Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
File:                     74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft (raw, json)
Hash identifier:          agrKv8+ohWh/C/4wqMoBOf2qJtGbDgklbk+XkCldkPw=
Subject key identifier:   55:E2:CC:10:79:B2:76:7B:8E:AF:0E:23:76:BD:9F:AB:92:FE:DB:F1
Authority key identifier: 74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8
Certificate issuer:       /CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
Certificate serial:       573A8024881E0141CC8A59BE3D91A13C9A033D32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
Manifest number:          0190
Signing time:             Tue 12 Aug 2025 17:00:29 +0000
Manifest this update:     Tue 12 Aug 2025 16:55:29 +0000
Manifest next update:     Wed 13 Aug 2025 20:28:29 +0000
Files and hashes:         1: 74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl (hash: 20rR9IpP1QL3bMrkF4kk3WWb/iXVpBvRUYIw5w+FVHU=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 20:28:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:3a:80:24:88:1e:01:41:cc:8a:59:be:3d:91:a1:3c:9a:03:3d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74e91965a809d1ac5aa0f0d05506acb0ddb02ab8
        Validity
            Not Before: Aug 12 16:55:29 2025 GMT
            Not After : Aug 13 20:28:29 2025 GMT
        Subject: CN=55E2CC1079B2767B8EAF0E2376BD9FAB92FEDBF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a1:37:d3:8a:e3:ce:44:1b:4d:fe:88:42:17:
                    49:62:29:fa:04:41:d8:ee:58:c4:4c:ed:6b:17:db:
                    73:bd:18:e9:91:11:5e:7f:1a:4f:e6:e1:71:2b:a4:
                    14:5b:93:3f:41:6f:38:eb:cf:05:5a:3f:99:b0:13:
                    57:d7:73:49:bb:1b:d7:87:fd:0b:d5:6f:b0:9b:3a:
                    db:a5:25:b7:54:74:e5:f7:47:78:4d:63:6c:77:bb:
                    08:be:7a:34:59:ca:aa:94:ff:12:76:95:eb:15:b0:
                    12:1d:43:e6:3e:1c:0a:ea:b7:42:a9:dd:5c:4b:48:
                    bf:08:f9:ed:03:0f:91:be:17:71:de:f4:37:a7:e1:
                    19:d6:29:ba:7c:a8:f7:80:cf:24:de:50:e0:d9:25:
                    97:0c:8e:30:cd:00:f6:0c:3c:ba:de:ff:a1:00:83:
                    00:7c:e0:37:6e:57:af:ed:a0:f6:ad:3c:c9:92:6a:
                    52:30:b3:aa:b3:88:30:aa:0b:8a:96:a6:c4:b6:2e:
                    a6:90:bc:23:8b:01:57:d0:cd:cb:0b:6c:40:33:be:
                    a0:bb:4f:91:9f:00:fc:16:16:e7:12:49:ea:91:f0:
                    bf:54:1c:e1:30:bd:5f:8b:f0:9b:62:a3:b0:b9:c4:
                    c2:0e:c3:34:bb:04:16:dd:a8:23:e8:c8:30:5f:32:
                    45:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E2:CC:10:79:B2:76:7B:8E:AF:0E:23:76:BD:9F:AB:92:FE:DB:F1
            X509v3 Authority Key Identifier:
                keyid:74:E9:19:65:A8:09:D1:AC:5A:A0:F0:D0:55:06:AC:B0:DD:B0:2A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOkZZagJ0axaoPDQVQassN2wKrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/0/74E91965A809D1AC5AA0F0D05506ACB0DDB02AB8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:7d:c6:d0:c5:d5:cf:c2:75:cc:b9:f6:c5:bd:e0:89:25:75:
         79:34:84:20:37:56:80:f8:de:49:2c:61:f4:83:c6:3f:52:39:
         fb:92:2c:6f:7a:40:d3:27:ce:ee:00:43:81:0e:b6:3a:fb:bc:
         be:55:5c:b2:2e:2a:ac:8c:7b:ac:a9:63:58:0a:2d:34:73:10:
         91:a4:8c:96:e8:ac:ea:f1:26:dd:e8:83:a2:ee:c9:9f:f1:53:
         d3:21:ad:84:00:dc:f0:97:7c:a5:8e:42:20:39:2c:87:31:fc:
         c6:4c:32:d0:c1:e8:b0:81:d6:a4:31:0c:df:3a:9b:ca:4c:23:
         7c:8e:be:6b:5f:3f:1d:57:5f:a5:aa:cb:71:0a:9d:73:7d:8c:
         52:63:55:94:56:75:8e:6c:5e:0e:e1:d6:49:57:25:e9:69:5c:
         b7:91:9a:73:fe:f6:f7:9a:92:56:b5:94:98:62:54:48:dd:63:
         90:91:46:a5:d9:8a:52:bb:74:60:96:d4:d5:bb:cd:09:ea:07:
         81:59:c1:53:95:14:cc:bd:0f:75:6b:0c:36:61:39:03:d8:6c:
         93:01:12:04:9d:b8:4a:80:2a:6d:fb:e0:6a:9c:4a:0a:d9:80:
         67:51:1d:d8:7e:94:7e:c1:9a:fc:24:88:47:09:a8:01:01:7d:
         5e:fb:2b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:19:53 2025 by rpki-client