Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
File:                     45VXJQVD5Edq-IxGEtSolTExO1c.mft (raw, json)
Hash identifier:          jmRa1FBYDSAvUC1W8V49bVSjuVmldecIrJuuzyhNxLo=
Subject key identifier:   09:1D:16:65:64:B5:B6:26:0D:3A:08:E7:53:74:65:55:C5:D7:F6:03
Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
Certificate issuer:       /CN=e39557250543e4476af88c4612d4a89531313b57
Certificate serial:       019A541A8CCB7B6CFF5753B1832CC7780925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
Manifest number:          02B2
Signing time:             Wed 05 Nov 2025 13:00:17 +0000
Manifest this update:     Wed 05 Nov 2025 13:00:17 +0000
Manifest next update:     Thu 06 Nov 2025 13:00:17 +0000
Files and hashes:         1: 45VXJQVD5Edq-IxGEtSolTExO1c.crl (hash: SGyibvrjH4iZwOGUmSGFwydM65OxB4mqL5FwL8XeN6w=)
                          2: K_JZgBsGAVe42CM82ldUkYg0iAQ.roa (hash: bwVI85s3fTqLxVepdOjVCwyC9itDatE9AOSLnrN/zKU=)
                          3: O2ig3X7VNdoIgqEvSRSWulSevo4.roa (hash: b2vyXh49fwCqIp7fN7Ci84lv9+cxy1rLXbG95tTjerQ=)
                          4: df6ORV0T3_b0RdsmM3_USMPqdsg.roa (hash: q2PmH++N3IE0kcfGnwBqmXQjUmmTRWDH+eBviEbSMVk=)
                          5: zgHXXKhV6x08Iidi9kP_MDBdZ8U.roa (hash: taGLV+d4sUR0Mcx4A09Hc66ht4Rh+KLaRG3MKoCgLM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:54:1a:8c:cb:7b:6c:ff:57:53:b1:83:2c:c7:78:09:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39557250543e4476af88c4612d4a89531313b57
        Validity
            Not Before: Nov  5 13:00:17 2025 GMT
            Not After : Nov  6 13:00:17 2025 GMT
        Subject: CN=091d166564b5b6260d3a08e753746555c5d7f603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:aa:ed:f0:0f:5c:a9:3b:b1:30:ea:73:c8:bc:
                    82:83:51:b2:8f:ad:1a:04:bd:de:da:b8:6f:f6:05:
                    c3:ac:0e:a1:92:71:cb:5b:8b:d9:d5:81:1f:79:7d:
                    3b:a3:ce:8b:87:b7:01:74:0a:10:5e:de:01:5e:c5:
                    fe:a1:8e:54:94:d6:37:86:34:a4:de:4e:8e:0b:32:
                    2f:20:74:ad:97:03:3a:8c:0a:c0:e3:58:bf:76:53:
                    29:ad:7c:7c:f7:a2:b8:44:1d:6c:4e:6d:5d:03:5c:
                    12:0d:68:a2:7c:a0:6e:36:b1:18:f4:d7:3f:f9:44:
                    ef:25:3b:ba:c5:05:e4:c5:5d:66:75:84:2e:a8:cc:
                    f2:1e:54:06:ca:d4:40:5e:b4:15:f0:8b:43:ec:30:
                    4c:81:a8:88:54:9b:3b:73:5d:52:1a:5b:a2:2d:fa:
                    f7:af:5b:a2:c8:b3:80:45:18:06:23:d2:4f:85:08:
                    f5:d7:9a:78:18:c4:7d:38:8b:f4:33:26:c7:60:2a:
                    ef:21:99:a8:7d:77:24:f3:b7:2c:51:86:f2:ed:4d:
                    f6:8d:56:2f:72:85:5d:58:3d:55:90:6c:b1:07:4a:
                    4e:c0:d4:a6:15:5c:c3:d8:ce:d1:0f:5f:25:4d:c8:
                    e2:b6:dd:17:19:84:2b:1f:09:4f:bc:44:1f:6e:72:
                    05:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1D:16:65:64:B5:B6:26:0D:3A:08:E7:53:74:65:55:C5:D7:F6:03
            X509v3 Authority Key Identifier:
                keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:10:5e:43:da:e5:e0:e0:a1:29:4a:cf:ca:ce:39:92:a5:18:
         67:14:b6:c6:15:15:c7:d3:a2:d8:76:c2:55:40:ae:a4:2e:52:
         34:24:5c:5a:fa:99:d4:18:e0:19:51:33:53:2c:2a:ec:09:1a:
         d7:e5:51:33:28:cd:0c:b1:b6:34:35:6b:54:63:44:c6:b2:ab:
         05:93:01:4e:d9:fb:85:e6:68:aa:bf:f1:d0:ac:78:12:df:ef:
         c6:9d:18:3d:f6:50:ce:7e:19:86:f3:30:1a:3c:5c:db:e0:26:
         61:c1:67:af:c6:8b:f6:33:f0:50:dc:c4:c4:6c:57:1a:ae:f8:
         9c:20:f4:90:3b:1f:fe:6c:22:4d:ae:65:07:5a:5b:dd:50:b5:
         41:41:88:e6:cc:fc:bc:bd:53:50:95:46:33:7e:9f:22:17:2d:
         76:b2:21:5e:80:cc:55:e9:b6:72:36:30:a5:26:33:ff:d8:e4:
         06:be:fe:5a:0a:08:0d:36:27:12:f0:37:a6:2a:bd:f5:8d:d8:
         17:13:1c:b0:eb:e1:cc:08:12:34:5b:89:64:15:eb:e8:52:ef:
         8c:e6:a4:63:eb:76:28:c4:35:3d:d1:8f:e0:f3:a3:16:d5:91:
         ef:8c:0e:e0:06:6c:62:71:19:a9:19:00:f8:5f:7e:4e:28:fc:
         a9:4e:77:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:57:58 2025 by rpki-client