authority Key Identifier:
                keyid:EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:cb:e5:da:bf:2a:c8:61:0f:1c:47:ab:75:b9:f2:68:ff:41:
         74:df:39:9e:22:e9:63:04:5e:83:05:b2:94:b6:2a:9d:c6:9d:
         fc:99:4a:12:37:81:a7:48:96:11:65:e2:8e:ea:fd:4d:d4:8b:
         b1:af:27:fd:53:9f:6d:1d:a3:52:61:f8:35:8f:ba:3a:ff:69:
         28:c6:2e:f3:e2:64:3e:22:47:56:c5:79:41:91:7b:93:0e:cd:
         3e:0c:91:98:7b:a1:45:55:de:ee:86:72:6f:95:87:de:b0:f5:
         b4:21:e0:a1:5a:65:e7:69:ed:ea:be:c7:8b:fd:f8:d3:e9:b0:
         72:2d:08:83:e8:79:d0:57:ba:42:db:44:7e:11:72:34:b5:79:
         85:85:41:7f:bb:33:d7:86:53:49:3d:6d:4a:f2:b2:72:ca:b3:
         f0:f7:13:28:03:d5:d8:46:af:06:89:5e:e4:83:74:3e:ea:ba:
         63:e2:78:d8:e7:9d:62:88:e0:a2:dd:68:19:2d:4a:6c:41:7e:
         49:bc:c0:3a:a8:cd:ee:d4:43:3c:5c:09:f0:9b:92:13:4c:04:
         4d:a8:19:0c:bf:2a:f7:bb:aa:08:05:62:17:40:c0:27:45:74:
         fb:63:fa:0a:65:01:70:eb:b2:b4:09:e3:81:f1:07:cf:93:ce:
         f6:99:cd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:51 2025 by rpki-client