Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
File:                     Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft (raw, json)
Hash identifier:          CmFhcfXf5eqkZcUol/XNLJ65Cgs/1s4T6x2VVKFdvWw=
Subject key identifier:   6B:11:14:F3:6E:C2:45:8E:E7:B1:70:7B:DB:B3:BA:CA:F5:F0:8C:62
Authority key identifier: 45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5
Certificate issuer:       /CN=45bbb0c37704bfd558849c6549af9734e7d14be5
Certificate serial:       0197B88EF13A4DE82AD64B4BD2BE0AFFD9D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
Manifest number:          04EA
Signing time:             Sat 28 Jun 2025 22:01:04 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:04 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:04 +0000
Files and hashes:         1: HrWHZLwLz9SHQNWDWAqLUzhWNgM.roa (hash: +TAR64SkVojwAPPcj29LtZXZh5haH9rqB2EiQmQF6cY=)
                          2: Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl (hash: oTTsuK83mMDYoDKk2kS0nJHclnwDXc7R2lkSvpRCrDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8e:f1:3a:4d:e8:2a:d6:4b:4b:d2:be:0a:ff:d9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bbb0c37704bfd558849c6549af9734e7d14be5
        Validity
            Not Before: Jun 28 22:01:04 2025 GMT
            Not After : Jun 29 22:01:04 2025 GMT
        Subject: CN=6b1114f36ec2458ee7b1707bdbb3bacaf5f08c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4d:2b:79:0f:b0:b7:de:26:85:83:c8:e0:44:
                    e5:cd:f0:c4:a0:af:4a:9b:92:fc:5f:ea:2b:dd:87:
                    9a:23:76:e6:43:4e:77:10:44:d2:58:26:fb:0a:37:
                    f9:5e:3b:f7:d0:02:cc:a5:fd:9f:ad:9c:62:e3:85:
                    9f:4a:72:45:40:bd:ac:ec:05:1a:f4:6a:30:b9:e6:
                    18:ce:56:1e:48:85:e5:64:89:36:ab:0c:63:be:99:
                    b2:ba:f2:17:56:25:6b:46:66:7e:b1:a6:50:2f:73:
                    be:c7:3d:e5:3d:63:95:d7:d1:3b:a7:42:ac:62:91:
                    c8:b3:cc:dc:e8:cb:bb:f0:ac:fd:52:e7:63:05:82:
                    5d:2f:b9:67:85:d5:56:0b:c8:7d:06:fe:bd:e3:2f:
                    64:89:63:0d:2c:e5:e6:eb:87:23:4d:d9:0b:72:98:
                    9f:11:aa:5c:9d:35:c1:2b:67:6f:4a:02:aa:24:41:
                    0b:50:f1:6c:98:74:c6:71:3b:03:16:75:14:e6:06:
                    9e:b2:5c:4e:a3:5d:6e:d1:17:f2:a9:86:68:c9:b6:
                    93:7a:ea:71:87:fc:85:84:37:f5:99:71:23:4f:ed:
                    a4:5e:86:53:bd:01:c6:67:1c:e6:8f:4e:68:2f:9d:
                    05:36:10:59:14:3e:7e:82:f9:f1:0d:de:e4:8e:87:
                    48:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:11:14:F3:6E:C2:45:8E:E7:B1:70:7B:DB:B3:BA:CA:F5:F0:8C:62
            X509v3 Authority Key Identifier:
