Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
File:                     74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft (raw, json)
Hash identifier:          yqSHP29WaNwLu+DTIFJAlKJFMfw4bP86805rXhCqBGk=
Subject key identifier:   54:63:E0:0A:69:A6:8D:88:8C:10:B3:5C:37:98:31:12:F8:90:BC:B1
Authority key identifier: EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC
Certificate issuer:       /CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
Certificate serial:       0198D69807BE632F107FC97206208D88161C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 11:02:24 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:24 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:24 +0000
Files and hashes:         1: 74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl (hash: Csb0avVk6hZ2o4bvki2DX20AbUcxEra9X+EaWjsqx/M=)
                          2: lMqQBQxUd3_rITgUX_Xd15bHhcs.roa (hash: xYWVB8Ylsxp8fpKTzhWqmzpng/adcMSNJZDIutd8YK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:07:be:63:2f:10:7f:c9:72:06:20:8d:88:16:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
        Validity
            Not Before: Aug 23 11:02:24 2025 GMT
            Not After : Aug 24 11:02:24 2025 GMT
        Subject: CN=5463e00a69a68d888c10b35c37983112f890bcb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:91:7d:6c:e9:81:29:25:d3:ed:93:f3:28:10:
                    6e:00:8d:69:fc:c6:28:d1:03:62:db:07:42:b9:0b:
                    86:d8:e7:2f:08:7c:1d:c5:97:3e:2f:b9:fc:b6:5b:
                    2a:48:97:aa:2f:ba:ed:40:ee:18:97:fe:6a:90:68:
                    84:c9:da:c4:0e:6a:b5:96:70:14:13:b2:42:f6:af:
                    52:e1:3d:3e:c9:06:17:4d:17:09:8e:b0:0c:27:5b:
                    0a:71:c8:a2:ca:a5:04:b1:9c:18:83:76:b9:16:64:
                    61:52:e6:ab:64:02:71:a4:71:d3:02:66:54:d1:01:
                    7f:63:98:d4:86:63:86:61:cb:cb:ff:4a:f9:f0:a1:
                    46:ed:45:9e:81:6f:ed:05:60:83:56:de:44:0c:7a:
                    0a:08:3b:97:aa:2e:a7:92:55:2a:31:43:0a:10:81:
                    a5:ff:d7:05:e6:f1:40:27:62:35:80:4c:77:4c:32:
                    82:2b:37:45:a1:a2:54:9e:63:43:ec:bc:90:a4:48:
                    df:d7:50:ac:ec:51:77:81:d8:43:99:ff:fb:35:6a:
                    27:65:58:3a:cf:87:32:ee:38:49:03:7d:97:a4:eb:
                    b6:e2:1d:ef:42:19:3a:5d:b1:88:ed:ec:90:3b:38:
                    ae:a4:62:87:74:58:5a:38:17:aa:74:1f:d7:dc:46:
                    50:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:63:E0:0A:69:A6:8D:88:8C:10:B3:5C:37:98:31:12:F8:90:BC:B1
            X509v3 Authority Key Identifier:
                keyid:EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a9:7b:1c:21:5a:ca:4c:df:a7:b4:a0:1e:e7:f3:3e:b7:90:
         b6:09:19:66:f4:a7:66:99:65:49:4a:5c:18:18:dd:6e:9c:5e:
         c7:ad:72:25:95:f7:93:b3:74:71:cb:2f:c4:10:c1:23:18:4c:
         c4:c3:d2:30:5e:f5:e9:5f:2f:62:b8:5b:e5:37:ef:05:fa:c6:
         b3:6f:61:99:69:07:bd:79:4c:0b:ef:d3:03:c0:a0:62:2d:31:
         31:3b:48:8a:53:f9:42:6a:85:c8:62:3e:04:72:89:71:69:5f:
         fe:7d:9a:a5:7d:7f:19:06:e7:bc:19:1f:e1:0b:58:14:a3:41:
         55:fd:b8:61:0d:4e:2c:ae:32:5c:41:b6:f6:bf:ac:0e:5b:55:
         1b:48:f3:7b:1e:33:fb:91:17:e6:77:4e:77:47:48:54:85:b7:
         94:f2:83:53:16:f0:51:d0:36:4a:18:d5:58:fd:bc:bb:9e:cc:
         3b:77:2b:9a:9b:88:e9:58:b5:1c:e7:81:4f:6a:34:24:8e:49:
         8b:71:f4:31:bb:68:90:f8:66:4a:18:87:e1:9c:72:ce:94:18:
         a7:d5:8f:3c:11:0d:9f:95:1f:5d:b6:eb:ad:b9:82:d9:97:3a:
         07:9e:3c:97:7a:9d:31:b5:0a:7c:23:6f:5b:c6:0a:32:df:fb:
         f2:d1:94:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmAe+Yy8Qf8lyBiCNiBYcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmODY2OWU3MGNlYTk0OTczYWZkMzRmYjA4ZWI1OWU5ZDg2
YjU3ZmMwHhcNMjUwODIzMTEwMjI0WhcNMjUwODI0MTEwMjI0WjAzMTEwLwYDVQQD
Eyg1NDYzZTAwYTY5YTY4ZDg4OGMxMGIzNWMzNzk4MzExMmY4OTBiY2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJF9bOmBKSXT7ZPzKBBuAI1p/MYo
0QNi2wdCuQuG2OcvCHwdxZc+L7n8tlsqSJeqL7rtQO4Yl/5qkGiEydrEDmq1lnAU
E7JC9q9S4T0+yQYXTRcJjrAMJ1sKcciiyqUEsZwYg3a5FmRhUuarZAJxpHHTAmZU
0QF/Y5jUhmOGYcvL/0r58KFG7UWegW/tBWCDVt5EDHoKCDuXqi6nklUqMUMKEIGl
/9cF5vFAJ2I1gEx3TDKCKzdFoaJUnmND7LyQpEjf11Cs7FF3gdhDmf/7NWonZVg6
z4cy7jhJA32XpOu24h3vQhk6XbGI7eyQOziupGKHdFhaOBeqdB/X3EZQtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRj4Apppo2IjBCzXDeYMRL4kLyxMB8GA1UdIwQY
MBaAFO+GaecM6pSXOv00+wjrWenYa1f8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzRacDV3enFsSmM2X1RUN0NPdFo2ZGhyVl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zOTdjMWUtNTFhNy00MTZmLWE0NWMt
MmEwMjEzMTc5YzA3LzEvNzRacDV3enFsSmM2X1RUN0NPdFo2ZGhyVl93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zOTdjMWUtNTFhNy00MTZmLWE0NWMtMmEwMjEzMTc5YzA3
LzEvNzRacDV3enFsSmM2X1RUN0NPdFo2ZGhyVl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKl7HCFa
ykzfp7SgHufzPreQtgkZZvSnZpllSUpcGBjdbpxex61yJZX3k7N0ccsvxBDBIxhM
xMPSMF716V8vYrhb5TfvBfrGs29hmWkHvXlMC+/TA8CgYi0xMTtIilP5QmqFyGI+
BHKJcWlf/n2apX1/GQbnvBkf4QtYFKNBVf24YQ1OLK4yXEG29r+sDltVG0jzex4z
+5EX5ndOd0dIVIW3lPKDUxbwUdA2ShjVWP28u57MO3crmpuI6Vi1HOeBT2o0JI5J
i3H0MbtokPhmShiH4ZxyzpQYp9WPPBENn5UfXbbrrbmC2Zc6B548l3qdMbUKfCNv
W8YKMt/78tGUqg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:42 2025 by rpki-client