Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
File:                     Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft (raw, json)
Hash identifier:          LyViELOCDbRSK+9aTs+JSP0JmE67OOPqsxjlGWhhCos=
Subject key identifier:   08:0C:94:DA:05:4C:05:76:F6:EA:78:E4:D1:AD:03:EE:05:E4:C5:B0
Authority key identifier: 45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5
Certificate issuer:       /CN=45bbb0c37704bfd558849c6549af9734e7d14be5
Certificate serial:       01989C70E19F1F31EC64E5C416BC1745A22D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
Manifest number:          0560
Signing time:             Tue 12 Aug 2025 04:01:40 +0000
Manifest this update:     Tue 12 Aug 2025 04:01:40 +0000
Manifest next update:     Wed 13 Aug 2025 04:01:40 +0000
Files and hashes:         1: HrWHZLwLz9SHQNWDWAqLUzhWNgM.roa (hash: +TAR64SkVojwAPPcj29LtZXZh5haH9rqB2EiQmQF6cY=)
                          2: Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl (hash: FyFaQVpoUePKDTxOL5ZuTdkdJeNpwrwySAFKO3AabZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 04:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9c:70:e1:9f:1f:31:ec:64:e5:c4:16:bc:17:45:a2:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bbb0c37704bfd558849c6549af9734e7d14be5
        Validity
            Not Before: Aug 12 04:01:40 2025 GMT
            Not After : Aug 13 04:01:40 2025 GMT
        Subject: CN=080c94da054c0576f6ea78e4d1ad03ee05e4c5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:75:25:2a:d7:6b:6c:e6:fe:fd:7e:94:dc:ea:
                    89:61:cb:f0:2a:32:c4:02:8e:0e:f5:8e:5a:e6:38:
                    ff:60:72:99:b7:32:31:8f:c6:d2:b8:cb:21:10:41:
                    55:ba:84:63:e1:e0:38:e8:a0:57:50:48:3e:7f:06:
                    77:61:19:15:f1:c5:44:48:df:f3:41:40:8a:65:c2:
                    62:db:df:05:b6:2b:aa:9c:0a:73:39:b5:d1:75:ec:
                    2f:81:ea:fb:9f:08:1e:f8:37:da:b2:c4:b3:a6:df:
                    ea:12:83:94:c8:5d:7d:5e:27:f3:33:9c:6d:e1:d5:
                    22:49:e7:d2:42:1a:1f:f1:e7:64:b0:5f:df:22:1a:
                    14:89:97:82:2c:e9:23:da:98:4f:f7:2f:a7:1f:4b:
                    06:69:c5:a2:99:74:c8:bf:12:c4:e7:2a:1e:4a:f3:
                    8f:75:8a:d1:fb:f1:5b:d8:48:3d:d7:5c:f0:20:56:
                    21:d0:2b:ac:b3:f8:4a:69:8a:4d:db:0f:29:d7:58:
                    3a:79:7c:17:f4:8c:79:9a:42:85:89:4f:a9:3c:4e:
                    53:73:dd:b7:41:ee:cb:22:0e:e7:c5:17:95:d5:1e:
                    30:0f:68:9e:38:e5:6b:f9:52:a3:30:54:4c:be:6e:
                    8b:ac:04:e8:fb:62:d1:ed:c9:8e:e6:cd:48:30:20:
                    72:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0C:94:DA:05:4C:05:76:F6:EA:78:E4:D1:AD:03:EE:05:E4:C5:B0
            X509v3 Authority Key Identifier:
                keyid:45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:6c:7d:65:da:f9:48:16:2f:69:24:e8:31:b2:70:12:47:81:
         42:55:ee:95:d9:bd:7c:27:06:d3:8b:de:0f:8f:6d:bc:cc:36:
         fc:af:0d:38:24:af:94:df:82:36:a5:98:2b:54:f4:ca:84:48:
         7e:7d:08:a3:33:f8:50:5a:53:22:fd:f0:f8:29:eb:33:07:f0:
         4a:2c:b3:3a:b0:32:1e:f6:f6:de:7d:fa:f7:66:77:16:37:6c:
         e4:87:03:aa:ed:a2:7b:68:dc:25:5f:b2:ea:be:ef:12:6b:1c:
         45:d7:89:e9:4a:36:0d:79:a2:94:66:97:fe:bb:93:7a:ec:98:
         d3:11:68:66:ef:69:41:ce:26:b4:75:dc:cf:9b:c2:5c:03:37:
         9f:72:64:a8:d8:12:ad:fd:ca:cb:10:d2:a1:c1:d6:02:55:e0:
         bf:42:56:6f:e1:b9:51:00:a7:19:d5:b7:dd:4d:1e:54:78:a3:
         b0:97:82:74:d8:ec:96:d3:d2:ce:cb:a8:3b:78:cf:1c:17:e5:
         4f:20:e3:80:54:ef:c4:ad:fe:c4:34:8b:3e:96:63:c0:a3:5c:
         02:7d:a8:b1:7a:00:55:60:f7:ab:17:40:d2:80:3b:3d:63:36:
         04:6a:79:1d:ff:fc:36:1e:ad:4a:70:7f:d1:40:d5:08:29:ba:
         5f:50:0d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:44:21 2025 by rpki-client