Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
File:                     Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft (raw, json)
Hash identifier:          cIAUSlscdPZJj/jtqi12bs5RWvLYUm7kyyZeyYAtUtk=
Subject key identifier:   57:42:80:31:AC:AB:E8:F6:01:8B:F0:83:1A:E7:97:4F:06:93:EE:77
Authority key identifier: 46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48
Certificate issuer:       /CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848
Certificate serial:       0199FFC7A4682CF05EBCEE31A595D06864EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
Manifest number:          055A
Signing time:             Mon 20 Oct 2025 04:01:37 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:37 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:37 +0000
Files and hashes:         1: Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl (hash: +zG9aG764JJqc1UhgNIbrxTd0IoqlE2gk7sPuKzQo+c=)
                          2: laXjmsr5wiUZR5pUuEVXQE2tlq4.roa (hash: lZiORjXr/RyEYVt6VHpENnlIs3IOUoCnLBaaTPOTOeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:a4:68:2c:f0:5e:bc:ee:31:a5:95:d0:68:64:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848
        Validity
            Not Before: Oct 20 04:01:37 2025 GMT
            Not After : Oct 21 04:01:37 2025 GMT
        Subject: CN=57428031acabe8f6018bf0831ae7974f0693ee77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bf:b5:28:b9:12:c5:1e:e0:07:89:ca:a4:d6:
                    96:40:8f:58:2f:e0:03:5b:a4:db:aa:51:d0:18:24:
                    46:e4:6f:a3:c7:18:1e:cb:23:6b:73:4f:1b:93:f9:
                    3b:1c:5a:a8:4e:5d:ad:cc:21:e6:59:98:6c:f8:39:
                    2c:b7:38:26:0e:06:ca:74:b0:f6:69:f6:9e:61:7b:
                    b6:4a:d4:47:4f:c8:00:a4:b6:02:4d:06:28:fa:5d:
                    1b:ff:7b:31:e0:0b:f2:9c:84:cd:9f:d6:0f:e6:f4:
                    83:3f:40:d7:28:cf:79:2e:81:f0:9c:f4:4e:8c:00:
                    ff:15:ce:eb:0f:d2:e5:92:c7:b4:f7:13:23:21:53:
                    e8:82:29:aa:47:55:cd:78:a9:23:12:96:68:41:55:
                    47:12:1b:a7:5a:e0:38:c6:18:50:e0:c9:1c:f1:67:
                    28:54:48:81:eb:5d:d8:80:d3:03:d6:4b:62:86:57:
                    11:7d:9b:f8:1a:60:d9:b8:f8:ab:33:64:28:80:d2:
                    65:51:59:6b:10:95:b9:5d:59:71:1d:cd:cb:4c:26:
                    44:aa:3c:16:7f:2c:01:2c:f8:05:47:ac:6b:d8:18:
                    5a:c1:99:46:17:cf:98:82:da:82:ad:bd:e9:c0:67:
                    11:97:e1:17:b0:62:9d:f1:3d:03:85:a4:c7:75:50:
                    d6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:42:80:31:AC:AB:E8:F6:01:8B:F0:83:1A:E7:97:4F:06:93:EE:77
            X509v3 Authority Key Identifier:
                keyid:46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a8:df:d8:50:61:96:9e:f6:aa:3a:56:04:b9:de:2f:57:48:
         d9:c3:54:17:48:a7:2b:74:13:1e:84:65:73:53:14:bc:a5:7c:
         38:d4:79:ee:2b:6e:61:48:db:44:dd:c9:83:b1:9f:ae:d0:bf:
         f6:af:df:f9:e3:40:38:45:ed:4c:8c:1c:ac:29:78:fe:1b:f6:
         51:6e:96:63:55:4b:73:85:56:72:0b:a1:23:c9:98:d6:4c:41:
         d9:99:ed:31:23:b5:0b:7c:8b:46:2c:a9:3a:5e:03:99:4f:4c:
         20:52:d9:36:aa:73:c1:08:8d:13:b5:64:22:3d:0f:6a:1e:d4:
         36:44:d8:83:59:9c:0a:19:d6:aa:2e:4d:b9:88:5f:3d:8f:5f:
         33:fd:2c:d2:7d:02:d5:f8:11:03:af:b9:94:70:fe:f3:5b:01:
         42:29:bb:81:8c:82:5d:8b:88:d3:f2:75:ad:2a:7b:c5:3f:3b:
         48:42:5e:3a:79:f8:58:c0:5b:af:62:0c:93:0b:17:67:c1:df:
         c0:bb:f0:49:be:c9:95:0c:b8:ca:c8:85:67:73:87:56:b9:06:
         84:c3:1d:c8:09:a7:92:51:83:8f:12:2b:f8:2e:c9:18:2b:1a:
         52:6e:e4:0c:64:5b:34:25:c4:26:5a:d1:5c:d6:bb:69:4c:bd:
         55:27:19:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:57:39 2025 by rpki-client