Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
File:                     74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft (raw, json)
Hash identifier:          H8ZFCZNGv/TdobRNSNjdcFNBixt5UTiIq5vUj2eTdlM=
Subject key identifier:   0E:29:FB:21:72:6A:46:93:40:DE:01:A5:66:2F:87:0C:5F:71:51:1D
Authority key identifier: EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4
Certificate issuer:       /CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
Certificate serial:       0199FB0F2BD81573030758B773A6E8A97107
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
Manifest number:          087B
Signing time:             Sun 19 Oct 2025 06:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:39 +0000
Files and hashes:         1: 74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl (hash: /5uVoykA6cSIfupXC0j5I9jacr90+A+J22/r2uEAiQ4=)
                          2: ScldZDNPQSfRnsRt5khqoPE91NU.roa (hash: KUeiCd9GvmA+LCWqv73j10Yntn6kGl4O83uDHMjp9xg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:2b:d8:15:73:03:07:58:b7:73:a6:e8:a9:71:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
        Validity
            Not Before: Oct 19 06:01:39 2025 GMT
            Not After : Oct 20 06:01:39 2025 GMT
        Subject: CN=0e29fb21726a469340de01a5662f870c5f71511d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:05:d2:4d:f9:05:24:1f:b4:3b:5e:4c:ca:
                    45:a6:71:21:cd:f9:12:4b:f6:5b:d3:95:a0:77:c9:
                    00:4b:9f:f7:a0:08:2e:73:5c:e7:39:92:37:26:d4:
                    16:3e:3b:17:b7:8c:43:be:28:ce:17:a8:50:e1:ef:
                    ed:c6:e7:ee:a1:e1:12:e3:e5:c1:cf:b9:cf:d4:6a:
                    e0:44:eb:f7:68:11:1a:ed:17:88:1c:4e:8a:d9:07:
                    62:e9:19:b0:29:74:f1:e4:4b:28:b3:81:fd:ce:2d:
                    97:e0:4f:2e:29:ef:09:40:25:9b:e7:dc:56:35:ef:
                    f6:2e:c5:b5:a4:7e:74:23:d8:ae:8d:d4:de:df:46:
                    34:1d:1d:b0:be:38:50:4a:c0:59:8f:6e:63:86:42:
                    6a:45:f7:2a:a0:42:a8:2f:5f:58:f6:60:8c:e9:a6:
                    12:bc:1f:1b:ff:5a:a7:2a:e6:ca:0e:dc:5c:1b:f6:
                    92:df:f8:e2:bb:02:46:81:19:5f:16:d5:44:92:3f:
                    c7:61:65:c7:0a:fc:d3:9e:9a:cd:4d:73:a3:67:d0:
                    d3:35:5b:1c:53:05:bd:6f:ac:e1:21:06:a2:05:d7:
                    69:ea:f8:bf:6a:83:9a:ba:2c:bf:e4:ea:9b:aa:e5:
                    fe:f6:2e:c2:7b:f4:ef:29:3d:98:74:26:71:6f:66:
                    a8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:29:FB:21:72:6A:46:93:40:DE:01:A5:66:2F:87:0C:5F:71:51:1D
            X509v3 Authority Key Identifier:
                keyid:EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:66:04:9e:a8:aa:72:11:60:c0:c2:57:58:6b:c5:ba:37:6b:
         6a:c4:62:9a:60:b8:f2:4f:c8:8c:36:a7:1a:2a:47:b1:d4:1a:
         4c:8a:d8:4d:08:56:cc:d5:7a:a9:cd:c1:2a:ba:cd:0c:2c:d4:
         55:e5:be:ab:65:c8:26:d8:e5:9f:fb:6b:64:af:a2:90:c7:c6:
         70:6d:4a:2e:d2:56:c6:57:32:d5:29:5e:56:d3:67:03:88:f7:
         1d:b1:15:ea:53:e7:21:20:62:30:a7:64:50:04:c0:e7:a8:77:
         b9:93:87:39:7f:27:9c:2a:d3:be:a4:fa:c5:6f:dd:e2:94:43:
         24:6c:db:1f:6e:94:9e:29:a1:87:ac:48:6f:c4:7e:7f:49:a0:
         68:55:e0:97:e2:9e:1f:52:d3:d3:b3:f4:83:64:1c:a8:7b:1a:
         22:e2:5d:ab:20:96:44:00:ea:2d:44:ea:0a:de:50:ef:78:94:
         92:18:03:64:74:b3:8e:16:43:af:3d:8e:64:e1:c1:06:78:fc:
         9e:1a:7c:cb:73:37:83:5c:63:01:70:1a:58:70:1a:1f:73:40:
         ab:77:9d:47:4a:1d:b8:5e:d6:07:6c:77:28:16:d1:ae:ae:23:
         30:77:7a:ab:38:86:57:21:5e:d1:2a:4c:8c:bb:4a:27:66:72:
         b2:b2:86:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:22 2025 by rpki-client