Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
File:                     RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft (raw, json)
Hash identifier:          HzxgHQfiUWzSrk6gGeMaxSkOdJA4uz4X7ZI6Dl1W5fs=
Subject key identifier:   28:BF:BD:58:1B:28:2F:6F:F3:14:2C:3F:B4:E5:9F:D7:E9:40:66:DB
Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
Certificate issuer:       /CN=4419e02f046e1bfb5927fe731ff725e469599171
Certificate serial:       0198D4742A6E55A94E75F0560AD7DFBA849F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
Manifest number:          1141
Signing time:             Sat 23 Aug 2025 01:03:59 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:59 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:59 +0000
Files and hashes:         1: RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl (hash: OTunOSG8wCtsU8MenLNFwrOFRltHaJpeXuCBLrzPPVU=)
                          2: j6btVEkYHnL9gWowTqe50VXUUIk.roa (hash: eFOZX5z3pNhRrEXFNmogu9OUe+ItbR9kd5gawg90+UY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:2a:6e:55:a9:4e:75:f0:56:0a:d7:df:ba:84:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171
        Validity
            Not Before: Aug 23 01:03:59 2025 GMT
            Not After : Aug 24 01:03:59 2025 GMT
        Subject: CN=28bfbd581b282f6ff3142c3fb4e59fd7e94066db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fb:68:e8:8a:db:ab:24:79:34:25:4c:c0:b5:
                    60:68:fa:a5:a3:eb:c0:ff:24:70:71:b0:02:97:fb:
                    88:24:b0:a6:44:fb:03:22:a4:95:a0:69:55:c6:e6:
                    6c:78:83:a5:dd:c5:b8:fd:bb:a1:da:dd:73:9e:fe:
                    3c:02:c0:6b:33:89:fe:6b:8a:8b:c5:ec:5e:c5:e2:
                    d3:31:57:80:6a:53:16:0e:d9:16:60:55:c4:c0:b0:
                    a9:87:42:19:71:8d:a1:8b:15:a0:55:c6:2d:e2:bc:
                    a9:48:4d:81:82:3b:55:17:13:0a:3a:ca:c9:30:af:
                    f1:cd:7c:19:24:4a:a5:7d:6f:08:7f:e2:11:b1:b1:
                    9a:70:8a:4f:2e:13:ac:a5:86:5c:81:48:ab:27:cf:
                    a2:c1:3d:15:33:03:f7:3a:c3:ab:d1:27:47:6e:26:
                    13:79:8b:a4:7b:61:95:96:16:f9:54:c7:20:4e:47:
                    35:11:c0:37:9e:dd:61:89:51:87:9e:f5:83:17:25:
                    33:c9:5f:ac:84:0b:7a:bf:b4:09:9d:fe:a3:46:95:
                    3b:28:7e:a9:21:38:87:52:20:c5:fb:15:9b:f6:87:
                    8b:f5:a8:07:50:01:52:4e:f7:b6:6d:ad:22:0e:70:
                    0d:bb:89:af:4a:56:95:3e:a2:7e:14:bb:2c:7d:98:
                    1f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BF:BD:58:1B:28:2F:6F:F3:14:2C:3F:B4:E5:9F:D7:E9:40:66:DB
            X509v3 Authority Key Identifier:
                keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:97:3b:88:d0:27:27:04:f9:21:5d:c4:bd:4a:34:a4:a6:34:
         46:f0:ac:b5:18:5a:7e:fe:5c:e8:36:0e:32:48:a0:57:7f:34:
         19:17:12:3c:bd:b0:42:00:8c:3a:9b:79:79:35:13:2f:e9:42:
         7d:75:90:0c:6b:20:9e:c9:3f:19:8f:01:b1:59:40:0a:5b:63:
         39:70:32:d2:3f:a5:89:58:57:6b:a2:df:2c:fc:9a:ff:08:32:
         e9:07:15:96:14:25:43:80:f0:d5:48:82:99:fc:7d:a4:1a:01:
         9e:83:cb:ec:22:1d:49:98:b4:44:d3:c0:c1:09:1c:74:c7:d1:
         1a:0f:a7:fe:89:07:71:3e:5b:c2:fd:18:85:a6:7d:c0:a8:5b:
         e7:d7:f9:ed:83:8d:26:2f:9a:84:4b:c4:44:e9:98:78:46:b9:
         2c:e2:3b:f1:e7:49:01:4a:25:61:eb:f1:a8:f8:65:b4:7a:88:
         1e:a4:91:2c:19:57:06:e9:df:0e:1f:81:95:aa:c5:a4:fd:6e:
         56:18:c3:e0:45:da:fb:6b:af:ad:a8:8a:db:96:fd:06:cd:00:
         27:ad:79:56:96:f6:71:d1:b0:61:f1:b4:38:01:57:d4:90:71:
         79:28:9e:b1:c5:da:fa:77:7c:70:72:a6:07:64:2f:ed:ed:40:
         bc:5a:ca:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:39 2025 by rpki-client