Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
File:                     90REoIZ_zKmjVpwf0JITNUajf0s.mft (raw, json)
Hash identifier:          tAcVh31OC8JrmmmnevgrcGNbCjVgsKgMZbGxK0pEFFk=
Subject key identifier:   C5:10:56:77:F6:B9:56:61:75:EE:27:A9:7C:7F:B4:6C:B2:DA:F7:CF
Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
Certificate issuer:       /CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Certificate serial:       019874192206087B2C1A986F95CEE1F7ECF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
Manifest number:          15A7
Signing time:             Mon 04 Aug 2025 08:01:00 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:00 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:00 +0000
Files and hashes:         1: 90REoIZ_zKmjVpwf0JITNUajf0s.crl (hash: c1c1mCdstT/ynxCip3RudiJ16y4WqWyk/G2i2SFiRY8=)
                          2: b9lO4JuPU_XGDEIOyFIyTFoywlI.roa (hash: sqBT/bZlTljLi10b8NxaSvoAN6hXGjYEttvRj2Pm9N4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:22:06:08:7b:2c:1a:98:6f:95:ce:e1:f7:ec:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b
        Validity
            Not Before: Aug  4 08:01:00 2025 GMT
            Not After : Aug  5 08:01:00 2025 GMT
        Subject: CN=c5105677f6b9566175ee27a97c7fb46cb2daf7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0c:3b:40:eb:15:f3:f4:85:a6:7a:d1:7c:cb:
                    c3:bb:db:34:5e:6c:2b:17:3e:90:18:a8:3f:54:81:
                    35:77:e6:1b:d4:61:b9:b9:51:f6:f1:9e:71:4f:7a:
                    c6:4a:e1:ef:e0:55:c4:d3:52:99:84:d6:9c:04:3b:
                    48:16:4b:32:86:ac:85:55:ba:d2:ca:43:a6:b0:ec:
                    15:4b:4c:3c:b3:92:d1:55:1e:e3:f1:00:dc:d7:72:
                    8e:08:f4:08:d0:66:62:0b:b4:9e:57:da:20:ae:44:
                    d2:49:1a:d3:73:67:3e:95:9a:4c:94:e5:2d:1b:43:
                    75:b9:aa:42:4a:53:64:af:6e:a9:f3:40:37:3c:f6:
                    2e:ab:d2:1d:25:83:9c:51:bd:18:7a:3e:78:74:37:
                    01:20:01:44:ad:44:db:7d:50:97:a7:86:70:ad:48:
                    20:d2:0f:6d:60:60:dd:05:8b:80:db:d7:b9:48:c1:
                    3a:14:3f:93:88:72:f0:52:7e:94:d6:85:4b:6e:a6:
                    fc:6b:64:04:ee:22:ac:0c:04:6e:be:4e:f7:f6:a9:
                    0e:ee:32:da:83:63:2c:c1:7e:6d:b4:b0:62:c6:b4:
                    b8:e4:58:48:19:41:67:40:14:21:69:67:96:aa:e7:
                    e3:d4:76:3a:09:bb:c7:05:2d:02:e1:99:a1:ae:fc:
                    ef:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:10:56:77:F6:B9:56:61:75:EE:27:A9:7C:7F:B4:6C:B2:DA:F7:CF
            X509v3 Authority Key Identifier:
                keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:dc:29:5a:6e:7b:db:fd:00:a4:c9:67:e1:94:5d:82:bd:71:
         2c:8a:b7:83:32:f4:0f:89:fe:45:3e:c5:35:75:f9:94:77:71:
         85:36:d8:10:aa:1f:2b:44:e6:b8:fa:9d:87:d5:ba:70:e1:62:
         b9:98:ca:ed:fc:c7:b6:80:95:2c:1f:f0:9c:da:65:0f:96:72:
         18:99:1a:94:4f:b5:5e:6a:c9:76:b4:82:61:8a:ea:0d:5d:15:
         2b:fe:83:a6:f2:db:5e:72:fa:85:53:2a:f7:63:ad:24:3f:b9:
         8a:e5:de:04:4b:4d:b3:a0:4c:bf:8b:5f:6a:95:b6:47:fc:13:
         19:90:bc:60:6e:36:65:d5:8a:39:8b:61:cb:42:0f:a3:7b:87:
         ab:e4:34:f0:0f:c7:5a:d0:f9:5d:ff:dc:c9:05:39:b6:cc:af:
         1a:f8:49:09:53:a6:5e:1a:34:79:9a:e8:8b:06:0b:a4:0b:ac:
         47:17:ad:61:8d:ed:98:64:50:5e:db:35:1f:3c:bb:18:7f:1e:
         93:d7:0c:a9:81:a1:ab:6a:8c:56:7e:ce:02:3b:4e:70:cc:08:
         6b:9b:cd:7a:14:0b:c5:37:93:c8:f2:0a:cf:89:11:b4:0d:23:
         4c:17:44:63:76:33:cd:bd:75:a8:61:97:72:fe:f8:75:7c:39:
         7d:05:85:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:13 2025 by rpki-client