Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
File:                     RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft (raw, json)
Hash identifier:          IG9utQThpDQxizBa6rznibr4wH6Z1pNmNbfx/lZYosI=
Subject key identifier:   82:78:24:22:C8:94:69:47:43:1F:F5:6C:FC:DF:43:72:28:31:69:7A
Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
Certificate issuer:       /CN=4419e02f046e1bfb5927fe731ff725e469599171
Certificate serial:       0199FBEBEBE2B57A101CF2BD68DD3B91D6F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
Manifest number:          11DA
Signing time:             Sun 19 Oct 2025 10:02:46 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:46 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:46 +0000
Files and hashes:         1: RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl (hash: JGo5LwXTKY6QmXlX+t/ZgbUphPbUp7oms5USYnGS6jM=)
                          2: j6btVEkYHnL9gWowTqe50VXUUIk.roa (hash: eFOZX5z3pNhRrEXFNmogu9OUe+ItbR9kd5gawg90+UY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:eb:e2:b5:7a:10:1c:f2:bd:68:dd:3b:91:d6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171
        Validity
            Not Before: Oct 19 10:02:46 2025 GMT
            Not After : Oct 20 10:02:46 2025 GMT
        Subject: CN=82782422c8946947431ff56cfcdf43722831697a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ba:80:9c:00:7b:51:0b:b9:e3:51:7d:3d:bc:
                    a0:88:78:c0:8a:ed:d0:62:f3:01:9c:df:eb:98:43:
                    13:40:4e:d8:0c:b8:0f:a8:eb:e0:7d:28:32:e8:10:
                    3f:36:07:22:66:f3:90:c1:91:3a:de:fe:bc:21:3d:
                    01:f7:18:4c:64:23:9e:4b:83:aa:10:6d:82:44:70:
                    c3:4f:3d:2d:2b:db:db:5f:55:f2:6b:5e:80:88:c6:
                    6d:93:82:df:d7:34:02:c9:f3:a7:f6:ea:53:13:b3:
                    d8:b2:2a:03:59:af:77:65:62:b6:21:fc:3e:aa:df:
                    b1:ec:8a:6c:31:19:59:17:5f:71:61:49:b2:7f:78:
                    c1:2c:c0:1d:c6:18:ad:75:b5:2f:71:3b:0a:9e:44:
                    b9:2e:99:86:c8:30:9b:05:c1:68:de:70:a4:c4:60:
                    ea:24:f8:1c:ba:b2:31:73:b1:b1:d5:e0:88:0f:da:
                    1c:a0:51:85:8f:16:53:e7:ae:f2:63:65:94:9c:b9:
                    fa:b6:4b:00:28:5a:83:1c:7d:6c:a6:a6:ad:63:33:
                    96:03:9d:a1:64:7b:91:bd:58:53:43:aa:b4:53:e0:
                    cb:2d:a9:cf:31:53:54:54:27:33:ec:b7:e5:b3:9c:
                    a9:f3:37:b0:e0:51:db:33:af:d1:e0:b2:41:02:06:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:78:24:22:C8:94:69:47:43:1F:F5:6C:FC:DF:43:72:28:31:69:7A
            X509v3 Authority Key Identifier:
                keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:1b:10:30:eb:96:57:dd:9c:a9:0c:1a:93:f7:57:d6:ef:60:
         66:a2:0b:49:e8:b9:a8:63:f0:ad:76:1b:f5:ce:97:a8:59:99:
         bd:64:4e:d7:11:17:f7:e3:96:8e:a0:c9:59:93:e5:00:df:4a:
         af:ec:fb:9a:eb:c7:24:9d:60:62:c1:13:fa:a6:cd:a7:a0:74:
         c7:be:a3:95:ae:1d:1a:da:6b:e4:d8:37:03:de:61:da:7b:7a:
         c5:a9:9a:27:26:0a:44:ba:9b:f1:c7:ff:bf:0f:16:c1:a9:41:
         e4:c7:31:c3:b8:4a:12:40:96:42:30:6a:c7:f0:ed:9c:6f:64:
         e5:d0:92:a9:dc:de:40:cc:7c:dd:da:b1:d7:3b:ba:91:57:56:
         16:a6:68:41:be:ae:b1:b6:8b:fb:3f:df:60:f8:15:7d:8a:0f:
         20:ae:48:04:e9:34:c3:fa:8a:72:9a:b8:cd:96:c9:d4:96:45:
         ce:6f:58:d2:a3:cd:47:60:8d:4f:90:d0:b1:61:e4:e0:6d:75:
         e2:cb:a5:c1:0d:fa:e0:92:d7:8d:d8:ba:63:97:f0:ab:36:6d:
         b4:7b:8f:27:fb:a0:68:1a:88:c0:91:5e:8d:a7:4f:c0:d0:96:
         ca:a2:55:97:3d:cb:c6:23:11:b8:37:79:08:56:9d:a1:00:fd:
         ec:64:bc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:47 2025 by rpki-client