Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft
File:                     RU_RwEv37B2rvS0h_aAIXiUexzU.mft (raw, json)
Hash identifier:          TQadRlmpn3P5HV28GTABlM+fWOxeOVlE3OHgBi6vmno=
Subject key identifier:   82:DB:9E:0D:6B:01:87:76:BB:59:85:E3:70:BD:E0:18:40:C7:72:FF
Authority key identifier: 45:4F:D1:C0:4B:F7:EC:1D:AB:BD:2D:21:FD:A0:08:5E:25:1E:C7:35
Certificate issuer:       /CN=454fd1c04bf7ec1dabbd2d21fda0085e251ec735
Certificate serial:       019A4EF51B9621B6DF4EDCF9C05559EA96D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft
Manifest number:          1250
Signing time:             Tue 04 Nov 2025 13:01:17 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:17 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:17 +0000
Files and hashes:         1: RU_RwEv37B2rvS0h_aAIXiUexzU.crl (hash: O5WaOhwZ1s1I45rbJ2noqg7AZ4heLQK2Yoc8axk94vU=)
                          2: qq_DqXj1jgW5t9Bpmv9tIAtLdgk.roa (hash: I+eBl9deFnjZtM9WsLliiLTIBeeiBcTTkkp86ghHw6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:1b:96:21:b6:df:4e:dc:f9:c0:55:59:ea:96:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=454fd1c04bf7ec1dabbd2d21fda0085e251ec735
        Validity
            Not Before: Nov  4 13:01:17 2025 GMT
            Not After : Nov  5 13:01:17 2025 GMT
        Subject: CN=82db9e0d6b018776bb5985e370bde01840c772ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d2:62:2d:26:ff:c0:00:d9:68:92:5d:80:7b:
                    48:8b:91:e8:2b:f0:f3:ee:36:bd:d6:db:d6:c0:a5:
                    db:c2:02:5e:71:3e:be:32:78:81:8f:cf:00:50:aa:
                    c2:6f:6f:71:a3:d3:79:57:93:d6:57:ff:fe:8b:19:
                    00:46:0a:c3:61:a8:e5:44:dc:78:b4:c7:bc:9c:96:
                    af:c3:8a:5d:d6:8c:cf:cd:b5:77:7a:39:e2:3a:bb:
                    90:bd:9e:d0:2c:e9:22:c4:96:0d:0e:bb:0b:31:c6:
                    3f:db:be:7b:51:a4:69:46:3b:fc:52:6b:65:74:1e:
                    27:b9:db:71:2a:78:77:6e:17:29:d2:fc:00:69:be:
                    22:49:f3:22:9f:71:1a:72:f4:9d:47:42:c2:b8:91:
                    54:d6:01:11:62:91:0a:27:b7:d9:aa:11:b3:4d:82:
                    fc:ee:34:76:28:a2:d5:ad:d1:3c:84:0c:03:da:e4:
                    50:d6:df:80:39:ce:37:8c:6b:3c:7c:37:b1:e2:7c:
                    58:c0:3e:2e:9e:6b:61:3c:e3:a5:d5:9a:ca:be:20:
                    27:4a:da:3d:f1:3f:14:d8:77:7c:9a:2b:93:e8:9f:
                    e3:86:ad:d7:df:d4:4f:ba:de:8a:52:08:48:53:1d:
                    9c:bd:33:c3:a6:b1:f9:be:60:df:0e:25:11:e6:0f:
                    72:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DB:9E:0D:6B:01:87:76:BB:59:85:E3:70:BD:E0:18:40:C7:72:FF
            X509v3 Authority Key Identifier:
                keyid:45:4F:D1:C0:4B:F7:EC:1D:AB:BD:2D:21:FD:A0:08:5E:25:1E:C7:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:10:06:7a:5c:a3:d6:d6:21:f7:0b:70:2d:84:67:69:1e:3a:
         4e:30:92:36:2f:22:47:86:8d:88:04:b9:9e:76:04:c6:cc:9c:
         d9:9b:30:81:0e:f7:26:72:e2:3d:fc:be:5d:a6:e6:84:d5:6b:
         ab:ca:2e:a3:f6:ee:0b:1b:c8:09:f9:10:68:8e:1f:50:6a:50:
         e3:3d:d1:8e:0c:92:5b:77:08:3f:89:e9:e8:c8:4b:ea:75:41:
         68:5f:63:c3:34:4c:0d:8b:9f:dd:1d:29:b3:9c:42:54:17:a4:
         50:30:3e:1e:f5:1e:b1:6c:95:a2:ef:17:e8:2a:b8:08:c2:24:
         3a:30:a3:16:3a:dd:dd:c0:78:a3:ad:c1:b0:2d:3b:f7:62:25:
         db:3d:45:5e:41:b5:96:33:6d:94:57:3d:2b:f6:2a:d8:a7:2f:
         e2:70:31:1f:a2:30:2f:50:8c:c0:d3:5d:f2:16:33:43:f8:09:
         d0:da:42:41:f0:91:81:a8:ed:59:d7:26:ab:ac:51:34:c1:1f:
         9d:c9:7c:87:de:a2:9b:81:5d:25:a4:60:88:cd:96:9c:96:11:
         de:5b:ae:5b:84:92:9d:bf:96:95:07:ea:ab:41:89:e3:e0:c7:
         94:18:61:d8:30:8e:fe:9b:45:cd:f2:92:12:83:f1:95:ef:6a:
         52:91:67:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:51 2025 by rpki-client