Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
File:                     45VXJQVD5Edq-IxGEtSolTExO1c.mft (raw, json)
Hash identifier:          pviTH/FIFvUD8m5/LKVVcueeKovbbSYHUkUHszRkpog=
Subject key identifier:   AB:FB:E0:0E:AB:65:17:27:D8:9A:2C:79:54:B2:BF:6A:5B:E1:61:23
Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
Certificate issuer:       /CN=e39557250543e4476af88c4612d4a89531313b57
Certificate serial:       019A522C2DABF32396329258AF60A4A0FD15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
Manifest number:          02B1
Signing time:             Wed 05 Nov 2025 04:00:18 +0000
Manifest this update:     Wed 05 Nov 2025 04:00:18 +0000
Manifest next update:     Thu 06 Nov 2025 04:00:18 +0000
Files and hashes:         1: 45VXJQVD5Edq-IxGEtSolTExO1c.crl (hash: swHx1NCtw0168BPGb50r+lQ1D7RhZ2mCgXkHJKGebjQ=)
                          2: K_JZgBsGAVe42CM82ldUkYg0iAQ.roa (hash: bwVI85s3fTqLxVepdOjVCwyC9itDatE9AOSLnrN/zKU=)
                          3: O2ig3X7VNdoIgqEvSRSWulSevo4.roa (hash: b2vyXh49fwCqIp7fN7Ci84lv9+cxy1rLXbG95tTjerQ=)
                          4: df6ORV0T3_b0RdsmM3_USMPqdsg.roa (hash: q2PmH++N3IE0kcfGnwBqmXQjUmmTRWDH+eBviEbSMVk=)
                          5: zgHXXKhV6x08Iidi9kP_MDBdZ8U.roa (hash: taGLV+d4sUR0Mcx4A09Hc66ht4Rh+KLaRG3MKoCgLM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:2c:2d:ab:f3:23:96:32:92:58:af:60:a4:a0:fd:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39557250543e4476af88c4612d4a89531313b57
        Validity
            Not Before: Nov  5 04:00:18 2025 GMT
            Not After : Nov  6 04:00:18 2025 GMT
        Subject: CN=abfbe00eab651727d89a2c7954b2bf6a5be16123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b9:b8:69:9d:a2:6e:c9:5d:17:c7:5b:b9:91:
                    fc:46:fd:0c:c1:de:f6:db:85:ee:db:f4:32:f9:ac:
                    b8:1a:11:87:c3:cc:ad:78:56:91:c4:d1:0a:82:58:
                    b4:ba:5c:93:8f:98:2a:34:d3:6f:34:82:7e:07:6c:
                    1c:62:d5:2c:9a:3a:0f:92:9d:0a:33:93:a1:69:bb:
                    d3:cf:60:6d:32:b9:2c:dd:a1:f4:b3:2b:28:91:79:
                    21:e1:6b:20:36:e2:0f:06:7a:fa:44:88:75:25:09:
                    2c:e0:57:f0:22:95:46:87:54:0f:8d:16:f9:79:18:
                    50:bd:81:86:50:7a:89:54:92:16:41:83:fa:ac:ac:
                    c0:b9:58:b8:e3:36:6e:7a:ac:e5:d8:37:24:93:e9:
                    53:ab:66:5f:19:a6:93:f8:f9:7e:7d:41:a4:eb:21:
                    63:d6:ab:d0:7f:29:1e:0a:40:95:da:26:d0:05:d0:
                    fa:5d:3f:0d:48:af:c8:2e:54:99:44:0d:00:f4:fa:
                    d8:60:78:2a:50:f1:0b:dd:b2:a9:e6:8a:f5:63:6b:
                    44:f2:ed:96:b1:83:76:16:f2:1b:4a:0f:a1:11:bd:
                    74:39:e0:41:b9:a1:8f:44:b1:d0:65:d3:6d:df:a8:
                    1f:9c:0c:53:1d:96:2e:a5:23:a3:64:d7:eb:32:7f:
                    fb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FB:E0:0E:AB:65:17:27:D8:9A:2C:79:54:B2:BF:6A:5B:E1:61:23
            X509v3 Authority Key Identifier:
                keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:25:83:0c:a5:1c:77:93:56:cd:c5:80:ea:a1:f5:fe:cd:0a:
         fc:4c:9b:54:3e:a3:e8:bd:66:13:eb:26:5f:1d:88:a6:3b:04:
         e3:78:8e:7f:ff:3f:58:5a:84:7b:33:80:84:bf:42:0c:11:9e:
         03:80:14:8f:a1:62:9b:b0:1a:06:c4:14:30:1e:40:3b:6f:cf:
         a5:66:b1:42:41:ae:e0:83:38:77:8e:53:9d:b2:31:8b:51:90:
         48:d0:ef:a6:81:85:33:96:75:53:64:b6:8a:03:1f:4c:7d:95:
         38:f6:fd:30:c5:45:4a:b0:e0:91:aa:95:31:5d:38:c6:88:50:
         1c:6b:31:59:76:80:9d:3b:34:19:58:93:83:96:33:41:0b:ca:
         ff:48:83:0a:5d:04:d7:70:7d:c9:b8:2a:03:0d:17:6b:09:a0:
         1b:e0:48:4f:b3:94:b1:37:41:29:62:74:86:cc:e7:99:1e:9d:
         13:02:91:79:b9:36:2c:c6:48:23:ba:32:b9:34:04:d8:10:e0:
         83:a8:78:39:93:d4:70:73:e4:98:04:79:32:34:57:24:72:24:
         da:eb:e5:c3:6b:f0:2d:f7:1f:53:0f:cf:1d:e3:ed:2d:c0:f3:
         e1:7a:f8:df:0d:98:d7:6b:ef:05:dd:ea:54:31:11:65:b1:b4:
         d0:e4:ef:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:52:05 2025 by rpki-client