Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
File:                     c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft (raw, json)
Hash identifier:          i9XL976NOJ/oG3j0U0c4qhc24r+TOQgpyjbd8V9fGDU=
Subject key identifier:   64:7C:57:D2:11:35:90:91:C5:C3:A8:72:B3:70:0C:27:5F:F1:31:E3
Authority key identifier: 73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E
Certificate issuer:       /CN=738fd9467821d05286f4b33be86176651b6aff3e
Certificate serial:       0199FB7CC68776C7B839CA399BE9276D603B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
Manifest number:          1673
Signing time:             Sun 19 Oct 2025 08:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:22 +0000
Files and hashes:         1: c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl (hash: xY8p5UTK2F1DKb3j7E1WrEAj3HKbEWRVb0JfzQ6hGfg=)
                          2: clN4rn78ALDRkU6Gc0tlA0L76yY.roa (hash: HSAiRzNpFiSSFt3gFQJ5gPuQzchbTNDXBSkeKqZgK9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:c6:87:76:c7:b8:39:ca:39:9b:e9:27:6d:60:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738fd9467821d05286f4b33be86176651b6aff3e
        Validity
            Not Before: Oct 19 08:01:22 2025 GMT
            Not After : Oct 20 08:01:22 2025 GMT
        Subject: CN=647c57d211359091c5c3a872b3700c275ff131e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3a:48:69:14:04:42:1f:1d:63:cd:7e:38:70:
                    78:f6:77:b5:c8:b6:f4:c8:12:da:f3:b5:9a:e3:b5:
                    fd:44:bd:cf:ad:40:3e:1b:65:35:cb:74:f8:d9:21:
                    17:80:a7:ca:5e:91:c9:b3:a3:f8:1b:1d:9f:fc:1a:
                    6d:16:97:2e:a0:b3:35:f9:87:ba:2c:84:46:94:1d:
                    fd:0d:1e:4d:2b:38:fd:87:9d:6c:f9:6e:83:ab:0d:
                    9a:57:35:26:f8:e1:93:3b:dd:ed:aa:98:8f:b5:ee:
                    55:9b:d0:48:6b:34:e6:a2:bf:dd:8f:21:27:ee:aa:
                    b8:68:a9:99:ca:15:7c:10:ab:2d:cf:f8:78:06:fb:
                    6d:d0:ec:b4:b2:96:e7:88:cf:db:18:7e:f8:b2:17:
                    ac:6d:63:84:de:82:e0:c9:76:63:bb:11:e4:f3:45:
                    c0:a0:68:00:60:55:04:f1:9e:b6:7a:3a:7c:b3:69:
                    2b:3f:2a:84:59:82:09:84:e2:56:65:9a:c5:65:81:
                    ee:8f:c8:e5:ed:58:20:d0:71:d8:c4:eb:40:a0:04:
                    90:18:98:2b:84:8e:33:37:c5:e6:97:fd:75:f3:bb:
                    a8:41:80:c5:9f:52:e0:6f:3d:c2:a3:e3:d6:df:64:
                    94:94:0d:80:4e:4c:8c:77:cd:fd:a9:79:00:cb:41:
                    11:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7C:57:D2:11:35:90:91:C5:C3:A8:72:B3:70:0C:27:5F:F1:31:E3
            X509v3 Authority Key Identifier:
                keyid:73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:21:cf:0f:86:11:5c:31:ae:d4:75:5a:40:3f:c9:16:7a:9d:
         9c:2c:22:5c:71:1a:56:bc:71:e8:9a:61:ab:06:39:72:eb:a4:
         bc:70:17:8d:b8:ba:85:71:23:17:39:f3:16:2c:a7:8a:20:8d:
         1c:c3:86:4f:b5:13:6c:57:91:21:e2:75:a8:74:df:28:1e:0c:
         2c:b8:8e:3b:b1:82:4b:0e:d2:7b:b9:e1:be:77:38:46:a6:e0:
         5f:ec:36:30:62:3b:11:53:f9:d5:de:6a:1c:30:e5:ce:e3:aa:
         ac:24:76:0c:24:ec:e9:20:2a:50:c7:c1:17:1f:a0:f3:d3:ab:
         70:f6:46:ba:bc:0d:e5:50:64:e0:16:f7:81:80:73:94:0f:cf:
         10:b2:5e:c6:c5:3a:c0:e4:b6:2b:43:4a:71:da:65:d9:5a:09:
         fa:a0:b2:15:58:92:68:ae:23:de:cf:f1:4e:bd:50:c4:ff:f2:
         6e:a6:9d:5b:fc:7a:77:76:7e:e9:a4:33:ae:1e:4b:53:7f:7c:
         21:7b:b1:2a:b6:35:c9:b1:ea:3a:17:70:fb:50:78:e9:1a:11:
         71:94:5e:73:38:34:5b:bd:4b:fc:0c:26:52:dd:55:92:a9:28:
         c6:f6:8c:32:a7:e4:9b:95:aa:28:94:c6:ab:79:cd:96:fb:42:
         4a:29:eb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:40 2025 by rpki-client