Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
File:                     Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft (raw, json)
Hash identifier:          +a9jQrVzqzvaIKBYYK6II1iTZxG7RBY6hiFySfRsGzo=
Subject key identifier:   0D:1E:62:E5:16:CC:04:F2:D7:4A:CD:A6:1E:7A:1E:1F:DD:CB:E6:81
Authority key identifier: 45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5
Certificate issuer:       /CN=45bbb0c37704bfd558849c6549af9734e7d14be5
Certificate serial:       0197827C00E2A006D587BACE7FE7E296EDCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
Manifest number:          04CE
Signing time:             Wed 18 Jun 2025 10:00:54 +0000
Manifest this update:     Wed 18 Jun 2025 10:00:54 +0000
Manifest next update:     Thu 19 Jun 2025 10:00:54 +0000
Files and hashes:         1: HrWHZLwLz9SHQNWDWAqLUzhWNgM.roa (hash: +TAR64SkVojwAPPcj29LtZXZh5haH9rqB2EiQmQF6cY=)
                          2: Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl (hash: MITxYQ3vlgWRDaTkk2EBYhEkxydxKfgC5gu63J+MPoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:82:7c:00:e2:a0:06:d5:87:ba:ce:7f:e7:e2:96:ed:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bbb0c37704bfd558849c6549af9734e7d14be5
        Validity
            Not Before: Jun 18 10:00:54 2025 GMT
            Not After : Jun 19 10:00:54 2025 GMT
        Subject: CN=0d1e62e516cc04f2d74acda61e7a1e1fddcbe681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e5:91:64:da:67:df:49:3a:e9:8a:89:61:a2:
                    d1:79:d7:92:5d:86:d7:7d:3e:a7:63:5c:4c:9d:68:
                    cc:72:5c:2e:3d:6e:10:71:f0:3e:83:6e:b4:e0:0f:
                    92:67:d5:49:40:7a:b0:aa:9a:16:21:ac:0a:72:94:
                    9b:ec:c2:5e:af:e9:74:2c:24:24:43:2e:8d:48:68:
                    f8:4b:00:fe:99:10:62:5e:61:51:37:1c:57:92:8e:
                    e8:50:5a:d4:74:a0:14:18:2e:d6:85:18:4d:a5:c5:
                    53:50:9c:22:2f:73:85:5e:bf:27:24:48:6d:c3:55:
                    31:1a:5e:87:ac:d7:2e:3f:43:f7:3a:45:6e:54:4a:
                    38:39:0b:5f:55:d4:35:7b:72:bc:4f:ad:48:40:e2:
                    79:b5:82:0d:83:7a:29:3c:11:20:19:bd:ee:bc:fa:
                    f5:81:af:f6:1c:52:1b:02:c2:d9:de:2c:34:6c:2a:
                    04:7f:19:e2:ed:9c:44:89:79:f0:a6:b5:7d:fe:fa:
                    fe:14:bc:75:85:14:fd:b0:92:68:71:23:81:64:78:
                    d6:5d:12:eb:4c:ac:70:68:97:21:50:83:b3:0b:40:
                    83:00:28:4d:f0:05:e8:9e:eb:7f:a1:bf:61:29:d5:
                    1e:84:b0:6e:54:12:ce:9e:2a:f4:0c:25:71:bd:a9:
                    8c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1E:62:E5:16:CC:04:F2:D7:4A:CD:A6:1E:7A:1E:1F:DD:CB:E6:81
            X509v3 Authority Key Identifier:
                keyid:45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b1:93:48:4f:3c:13:ef:92:80:1f:10:57:18:94:39:18:af:
         2b:42:ab:5d:4a:88:e3:e2:ce:e8:b4:0d:42:97:4e:2d:51:2e:
         58:1d:b3:ed:06:94:aa:fd:cf:77:10:aa:f5:e9:0b:59:e5:d2:
         73:e4:27:bb:e9:6d:ec:2b:ca:f8:c1:e3:ac:18:4e:6e:09:78:
         c1:ad:2e:66:87:a3:b4:7e:90:f1:8d:81:42:c0:2f:59:29:e2:
         d5:40:25:b4:3b:51:87:a9:06:e5:1c:f2:14:d8:e9:35:54:c1:
         5c:4f:41:dd:b8:83:1e:2c:28:02:c4:5c:e3:d7:2b:1e:59:4b:
         3f:be:47:50:25:7e:23:af:bd:e1:41:fc:ed:2c:38:d1:51:13:
         81:23:66:4e:4e:5c:4d:7a:b6:83:58:68:e2:f0:df:b7:27:5e:
         5e:ab:7b:57:cc:d9:a9:24:a1:71:60:46:55:df:2b:24:e5:61:
         dd:b1:a0:73:57:e4:d9:c1:fb:44:71:ec:a5:ba:c9:3d:82:0b:
         df:5f:30:9b:80:94:ca:4d:c7:a6:5b:2a:a7:24:30:90:80:81:
         95:dd:37:da:44:88:75:14:03:6c:41:2f:17:4f:d6:dc:1a:a5:
         43:44:f1:5b:89:00:bc:cf:7f:96:20:e6:8d:fe:4e:56:b8:8f:
         1a:22:70:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 16:10:22 2025 by rpki-client