Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
File:                     RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft (raw, json)
Hash identifier:          uS0GUvIBfG46BB6xp3wlk8vD15wHPXUyiO4c99kFQrY=
Subject key identifier:   64:D0:EC:74:6C:3A:12:00:C2:35:79:FF:EC:14:EB:7F:7D:00:3E:C0
Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
Certificate issuer:       /CN=4419e02f046e1bfb5927fe731ff725e469599171
Certificate serial:       019681A2B1D042AABF22DFC69A9B01ADDB71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
Manifest number:          100D
Signing time:             Tue 29 Apr 2025 13:00:45 +0000
Manifest this update:     Tue 29 Apr 2025 13:00:45 +0000
Manifest next update:     Wed 30 Apr 2025 13:00:45 +0000
Files and hashes:         1: RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl (hash: gVqIoqabxiZlcuQ4zyFzOuWMs8F/HEGJlWoU3JFyHeo=)
                          2: j6btVEkYHnL9gWowTqe50VXUUIk.roa (hash: eFOZX5z3pNhRrEXFNmogu9OUe+ItbR9kd5gawg90+UY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 13:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:81:a2:b1:d0:42:aa:bf:22:df:c6:9a:9b:01:ad:db:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171
        Validity
            Not Before: Apr 29 13:00:45 2025 GMT
            Not After : Apr 30 13:00:45 2025 GMT
        Subject: CN=64d0ec746c3a1200c23579ffec14eb7f7d003ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:d7:d8:7d:2a:65:40:90:f9:0b:70:ea:54:
                    bf:24:7c:50:e1:e8:e7:43:cd:92:0d:51:e0:e2:17:
                    c5:21:f7:ad:a8:4c:89:a2:98:57:a8:ad:d7:dc:83:
                    5d:ac:85:66:d2:5b:60:24:00:17:25:00:b0:84:46:
                    43:53:ae:e4:d9:de:ee:bb:01:be:54:61:b3:da:fd:
                    6f:7f:be:7b:19:ec:8f:34:e0:e4:0c:44:82:e1:28:
                    59:0c:be:4c:fe:40:09:21:5f:78:d4:29:04:df:bf:
                    31:6e:31:62:1f:27:3d:40:27:12:d5:97:d7:37:be:
                    f7:f7:be:1f:f2:f2:6e:ad:5c:48:cb:08:8b:c6:98:
                    ee:5f:d1:18:7d:ba:1c:5d:4b:e0:02:67:14:f5:49:
                    a8:1e:0d:27:71:8e:ed:03:6a:ef:7c:c0:5f:fa:39:
                    a7:31:81:b4:7e:71:7a:4c:6f:81:17:73:c3:bb:3f:
                    82:bf:51:bc:b3:e7:ef:02:e4:93:30:55:04:1a:4b:
                    9a:db:11:44:56:c0:4a:83:9d:43:b1:56:8e:94:d1:
                    8a:d4:3b:27:cc:79:b4:69:c7:9a:5d:cb:ad:fc:ff:
                    39:be:23:38:e1:cf:94:96:b0:36:d5:28:d0:df:60:
                    f5:8e:74:23:94:fe:29:f3:c4:ec:8f:f4:3a:6d:f8:
                    66:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D0:EC:74:6C:3A:12:00:C2:35:79:FF:EC:14:EB:7F:7D:00:3E:C0
            X509v3 Authority Key Identifier:
                keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:88:2a:c5:92:da:91:a7:48:62:76:45:84:e1:18:01:eb:77:
         6d:76:95:5f:99:dd:f1:4c:9e:16:d9:6e:0c:5c:0c:00:38:49:
         6e:b5:f3:60:15:7b:47:50:25:af:96:87:d6:6f:0f:c1:96:7a:
         1d:72:2e:74:40:2b:b8:bf:63:10:b9:c7:16:7a:19:40:e3:f9:
         5a:ea:d6:51:a5:92:9b:43:2c:2a:b0:4f:e7:da:10:77:83:6a:
         0b:0a:0c:f3:57:91:f9:a1:46:b2:e9:98:df:6e:9e:e0:dd:d7:
         d3:88:e8:fc:f4:b5:29:43:09:7d:0a:6c:66:0e:ed:a7:85:7b:
         8b:07:8a:37:29:7a:51:88:5e:68:ec:1a:30:37:95:1d:d9:92:
         a1:c2:9e:53:9f:4d:15:72:04:39:4f:9d:f2:b2:46:83:9e:99:
         0a:be:c0:04:02:45:16:b4:af:ce:97:5a:be:56:42:9e:87:0c:
         66:4d:d5:83:9b:59:af:84:9d:01:c9:96:51:fa:0d:6c:a7:01:
         94:f5:26:1a:6b:88:2b:ee:f7:e5:a8:53:08:29:92:c9:14:75:
         0e:d3:ca:20:d1:ae:f3:7b:b9:f6:2e:06:b8:99:27:a3:4f:32:
         17:b4:0f:a9:84:02:50:25:c0:b7:fd:bf:fd:7c:64:7e:99:9b:
         49:c8:18:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:30:49 2025 by rpki-client