Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
File:                     RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft (raw, json)
Hash identifier:          dBmV+vrydvSLrymuhagnb2kiWJ2+WURPxhfjBNbY+PY=
Subject key identifier:   2B:5C:80:1F:91:BA:07:59:1D:9E:77:4A:22:2E:40:B6:14:E6:27:EE
Authority key identifier: 45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA
Certificate issuer:       /CN=45d58323e7d4f91c37297cd1926566033b3f8aba
Certificate serial:       019A0222D0A179DCC315C8F22D984953BB63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
Manifest number:          05D3
Signing time:             Mon 20 Oct 2025 15:00:27 +0000
Manifest this update:     Mon 20 Oct 2025 15:00:27 +0000
Manifest next update:     Tue 21 Oct 2025 15:00:27 +0000
Files and hashes:         1: RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl (hash: 1VYLd8XN19Kzlk40v1u79UqryWsWWFpv7Stm/y5o7eY=)
                          2: vUZm6nnQuTxWv0zwrqYoRNaKsTM.roa (hash: Jd8FHgIjElXB18MWjUn4lp0g7hpzNeZ3zr50jxllMWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:22:d0:a1:79:dc:c3:15:c8:f2:2d:98:49:53:bb:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d58323e7d4f91c37297cd1926566033b3f8aba
        Validity
            Not Before: Oct 20 15:00:27 2025 GMT
            Not After : Oct 21 15:00:27 2025 GMT
        Subject: CN=2b5c801f91ba07591d9e774a222e40b614e627ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f0:e7:e5:9e:ba:d2:ae:d5:a3:0b:a9:e5:46:
                    ed:bb:d7:88:28:f7:9b:cd:2c:b6:00:24:68:b1:4f:
                    0b:c7:b8:ca:f3:23:81:2f:d9:fb:3e:75:c5:76:47:
                    20:03:91:1c:bc:7b:27:a6:e9:4a:42:d9:97:72:21:
                    bf:fe:41:30:e8:75:ce:1d:f3:b0:5b:79:3c:41:f1:
                    00:c2:05:77:6e:02:4e:1f:26:6c:39:19:97:85:bb:
                    63:1e:4e:a3:73:2b:21:a1:42:2b:57:16:08:26:28:
                    08:15:68:f1:cf:44:8a:4e:f2:1f:92:9a:69:f3:fc:
                    9d:d7:bc:3c:8a:f3:d0:26:48:57:5c:ce:30:10:cf:
                    d4:0c:8f:9b:79:6e:4e:12:c7:b6:c6:34:5a:1e:bd:
                    ee:4a:b0:fb:87:d8:34:8a:19:d6:5a:cc:e1:a4:91:
                    e1:21:56:88:68:02:9d:b1:7a:c7:3b:9f:12:1d:68:
                    20:dd:ea:d7:30:51:85:00:bb:a6:21:bb:ab:46:ab:
                    91:f9:0b:f4:cf:2a:91:57:dd:1f:38:78:f3:5b:a4:
                    e1:0d:6c:3d:08:ac:bb:4f:b5:f0:83:10:d7:b6:65:
                    c0:50:f3:3a:27:6c:ba:2d:42:55:9a:a1:24:41:5c:
                    c6:30:9b:12:a8:67:71:66:05:3e:84:d0:4b:16:59:
                    10:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:5C:80:1F:91:BA:07:59:1D:9E:77:4A:22:2E:40:B6:14:E6:27:EE
            X509v3 Authority Key Identifier:
                keyid:45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:49:10:e0:2a:03:2f:17:81:74:b0:06:08:aa:c3:b0:44:86:
         7e:e1:35:4a:ce:9b:7f:38:43:cf:65:07:8e:3b:8f:56:5a:d2:
         ed:25:95:6e:db:5e:b0:b6:b1:8e:0b:2b:15:07:2d:2a:fd:01:
         48:d0:8c:69:42:55:7b:50:c8:95:ed:d2:40:dd:df:fd:c4:4c:
         12:ba:11:53:92:ab:77:04:92:5a:05:99:0e:ba:5c:42:8d:7c:
         62:65:64:08:76:cd:dd:12:c5:ba:06:6b:39:3c:b2:5c:6f:34:
         e2:a5:dc:87:d8:cc:ce:c1:20:ef:ae:09:7f:02:00:41:b6:fb:
         bd:4e:2c:b9:b1:2e:46:29:62:49:a1:98:1b:7a:be:2f:f0:38:
         a5:86:6e:2c:af:0d:20:7c:12:a9:36:05:4e:9e:92:a3:2b:03:
         68:fd:1b:19:3a:f4:b6:8a:51:42:66:1e:a4:e5:b5:8d:4b:27:
         c0:c5:22:2d:b1:7e:b8:29:38:52:0c:17:d7:a1:0b:67:c9:4f:
         f3:d4:57:71:80:e7:2c:c6:0c:63:e6:88:2f:07:86:54:ef:dd:
         18:47:d8:2e:6b:f6:c3:04:21:2d:52:a2:d0:63:d2:c3:a5:5b:
         4c:22:21:2f:49:39:97:81:a7:d0:8e:66:08:4b:5a:cb:0d:07:
         fb:ce:a3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:42:38 2025 by rpki-client