Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
File:                     EDWtT69cNx08JO1z-tZs3GrGuRg.mft (raw, json)
Hash identifier:          wTsd+OR1g1M9dOIt4j9QgvZF2/0ZA4/Xyknd9a2eL6U=
Subject key identifier:   8C:8E:23:30:15:EC:8B:D1:51:42:ED:00:25:2C:E5:B1:2B:B0:BC:DC
Authority key identifier: 10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18
Certificate issuer:       /CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
Certificate serial:       0199FC58AF843A96A917E9BC626374489990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
Manifest number:          074B
Signing time:             Sun 19 Oct 2025 12:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:34 +0000
Files and hashes:         1: EDWtT69cNx08JO1z-tZs3GrGuRg.crl (hash: QibjhqE4CNwET3MmVe5LZ8U2LDs2xI9sltjphzZ3EPg=)
                          2: qv58PcziHSozk6pOK4h_LgXLS7w.roa (hash: BZchB3z4vvljLfndUGS0R7LquQNr6/obSV/f0pocufU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:af:84:3a:96:a9:17:e9:bc:62:63:74:48:99:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
        Validity
            Not Before: Oct 19 12:01:34 2025 GMT
            Not After : Oct 20 12:01:34 2025 GMT
        Subject: CN=8c8e233015ec8bd15142ed00252ce5b12bb0bcdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ec:bd:b3:5d:dd:f7:9a:62:ca:44:5c:d5:0a:
                    54:dd:9c:38:2c:d5:d2:88:eb:23:8b:36:b2:db:0b:
                    0d:e6:4d:ac:8f:26:55:88:a1:3c:55:59:c4:25:cb:
                    0e:61:a9:fa:01:53:a4:5f:5c:e5:92:57:5b:f4:47:
                    c3:be:f5:7c:39:7e:14:9a:11:f3:73:1f:29:be:f2:
                    48:87:08:80:a1:f2:76:ac:d9:cf:66:bd:a5:4c:00:
                    c8:ef:15:d5:86:3c:fc:fb:c4:04:51:99:b8:0f:c0:
                    3f:9e:29:93:67:4b:06:cf:dc:ec:64:2b:e9:d2:ae:
                    77:aa:65:85:1f:2b:16:c5:7a:b6:b3:75:61:19:1b:
                    27:bd:fc:26:ea:16:06:0e:13:32:ba:5d:06:0c:94:
                    ea:7a:d3:e8:31:35:6e:6a:22:e2:5a:30:b9:66:c3:
                    fa:91:fc:60:b3:64:b2:3a:d5:2f:dc:bd:a7:08:5d:
                    b1:de:e4:4a:c4:08:81:12:0b:7e:e9:06:d3:98:ed:
                    ea:e1:2d:b2:2c:18:b4:4c:c1:29:ce:3f:b8:be:3a:
                    a6:1f:23:cc:ba:1f:05:76:26:d9:fa:e2:93:02:0b:
                    a2:f4:52:61:c8:b4:9a:de:a7:64:85:e5:0d:21:6e:
                    85:3e:a9:b0:0c:af:63:ed:9d:e0:64:09:39:5d:1e:
                    5b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8E:23:30:15:EC:8B:D1:51:42:ED:00:25:2C:E5:B1:2B:B0:BC:DC
            X509v3 Authority Key Identifier:
                keyid:10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:5f:64:6b:c9:f5:71:b2:84:bd:e6:79:fe:f7:a9:42:c8:bb:
         bb:b0:5c:59:76:fc:32:f5:b3:3d:0b:f0:6b:16:a0:fd:ea:5f:
         72:0c:0f:2f:44:f0:2e:83:34:20:40:5e:3f:c2:ae:47:d2:0c:
         3e:48:e1:47:45:b1:60:f0:9b:f2:48:45:15:6e:e7:36:fb:02:
         1d:1d:af:4c:6a:41:8f:c4:b2:e9:3c:7d:a6:80:a6:62:ef:11:
         59:66:c6:a7:2a:86:07:ee:f5:7a:2d:8e:b6:4e:2c:ff:dc:ee:
         d4:6b:7d:26:39:29:b7:70:df:80:12:9d:72:77:3c:f3:e8:aa:
         ea:00:ea:b1:8c:c6:3d:2c:26:06:e7:4e:f3:83:1d:43:75:ed:
         c2:ae:63:54:4d:8c:f9:74:79:d9:ab:8d:9d:16:47:d7:60:b6:
         71:f1:7e:f8:01:4e:16:59:b8:31:08:d2:21:22:99:44:25:65:
         40:85:44:8d:ed:08:75:ae:b3:9e:9d:d0:31:b1:6d:b2:48:60:
         cd:12:cd:12:24:93:4a:bd:92:e2:c8:90:17:c8:d5:44:c9:9f:
         b5:40:92:e1:b8:17:2e:4e:96:68:1d:12:96:01:c9:1e:3a:df:
         eb:aa:22:b0:da:a8:7c:53:ef:02:cc:59:2d:f5:a4:a4:e5:45:
         8c:0c:b4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:42 2025 by rpki-client