Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
File:                     Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft (raw, json)
Hash identifier:          L+7zrNG2kxOwf6BqOvRrL2uUrEhjImehZpfDoWuO9KY=
Subject key identifier:   4B:35:3A:D5:36:49:20:38:49:8A:3E:E9:E6:12:98:43:AB:17:F4:53
Authority key identifier: 45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5
Certificate issuer:       /CN=45bbb0c37704bfd558849c6549af9734e7d14be5
Certificate serial:       019A54C0BC733F82AD096812F8ABF9426187
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
Manifest number:          0644
Signing time:             Wed 05 Nov 2025 16:01:48 +0000
Manifest this update:     Wed 05 Nov 2025 16:01:48 +0000
Manifest next update:     Thu 06 Nov 2025 16:01:48 +0000
Files and hashes:         1: HrWHZLwLz9SHQNWDWAqLUzhWNgM.roa (hash: +TAR64SkVojwAPPcj29LtZXZh5haH9rqB2EiQmQF6cY=)
                          2: Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl (hash: OjO3pTz1sDSf6n3ea0b0ryw/MH3yjiOxCCl4c2MXCyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:c0:bc:73:3f:82:ad:09:68:12:f8:ab:f9:42:61:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bbb0c37704bfd558849c6549af9734e7d14be5
        Validity
            Not Before: Nov  5 16:01:48 2025 GMT
            Not After : Nov  6 16:01:48 2025 GMT
        Subject: CN=4b353ad536492038498a3ee9e6129843ab17f453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:cc:99:51:90:33:c1:2a:05:6b:f4:41:21:44:
                    6b:86:b7:31:cf:42:91:a4:c4:cc:66:87:a4:22:94:
                    e1:ef:a8:f1:55:4c:b0:ed:2a:5e:74:3a:5b:a9:27:
                    f6:8e:47:8d:79:41:56:e9:b4:f7:59:0d:33:dd:d6:
                    b1:52:e3:6e:b7:57:ae:cd:75:87:fa:4b:97:1c:37:
                    61:78:fc:ea:13:18:1b:ac:df:c4:ca:57:e1:1e:fd:
                    c2:f7:1e:2a:9a:84:38:58:a4:30:af:07:79:16:17:
                    eb:01:4c:f0:ac:b0:a8:ca:f9:51:7b:14:82:8c:5a:
                    0b:65:bb:60:b4:15:b0:d7:22:23:46:8e:29:fe:cc:
                    55:b2:45:ec:d0:b9:51:09:53:ec:9f:18:4d:14:a3:
                    8c:d1:5e:53:32:95:fe:7e:63:fb:78:e2:09:b1:9b:
                    37:b5:4c:76:9f:76:e6:4b:c8:80:b2:8a:54:47:13:
                    87:7e:82:1a:e3:9d:4d:27:e1:87:60:7c:14:41:bd:
                    cb:9a:f8:ee:ac:64:16:2e:b4:d4:4e:cf:5c:b4:0a:
                    78:e3:3f:0b:68:d1:fe:0d:2b:9e:6b:29:b4:00:b9:
                    4a:25:05:fc:ad:d0:f9:72:67:83:a8:a6:06:14:33:
                    cd:fd:6b:af:50:bc:1e:74:48:a3:de:11:03:1b:af:
                    28:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:35:3A:D5:36:49:20:38:49:8A:3E:E9:E6:12:98:43:AB:17:F4:53
            X509v3 Authority Key Identifier:
                keyid:45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:4a:9d:3b:43:61:5f:72:50:d1:43:27:41:1a:2c:4a:70:f7:
         80:da:7e:1c:87:fe:5d:ed:d3:dc:91:3e:ec:ff:0d:ad:43:94:
         ca:68:41:e4:bb:4e:57:b6:ab:cb:e7:40:fb:a6:18:00:33:43:
         d1:fc:38:f2:60:37:4b:6b:58:3f:53:a4:38:e7:1e:d3:b4:4d:
         c0:8b:18:36:4b:0a:c0:c7:99:d6:c7:3d:18:5e:76:0e:ec:28:
         d7:75:05:aa:f6:b4:92:8b:de:7a:ee:70:56:82:8f:f1:eb:4f:
         29:a9:3a:87:9e:2f:ae:41:11:95:f7:b8:b1:d5:70:75:3b:41:
         cb:ac:97:1b:ba:6c:c1:7c:d0:6c:a9:06:a9:53:76:a0:43:ab:
         4a:59:fc:69:36:8c:45:d9:78:31:6d:e2:f0:c9:84:8a:ca:bc:
         b2:b1:f1:12:ef:f2:1a:85:2f:75:6b:98:6f:9d:22:c8:49:14:
         90:90:77:ea:5a:02:d3:db:9d:f5:ef:63:5c:74:bc:5d:fd:64:
         de:c9:44:98:75:3d:c8:40:81:a0:e2:c3:01:e4:89:d2:8a:70:
         95:db:01:83:b0:d9:da:45:ee:e1:8c:92:60:77:41:29:ef:4c:
         35:70:a9:e0:fe:70:df:9b:12:41:3e:6d:ff:05:b8:bd:4a:2c:
         42:d5:81:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:52:35 2025 by rpki-client