Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
File:                     74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft (raw, json)
Hash identifier:          fl9UkYw83DI451/z6Cd0BsvdKRAmwmFPBG1GRvRv3qQ=
Subject key identifier:   AC:68:27:40:31:F6:07:FC:57:63:33:25:FF:F7:14:F1:35:93:B6:A7
Authority key identifier: EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4
Certificate issuer:       /CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
Certificate serial:       019893DAE4660AEFCCEE2DEB8F29E3644B5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
Manifest number:          07C1
Signing time:             Sun 10 Aug 2025 12:00:52 +0000
Manifest this update:     Sun 10 Aug 2025 12:00:52 +0000
Manifest next update:     Mon 11 Aug 2025 12:00:52 +0000
Files and hashes:         1: 74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl (hash: UvC1mFhaPfGTNB1TPTduWM3tQXnSBZjVc0IbMoQqs0A=)
                          2: ScldZDNPQSfRnsRt5khqoPE91NU.roa (hash: KUeiCd9GvmA+LCWqv73j10Yntn6kGl4O83uDHMjp9xg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:da:e4:66:0a:ef:cc:ee:2d:eb:8f:29:e3:64:4b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
        Validity
            Not Before: Aug 10 12:00:52 2025 GMT
            Not After : Aug 11 12:00:52 2025 GMT
        Subject: CN=ac68274031f607fc57633325fff714f13593b6a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:50:af:99:49:c9:9c:2e:b4:45:c6:c3:68:
                    d0:f3:52:eb:16:4b:68:c3:6e:00:50:ed:ee:65:5f:
                    5b:d9:7e:2a:f2:58:11:d2:fd:ff:1d:1e:8f:60:e1:
                    1d:a7:01:1e:71:0d:77:48:0b:ba:d0:8f:d9:17:46:
                    31:a1:4e:0a:11:9e:f5:6c:09:be:a8:fb:87:8a:e3:
                    b5:86:79:07:33:89:d3:91:7e:0e:81:fa:4a:ca:c4:
                    ee:ac:1e:30:0a:53:f7:a2:3a:f2:4a:0e:aa:2e:f7:
                    9f:e4:5c:a1:32:9c:c6:bf:45:ba:b3:b6:ae:72:cb:
                    2b:7d:fc:f2:1b:2c:11:6f:60:19:b1:b1:66:21:7d:
                    24:ff:ac:64:67:6b:b8:a1:ca:8a:cc:91:02:8b:fd:
                    1d:33:fb:05:b9:1b:66:cc:18:a8:2e:e7:a0:2f:83:
                    2a:b7:65:25:5f:bc:54:b4:3b:bc:e6:8f:55:06:fd:
                    a9:d4:ea:de:30:44:aa:7e:43:f5:f4:8e:f3:48:18:
                    c7:b4:71:1f:2f:f8:be:3c:91:66:4a:e7:3b:a6:f3:
                    00:9b:41:58:c4:a0:96:e5:64:a9:9a:5e:2f:ea:3a:
                    c1:8c:c4:d1:0c:45:ec:21:64:21:c7:66:4c:a7:7d:
                    b5:d3:07:e1:31:80:4d:f1:5b:6a:20:b2:a8:40:f0:
                    5b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:68:27:40:31:F6:07:FC:57:63:33:25:FF:F7:14:F1:35:93:B6:A7
