Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft
File:                     RowmemR0_LfMSc8yXQ6dzF_o0g0.mft (raw, json)
Hash identifier:          RRHnnjeV4RepyK9eaCn2NizDwxp41HTA6TxM0Lq2pjM=
Subject key identifier:   64:5C:27:3F:63:A2:E3:79:00:8E:A8:CC:FA:CC:5E:D2:04:9E:68:44
Authority key identifier: 46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D
Certificate issuer:       /CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
Certificate serial:       019A4EF3FC84E2A1BD1097BD7C0766206A93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft
Manifest number:          1134
Signing time:             Tue 04 Nov 2025 13:00:03 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:03 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:03 +0000
Files and hashes:         1: MZGQkRnrBwu3EiDQXovi1EtOEeQ.roa (hash: emZiRG679KNDGOj4cCA2StKFReSvhFA5nV/8wQXC5Cw=)
                          2: RowmemR0_LfMSc8yXQ6dzF_o0g0.crl (hash: whs5Rtvw+kHZtvtLdmpdjK1yvXnPkRtnI59AfNPZFx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f3:fc:84:e2:a1:bd:10:97:bd:7c:07:66:20:6a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
        Validity
            Not Before: Nov  4 13:00:03 2025 GMT
            Not After : Nov  5 13:00:03 2025 GMT
        Subject: CN=645c273f63a2e379008ea8ccfacc5ed2049e6844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:40:5b:19:63:97:b2:c3:ac:ef:09:56:0e:
                    20:70:e8:71:c1:83:82:10:47:76:a4:0e:5e:2b:1c:
                    8c:c2:39:97:68:91:d8:f2:1b:9a:12:24:8b:9b:1d:
                    7e:75:33:8c:a1:af:fa:28:2e:d3:ae:2c:9e:cf:f5:
                    9a:2d:e7:74:d3:96:3f:1d:14:0c:f8:f7:27:b6:84:
                    6a:c4:54:0a:9b:6d:67:a2:c7:68:69:22:3d:0b:6b:
                    df:93:66:3a:b2:43:07:61:71:db:52:ee:f8:1f:11:
                    9a:72:58:8d:c8:7b:7d:7c:f7:3f:41:b2:99:8f:9c:
                    42:85:a6:f1:01:1b:18:45:21:d5:51:8a:d3:c2:c3:
                    7f:2b:05:8e:4f:02:00:cd:e7:83:a6:2b:77:3c:9f:
                    94:11:d9:c6:a6:cc:8b:5f:34:9f:6a:ff:00:70:7a:
                    4a:cc:d8:38:3a:3f:f5:6b:58:1d:f2:e6:cb:1b:66:
                    2e:a5:6b:35:25:62:5e:4d:28:cd:90:a4:ba:c5:d6:
                    31:df:17:1d:9c:bb:dd:24:ce:a1:ae:a9:5e:71:16:
                    86:2e:26:a8:95:8f:9f:4b:d9:2a:cc:f2:0d:1b:d9:
                    fc:f2:b5:8b:b8:fb:88:93:7f:31:76:64:06:c9:2c:
                    51:ef:e2:07:32:22:fb:0a:7d:43:c1:af:14:bc:bf:
                    26:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5C:27:3F:63:A2:E3:79:00:8E:A8:CC:FA:CC:5E:D2:04:9E:68:44
            X509v3 Authority Key Identifier:
                keyid:46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:4c:2d:06:22:89:13:ed:6c:a2:a7:50:39:07:c4:73:95:ee:
         f8:e0:7f:bc:4a:0f:d1:4d:50:24:51:58:49:1a:7d:3f:ae:03:
         07:9e:18:28:46:38:c4:b2:bb:9d:42:b8:a8:da:63:66:01:56:
         f7:5b:b2:f7:53:4f:00:72:0e:13:7c:96:7b:de:a2:2a:73:68:
         a3:c5:4c:a2:2c:0d:df:bf:81:90:65:6e:5c:51:22:3f:4a:44:
         18:a1:4b:fc:5c:9d:ad:68:31:7c:e9:e5:90:16:c2:cd:a8:be:
         29:17:f1:b2:15:dc:fa:b8:fc:d1:22:ba:86:d5:3b:fa:c0:67:
         54:45:b1:a3:a8:84:e6:c3:71:91:59:d6:a1:c8:7e:ba:06:a2:
         7b:1f:c9:eb:92:11:ab:8a:f2:40:b1:39:b2:77:69:bb:09:4f:
         e3:9b:f6:cd:31:51:63:9f:1b:b2:68:be:5b:05:1a:b4:58:43:
         9a:08:78:21:5f:27:26:67:b6:74:ce:3f:30:05:7a:4e:e2:ec:
         e2:43:13:77:93:fa:b5:c7:cb:4e:da:e9:d5:f3:00:8b:8b:32:
         1b:8f:59:c9:79:4b:cc:2d:7f:2a:88:31:40:80:fc:c8:da:53:
         c2:ab:b6:9c:c7:cb:e3:8b:66:96:b8:54:fd:70:b2:f9:1b:db:
         05:28:92:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:27 2025 by rpki-client