Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
File:                     RbUATsPPXBp1UYXW9AaDxkbMlOw.mft (raw, json)
Hash identifier:          GxluF1hEjVEh/xAM4JNYjxHlqYvTxl6Bbqg4ZtCYJAc=
Subject key identifier:   1D:8D:32:99:A3:A4:29:60:44:AD:D6:2A:50:42:B2:E7:5E:03:16:83
Authority key identifier: 45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
Certificate issuer:       /CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Certificate serial:       019897B7F3F1571676E69D75F40BEF976736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
Manifest number:          0A66
Signing time:             Mon 11 Aug 2025 06:01:11 +0000
Manifest this update:     Mon 11 Aug 2025 06:01:11 +0000
Manifest next update:     Tue 12 Aug 2025 06:01:11 +0000
Files and hashes:         1: RbUATsPPXBp1UYXW9AaDxkbMlOw.crl (hash: PulPP0FmxmC6DVDghXwoRBwCM+mfMEWCjufw8uDw47A=)
                          2: cg41KOlM1vNAwrdMnvNHppcwT4c.roa (hash: QsQ4ZMCLxuolAifAsH1HBIsIugUjZ4tjy04rNn/2wxI=)
                          3: iuqsr8mDy4hdl6U1K1v1iSpNchQ.roa (hash: 1qvvVB0UpfZrwtI6t2Uw+kulc+5R7APEpoKz6kq0OuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:b7:f3:f1:57:16:76:e6:9d:75:f4:0b:ef:97:67:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
        Validity
            Not Before: Aug 11 06:01:11 2025 GMT
            Not After : Aug 12 06:01:11 2025 GMT
        Subject: CN=1d8d3299a3a4296044add62a5042b2e75e031683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a1:39:7b:8f:2d:d3:52:85:42:42:9c:5a:0b:
                    1e:91:78:b0:7f:8e:1b:ac:4a:70:14:32:5c:46:af:
                    55:22:c2:23:82:33:b9:6e:f3:0e:01:fc:f3:97:03:
                    20:4c:10:33:4a:6d:a6:85:d4:d0:e5:b4:3a:01:84:
                    c5:41:2a:cb:36:8f:bc:8e:ab:8b:ed:e9:33:00:1c:
                    78:99:5b:bf:4b:f0:69:23:78:2b:24:a8:b3:c8:c7:
                    b4:ec:f6:38:10:20:d8:74:e5:4e:53:ab:c2:d5:cb:
                    7f:41:ec:92:f0:de:8b:4b:be:65:90:45:9d:f2:07:
                    8e:f9:dc:68:fe:84:6b:04:90:9e:a6:a8:05:e9:a6:
                    b2:72:19:39:b2:72:27:11:4a:db:22:5f:59:a7:a7:
                    58:93:f5:0b:b4:1b:06:6a:a6:5e:f7:e2:6c:c4:e9:
                    c7:ea:60:2f:18:15:7c:fd:bd:9d:6d:5b:d0:69:34:
                    b0:80:74:17:c8:87:a3:41:ed:81:5b:8d:6c:5c:14:
                    ce:91:2b:85:53:18:b7:a7:f7:74:eb:1d:91:78:1b:
                    0a:62:31:f8:be:29:5d:1f:bb:e7:75:ef:af:fa:48:
                    64:1e:29:47:45:92:50:95:a6:20:47:ed:87:39:3f:
                    43:7a:be:a6:64:cc:1f:27:b1:55:87:f1:cf:d0:6d:
                    ec:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8D:32:99:A3:A4:29:60:44:AD:D6:2A:50:42:B2:E7:5E:03:16:83
            X509v3 Authority Key Identifier:
                keyid:45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:49:6d:3b:e8:21:a4:d9:7d:85:71:b0:7e:ab:d9:fe:59:08:
         da:4a:fe:d3:0d:f0:1f:0d:4d:00:4c:c6:a8:d2:af:a2:5e:e2:
         64:18:b4:44:ac:e2:cf:98:e5:f6:35:9b:e7:81:86:1a:df:93:
         67:8f:88:19:1a:46:4b:8c:4b:e2:00:9d:64:d1:60:46:59:6f:
         d8:de:1b:92:b0:38:cd:78:a3:d8:b9:30:0d:a9:81:43:3c:b1:
         a7:28:03:3c:e5:8e:40:8c:37:3a:18:82:5a:ad:2a:fc:aa:2f:
         80:d2:f0:47:82:b4:fb:1c:eb:10:b6:65:f2:c3:34:69:6e:e1:
         59:b7:d4:37:d6:8b:26:0f:da:b9:d4:b1:09:ed:58:e3:d2:42:
         b3:ee:e7:f6:e6:f9:9e:a9:7d:c4:47:b5:67:48:94:d6:09:4e:
         b5:fe:a5:46:35:5f:2c:e8:09:58:25:fa:6b:21:ee:9b:8c:51:
         be:f5:28:4b:64:d3:82:2f:e0:5a:3d:ba:c7:f5:84:6b:a4:f1:
         53:d0:7e:38:04:88:04:25:e4:03:e4:7a:e1:3b:05:ea:de:7c:
         1c:a1:04:fe:b0:8c:bb:42:1d:45:3a:e6:67:67:9b:72:a3:25:
         38:8f:23:e2:7b:bc:e9:a3:51:e9:97:47:04:09:d7:09:2b:78:
         64:16:9e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:51:20 2025 by rpki-client