Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
File:                     RbUATsPPXBp1UYXW9AaDxkbMlOw.mft (raw, json)
Hash identifier:          aT0BeOn7Jks/MF46dee9TpIoRdaoOqAHiAIPVg+3XEQ=
Subject key identifier:   5C:C9:4C:81:42:6F:D2:F1:B3:4E:7A:7D:B4:39:CF:24:9F:72:DC:09
Authority key identifier: 45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC
Certificate issuer:       /CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
Certificate serial:       0199FCFD30C1BD8564DC7B248B82F2A78859
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
Manifest number:          0B1F
Signing time:             Sun 19 Oct 2025 15:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:15 +0000
Files and hashes:         1: RbUATsPPXBp1UYXW9AaDxkbMlOw.crl (hash: LvvblomvXzg4tCnHD1hYZAJ0+3Uxoo1grbkjbvDg6DU=)
                          2: cg41KOlM1vNAwrdMnvNHppcwT4c.roa (hash: QsQ4ZMCLxuolAifAsH1HBIsIugUjZ4tjy04rNn/2wxI=)
                          3: iuqsr8mDy4hdl6U1K1v1iSpNchQ.roa (hash: 1qvvVB0UpfZrwtI6t2Uw+kulc+5R7APEpoKz6kq0OuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:30:c1:bd:85:64:dc:7b:24:8b:82:f2:a7:88:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45b5004ec3cf5c1a755185d6f40683c646cc94ec
        Validity
            Not Before: Oct 19 15:01:15 2025 GMT
            Not After : Oct 20 15:01:15 2025 GMT
        Subject: CN=5cc94c81426fd2f1b34e7a7db439cf249f72dc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:67:57:72:43:e1:8c:a5:38:f6:a2:dd:23:
                    82:6c:c2:f7:de:42:b9:13:96:ca:2e:ac:16:1e:0e:
                    87:66:b7:b8:3c:9c:84:7b:f5:1a:00:d7:77:1d:28:
                    2c:89:9d:eb:eb:e2:8d:64:9c:c4:68:0d:33:34:8e:
                    f7:6c:ef:13:e1:fb:a0:9d:6c:b7:c0:b5:b7:94:6a:
                    df:d8:f1:37:e5:e6:7a:cc:f8:4d:88:23:26:c6:14:
                    f1:40:d7:a6:da:6e:56:d0:49:a2:c7:6a:4c:dd:81:
                    20:85:4b:a7:2d:b9:75:83:08:9d:5a:fd:11:b5:b9:
                    70:6f:fe:d6:eb:5d:a0:e9:71:00:c1:90:19:36:3d:
                    72:ff:7a:16:0e:47:78:a1:6c:55:1b:2e:4b:ca:ad:
                    85:80:34:4c:3e:89:67:00:b9:7e:0d:02:3a:22:f5:
                    f3:41:bd:1d:c7:4c:e5:6b:33:a8:89:79:ce:20:7d:
                    eb:c8:99:4c:4c:99:2a:74:b2:8a:f3:43:cf:3c:54:
                    94:1a:4c:d9:d4:64:00:6a:3d:6c:39:2e:d2:a9:68:
                    85:c0:ac:85:49:85:cc:90:b4:19:c4:d1:59:1a:ed:
                    b4:47:3d:c7:f1:0c:d6:85:de:98:91:a1:e9:da:f6:
                    03:e3:c5:17:d2:c8:c2:1e:0b:40:a5:12:40:2b:cb:
                    ba:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C9:4C:81:42:6F:D2:F1:B3:4E:7A:7D:B4:39:CF:24:9F:72:DC:09
            X509v3 Authority Key Identifier:
                keyid:45:B5:00:4E:C3:CF:5C:1A:75:51:85:D6:F4:06:83:C6:46:CC:94:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbUATsPPXBp1UYXW9AaDxkbMlOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c5e52a-8023-47ac-b27a-4aebefac49b1/1/RbUATsPPXBp1UYXW9AaDxkbMlOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:12:e8:dc:8f:6f:51:3a:44:4c:a9:c7:a1:18:fc:9d:b0:df:
         dd:d9:06:38:f3:64:ac:e3:19:62:11:be:6e:2c:7f:32:a3:7a:
         45:b7:4f:e4:16:af:d0:ea:60:6d:73:e8:be:59:17:a2:56:98:
         96:4c:88:a1:d8:4b:88:83:95:d8:67:92:b3:f0:94:71:c5:d7:
         47:d2:4a:36:08:e8:5c:13:0f:92:44:2d:6e:4c:6b:e2:37:56:
         9a:6b:62:f7:fd:e3:d0:53:26:7c:2e:bc:5e:ec:f0:66:b5:e4:
         98:35:82:b1:ce:99:19:6b:68:57:3e:ec:d7:69:53:64:cf:99:
         b5:1e:7d:ac:b4:ce:0b:a8:ed:80:a8:30:cd:1c:ef:89:39:5c:
         bf:42:34:00:3c:55:f0:e2:d6:70:9e:c1:9f:bb:27:63:e6:2e:
         51:12:89:51:3e:49:22:aa:b8:fb:3d:05:26:77:2b:53:a1:1f:
         9c:74:bf:36:5c:6c:1d:b6:b5:18:b8:17:9a:5f:c5:27:c0:a1:
         49:31:f2:e5:68:4b:66:e1:03:99:23:ea:e9:e9:29:7d:7b:32:
         a6:33:70:b3:f7:15:db:1e:15:cd:2e:79:f9:5d:42:a0:5f:d8:
         64:ea:53:ad:69:0a:82:e4:95:ba:f2:06:9d:94:1f:8a:28:92:
         88:54:25:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:53 2025 by rpki-client