Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
File:                     e-RbuFunWF4oistxpFKwzI7g21Y.mft (raw, json)
Hash identifier:          YCGq5ZP2o0pnwUsEBdcOQn4QBXOvHD1zShmJAghb1xM=
Subject key identifier:   56:DF:71:89:F1:C9:AB:18:1B:AA:4F:7A:BD:99:45:F1:26:1D:D9:E9
Authority key identifier: 7B:E4:5B:B8:5B:A7:58:5E:28:8A:CB:71:A4:52:B0:CC:8E:E0:DB:56
Certificate issuer:       /CN=7be45bb85ba7585e288acb71a452b0cc8ee0db56
Certificate serial:       019A4EF492AD7AA5E438FE08472300C3AD41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
Manifest number:          06C4
Signing time:             Tue 04 Nov 2025 13:00:42 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:42 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:42 +0000
Files and hashes:         1: e-RbuFunWF4oistxpFKwzI7g21Y.crl (hash: BCanjVv/vSYrD3bTulY/B/OZk6ikyZiRGoOeV/wtPRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:92:ad:7a:a5:e4:38:fe:08:47:23:00:c3:ad:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7be45bb85ba7585e288acb71a452b0cc8ee0db56
        Validity
            Not Before: Nov  4 13:00:42 2025 GMT
            Not After : Nov  5 13:00:42 2025 GMT
        Subject: CN=56df7189f1c9ab181baa4f7abd9945f1261dd9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:44:57:88:5d:c2:c3:0f:69:29:a5:33:28:9b:
                    b5:26:8e:b8:ec:a2:a3:08:18:af:f0:ef:90:23:be:
                    4a:eb:31:98:b3:32:07:1f:a6:b0:aa:d9:69:ff:ab:
                    24:21:d6:d7:9f:e4:72:e1:65:c6:b7:f4:34:46:cf:
                    29:a0:6c:54:24:6b:cc:d0:a2:f0:ac:10:dc:18:ef:
                    2b:cd:6d:d5:74:9c:b1:69:1b:99:98:21:e1:48:17:
                    22:02:13:39:5e:0a:01:f4:6f:b1:49:ce:c1:16:53:
                    85:48:2e:c8:09:69:03:fa:4f:b7:3c:44:7f:1c:df:
                    07:4f:b2:f3:70:cb:a1:93:f7:b9:b3:7a:47:4e:f5:
                    72:06:c0:b1:af:d2:64:57:e7:ae:8e:cc:d6:0e:2d:
                    3b:53:80:ed:9c:ac:8e:3a:de:ea:25:a5:3b:d9:95:
                    a9:52:7e:20:52:61:ff:12:04:22:9e:f4:c0:b4:ea:
                    a1:f1:ab:a7:35:17:5f:c4:2a:5c:b7:b5:3d:ec:f8:
                    3f:12:1e:69:ba:2c:91:9b:23:53:bb:34:3f:9b:bf:
                    e7:53:de:9e:25:d1:b6:43:3b:7a:af:3c:1c:97:2e:
                    89:d9:64:21:1f:ca:ff:a0:35:a2:c3:32:f7:a1:89:
                    7d:7f:63:f5:bd:50:c1:11:97:51:f1:0a:6c:d4:34:
                    d5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DF:71:89:F1:C9:AB:18:1B:AA:4F:7A:BD:99:45:F1:26:1D:D9:E9
            X509v3 Authority Key Identifier:
                keyid:7B:E4:5B:B8:5B:A7:58:5E:28:8A:CB:71:A4:52:B0:CC:8E:E0:DB:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-RbuFunWF4oistxpFKwzI7g21Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/8c76c8-2a89-42a2-b0f7-410a1bde121f/1/e-RbuFunWF4oistxpFKwzI7g21Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e9:89:9f:fe:d9:58:7d:06:02:fd:e9:98:9c:33:d8:86:47:
         dd:38:24:67:49:66:89:87:fe:28:15:87:c2:15:ca:ea:98:40:
         58:10:ad:07:c7:07:66:75:bc:c9:f3:25:7a:32:2d:25:d0:d1:
         ab:be:21:dc:d8:d9:03:34:b8:97:c6:91:67:ae:67:1b:56:f2:
         8f:be:2d:00:e0:94:50:02:47:69:b4:33:e6:3a:63:20:15:93:
         c3:cc:d3:09:2c:ed:ae:9b:ee:ef:1e:99:00:d2:48:f2:32:0f:
         d7:30:9b:e4:ec:6a:35:b3:c3:19:55:31:23:3a:e6:52:c1:97:
         51:cb:90:a2:4e:76:a9:92:46:d5:c2:a7:6a:3c:a3:ef:6d:d0:
         73:6d:99:53:8d:99:e1:b2:5d:04:77:01:6e:41:3a:ac:dc:c2:
         ef:37:1f:89:31:cc:38:33:7c:6c:0d:87:e5:62:d2:cf:3b:77:
         8c:59:5c:6f:a3:e5:5e:5e:fa:4a:f9:47:68:54:ae:1b:cd:eb:
         9a:05:65:ea:6d:26:64:94:1f:af:c9:f9:57:e2:bb:b1:e7:d4:
         c0:16:7b:e9:f3:ed:10:48:b3:28:a3:88:4c:1d:f2:74:92:bf:
         76:62:0c:14:40:f8:56:4a:bf:c5:e4:13:93:1e:59:48:b0:65:
         9f:64:99:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:52 2025 by rpki-client