                keyid:45:BB:B0:C3:77:04:BF:D5:58:84:9C:65:49:AF:97:34:E7:D1:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rbuww3cEv9VYhJxlSa-XNOfRS-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/33d8aa-93d8-4936-a3de-93a3665c4b68/1/Rbuww3cEv9VYhJxlSa-XNOfRS-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ce:e5:fd:00:23:ab:47:92:1a:aa:c2:49:da:a7:25:3a:1f:
         de:5d:bc:44:a5:35:66:8c:24:d1:f0:2d:e2:c2:02:40:41:ba:
         0c:d9:94:61:33:69:03:49:5c:62:98:92:5b:a6:63:bf:c2:0f:
         c7:c8:48:6c:14:84:35:7c:e2:68:27:c3:0a:74:ea:c4:47:58:
         cc:29:f0:39:ab:24:fd:16:bd:ee:8b:80:cc:62:83:9a:67:d3:
         cf:9f:87:f6:1c:32:d2:ec:1e:66:0f:43:20:77:10:54:e0:7b:
         87:12:81:bd:86:0e:6b:9f:28:d0:48:68:c4:25:33:68:03:82:
         9b:0c:5e:5a:8c:49:54:60:03:78:a1:ff:ee:f4:9b:ee:e3:ee:
         4f:98:35:9d:a7:52:4b:b4:12:59:30:45:67:7e:0c:b8:83:ac:
         1e:fe:05:12:10:b2:87:f1:1a:96:63:ae:a4:3b:eb:78:20:64:
         df:83:3f:d2:fb:e8:cb:ba:5d:40:2f:a4:35:28:f6:b6:90:0f:
         88:14:4a:0a:5e:57:67:c9:a8:45:3d:52:0f:28:84:36:27:ac:
         c1:d0:86:df:a0:66:3e:7b:35:30:35:4e:f9:4e:ab:1c:a1:11:
         6f:b4:a3:20:11:b1:57:a1:3e:d8:5c:87:c5:1d:d8:f4:31:15:
         17:c7:e9:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jvE6Tegq1ktL0r4K/9nZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YmJiMGMzNzcwNGJmZDU1ODg0OWM2NTQ5YWY5NzM0ZTdk
MTRiZTUwHhcNMjUwNjI4MjIwMTA0WhcNMjUwNjI5MjIwMTA0WjAzMTEwLwYDVQQD
Eyg2YjExMTRmMzZlYzI0NThlZTdiMTcwN2JkYmIzYmFjYWY1ZjA4YzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU0reQ+wt94mhYPI4ETlzfDEoK9K
m5L8X+or3YeaI3bmQ053EETSWCb7Cjf5Xjv30ALMpf2frZxi44WfSnJFQL2s7AUa
9GowueYYzlYeSIXlZIk2qwxjvpmyuvIXViVrRmZ+saZQL3O+xz3lPWOV19E7p0Ks
YpHIs8zc6Mu78Kz9UudjBYJdL7lnhdVWC8h9Bv694y9kiWMNLOXm64cjTdkLcpif
EapcnTXBK2dvSgKqJEELUPFsmHTGcTsDFnUU5gaeslxOo11u0RfyqYZoybaTeupx
h/yFhDf1mXEjT+2kXoZTvQHGZxzmj05oL50FNhBZFD5+gvnxDd7kjodIgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsRFPNuwkWO57Fwe9uzusr18IxiMB8GA1UdIwQY
MBaAFEW7sMN3BL/VWIScZUmvlzTn0UvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmJ1d3czY0V2OVZZaEp4bFNhLVhOT2ZSUy1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8zM2Q4YWEtOTNkOC00OTM2LWEzZGUt
OTNhMzY2NWM0YjY4LzEvUmJ1d3czY0V2OVZZaEp4bFNhLVhOT2ZSUy1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8zM2Q4YWEtOTNkOC00OTM2LWEzZGUtOTNhMzY2NWM0YjY4
LzEvUmJ1d3czY0V2OVZZaEp4bFNhLVhOT2ZSUy1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJs7l/QAj
q0eSGqrCSdqnJTof3l28RKU1Zowk0fAt4sICQEG6DNmUYTNpA0lcYpiSW6Zjv8IP
x8hIbBSENXziaCfDCnTqxEdYzCnwOask/Ra97ouAzGKDmmfTz5+H9hwy0uweZg9D
IHcQVOB7hxKBvYYOa58o0EhoxCUzaAOCmwxeWoxJVGADeKH/7vSb7uPuT5g1nadS
S7QSWTBFZ34MuIOsHv4FEhCyh/EalmOupDvreCBk34M/0vvoy7pdQC+kNSj2tpAP
iBRKCl5XZ8moRT1SDyiENieswdCG36BmPns1MDVO+U6rHKERb7SjIBGxV6E+2FyH
xR3Y9DEVF8fpNA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:36 2025 by rpki-client