Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
File:                     74wzqKYgHUCmAiC9Y5tdNSISZz4.mft (raw, json)
Hash identifier:          sFKjzztrymfvCJ6MvVSyybSa93nF4QNDBRJYliS8fJc=
Subject key identifier:   18:F1:C8:C7:72:DF:12:F2:C3:9F:F5:38:AC:43:2B:96:C4:A0:5C:7A
Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
Certificate issuer:       /CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Certificate serial:       0199FB0F0AA03696B452A544684086C1F905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
Manifest number:          14F4
Signing time:             Sun 19 Oct 2025 06:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:30 +0000
Files and hashes:         1: 74wzqKYgHUCmAiC9Y5tdNSISZz4.crl (hash: 9CnSKdvnyN6kyvI//B0AydEboCH50Mgf3sVuhy/WtIc=)
                          2: XZUkkjfK1svUa6feBEevTKvtEcA.roa (hash: wyVf5zW45oYKuYL+LlUqTk3eWYEVvuJxk1VRagHAyy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:0a:a0:36:96:b4:52:a5:44:68:40:86:c1:f9:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e
        Validity
            Not Before: Oct 19 06:01:30 2025 GMT
            Not After : Oct 20 06:01:30 2025 GMT
        Subject: CN=18f1c8c772df12f2c39ff538ac432b96c4a05c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f7:24:65:72:32:6e:8d:96:50:9f:76:15:4c:
                    ce:62:b1:a8:c3:f0:c5:b9:47:b2:e2:a3:13:42:29:
                    3d:0a:80:76:25:15:00:a4:3d:60:77:26:4a:1e:63:
                    e9:25:92:b1:39:ee:24:8a:5a:d6:8a:a0:30:ab:59:
                    cd:80:39:07:20:69:5f:57:c0:39:4d:77:3c:1c:7e:
                    dc:fc:e6:25:69:d8:af:c5:3b:8f:5f:7f:51:2f:43:
                    ec:5e:d3:89:90:9b:1b:a3:93:6e:93:6f:3d:26:9a:
                    cd:72:82:6d:8c:a2:bf:27:b0:f5:81:28:41:ab:37:
                    d1:13:99:3c:8e:80:b6:d1:a8:2a:31:79:6c:f2:2c:
                    f1:58:54:d7:10:a8:f2:68:f9:2f:ef:63:f3:ee:35:
                    85:32:a1:3c:d9:62:b5:a5:90:88:f7:ad:07:9e:4d:
                    43:65:93:37:e7:f6:c6:36:84:86:6e:4c:4c:c4:bb:
                    a3:d4:1d:e8:2b:ed:a5:e5:ca:44:2e:8a:4a:d6:99:
                    a6:e1:33:f8:01:22:9b:69:78:8e:7d:bb:70:47:7e:
                    0b:18:90:9e:cd:84:ef:44:f1:d0:78:26:be:79:56:
                    5d:76:32:ec:38:ae:d9:ec:2b:6f:44:d5:e3:0c:28:
                    48:98:1f:73:a6:d0:49:32:db:82:2d:c2:5a:0a:1c:
                    7a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F1:C8:C7:72:DF:12:F2:C3:9F:F5:38:AC:43:2B:96:C4:A0:5C:7A
            X509v3 Authority Key Identifier:
                keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a9:15:dd:55:b1:26:4a:20:72:55:6d:81:fb:38:52:24:3b:
         ad:d1:92:24:7a:43:a1:7e:aa:81:05:33:68:92:7a:67:46:48:
         2d:00:dd:4b:df:84:24:80:65:d7:45:66:80:2b:c4:db:b9:1f:
         1d:e6:40:d6:f3:75:72:42:07:42:1a:31:22:e6:7f:95:a9:8c:
         f0:39:75:08:85:43:31:b8:24:94:7c:62:72:47:07:62:f6:e8:
         e9:1a:a0:2e:be:d1:5e:38:47:eb:1d:19:34:ff:8d:35:d0:23:
         ae:23:91:a7:5f:f7:6e:8d:53:f9:c1:42:10:03:3c:c9:1d:a3:
         85:5f:eb:eb:b1:7c:01:ce:f3:bd:36:f7:23:ce:72:fb:13:c6:
         f2:5e:4e:b6:ed:ad:75:8e:3b:e6:bf:c1:29:3f:02:65:4b:f9:
         ac:e3:d8:da:03:b8:56:ec:e0:f7:e8:be:85:56:7f:ad:bd:21:
         86:11:62:b3:82:fa:95:09:ac:8c:72:72:a9:c2:1a:05:cf:ac:
         5f:6f:2b:d0:2f:6a:ee:cb:71:0a:3c:ff:ac:a3:6f:db:18:f5:
         ff:04:a9:d8:b4:69:1d:e7:85:5b:bb:76:db:10:01:2d:2e:91:
         81:92:c3:37:5a:d6:24:59:01:b6:ee:1e:aa:7c:88:0d:71:97:
         3c:54:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:54 2025 by rpki-client