            X509v3 Authority Key Identifier:
                keyid:EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:db:fc:9d:2f:fe:ae:6e:85:fa:be:4f:d9:9a:42:a5:d0:f6:
         9e:a9:3c:cf:47:e2:ff:a0:46:4c:54:8d:64:e3:67:3e:f7:29:
         4c:28:fb:5e:90:de:04:d8:5f:b6:36:48:17:8b:61:8d:b6:b6:
         9a:bb:43:5d:37:b3:9b:9a:fd:6c:87:88:9a:7a:ed:04:91:a9:
         10:90:a9:27:b0:c7:71:95:a1:ce:d2:f0:69:7a:9d:e2:92:64:
         15:6f:97:3e:c1:58:be:00:35:c8:b9:f1:55:e6:cd:5d:dd:58:
         25:c0:d7:44:12:cc:eb:42:4c:b6:4c:a9:7b:60:c3:07:81:ef:
         5f:fa:dd:8c:b1:38:89:f4:36:82:43:76:63:85:3e:8f:3f:7c:
         4b:94:86:9c:ce:25:ea:8d:fc:19:cf:3c:e4:38:21:fa:4d:70:
         fd:48:da:f8:bd:a4:f2:9e:97:f4:26:07:04:5c:18:bc:59:f7:
         5f:13:48:39:aa:ee:16:9d:6a:3f:58:74:10:73:e5:4d:a3:8c:
         0d:32:3b:ee:94:6d:ae:11:04:5e:9e:a0:67:0a:0d:93:10:ce:
         7c:22:eb:c3:c9:ad:94:b9:76:29:e7:45:b1:83:fc:10:d9:1f:
         a6:66:f8:ab:86:81:61:43:20:47:19:1f:f0:59:ce:e3:a9:a2:
         d8:b9:4d:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiT2uRmCu/M7i3rjynjZEtcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmODAzYTQ5MGZkNjIwMzUxOGJiZTY0NGJjNzIwOWFmYjc3
ZWM3YjQwHhcNMjUwODEwMTIwMDUyWhcNMjUwODExMTIwMDUyWjAzMTEwLwYDVQQD
EyhhYzY4Mjc0MDMxZjYwN2ZjNTc2MzMzMjVmZmY3MTRmMTM1OTNiNmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2JQr5lJyZwutEXGw2jQ81LrFkto
w24AUO3uZV9b2X4q8lgR0v3/HR6PYOEdpwEecQ13SAu60I/ZF0YxoU4KEZ71bAm+
qPuHiuO1hnkHM4nTkX4OgfpKysTurB4wClP3ojrySg6qLvef5FyhMpzGv0W6s7au
cssrffzyGywRb2AZsbFmIX0k/6xkZ2u4ocqKzJECi/0dM/sFuRtmzBioLuegL4Mq
t2UlX7xUtDu85o9VBv2p1OreMESqfkP19I7zSBjHtHEfL/i+PJFmSuc7pvMAm0FY
xKCW5WSpml4v6jrBjMTRDEXsIWQhx2ZMp3210wfhMYBN8VtqILKoQPBb4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxoJ0Ax9gf8V2MzJf/3FPE1k7anMB8GA1UdIwQY
MBaAFO+AOkkP1iA1GLvmRLxyCa+3fse0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzRBNlNRX1dJRFVZdS1aRXZISUpyN2QteDdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84YzQ4YWMtZDk2YS00NDFhLWIxODYt
ODc4N2QwYmYxMjA3LzEvNzRBNlNRX1dJRFVZdS1aRXZISUpyN2QteDdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC84YzQ4YWMtZDk2YS00NDFhLWIxODYtODc4N2QwYmYxMjA3
LzEvNzRBNlNRX1dJRFVZdS1aRXZISUpyN2QteDdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNv8nS/+
rm6F+r5P2ZpCpdD2nqk8z0fi/6BGTFSNZONnPvcpTCj7XpDeBNhftjZIF4thjba2
mrtDXTezm5r9bIeImnrtBJGpEJCpJ7DHcZWhztLwaXqd4pJkFW+XPsFYvgA1yLnx
VebNXd1YJcDXRBLM60JMtkype2DDB4HvX/rdjLE4ifQ2gkN2Y4U+jz98S5SGnM4l
6o38Gc885Dgh+k1w/Uja+L2k8p6X9CYHBFwYvFn3XxNIOaruFp1qP1h0EHPlTaOM
DTI77pRtrhEEXp6gZwoNkxDOfCLrw8mtlLl2KedFsYP8ENkfpmb4q4aBYUMgRxkf
8FnO46mi2LlNPg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:51:36 2025 by rpki-client