Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
File:                     rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft (raw, json)
Hash identifier:          +jTvan+jkHlWN0Eblle4DjEQMbjZpUf58O+wOy+jQGs=
Subject key identifier:   D3:3E:6A:AD:0F:FA:70:9E:A6:A2:04:6B:AF:97:0D:DB:81:53:7A:B0
Authority key identifier: AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5
Certificate issuer:       /CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
Certificate serial:       019A221BEDFFC3A3126C22535768BBE06B28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
Manifest number:          0777
Signing time:             Sun 26 Oct 2025 20:00:46 +0000
Manifest this update:     Sun 26 Oct 2025 20:00:46 +0000
Manifest next update:     Mon 27 Oct 2025 20:00:46 +0000
Files and hashes:         1: rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl (hash: N9NBDLEC4zYPv6ascbEqgQ3M5Rp2l9kMF3159l9Pod8=)
                          2: w4hN4EJQ_3vBdUHqQ3XyJaL8bkA.roa (hash: 4EUB26NuRxe0K3o15R6cS+9ryAyEDIc2bJyCFTz2HoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:1b:ed:ff:c3:a3:12:6c:22:53:57:68:bb:e0:6b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbb86dd76dd3c1f7b40c9163f75257be6d0eef5
        Validity
            Not Before: Oct 26 20:00:46 2025 GMT
            Not After : Oct 27 20:00:46 2025 GMT
        Subject: CN=d33e6aad0ffa709ea6a2046baf970ddb81537ab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:b3:c3:96:0c:95:fc:e9:53:84:da:91:9a:
                    d0:3e:cb:59:6a:1d:4a:58:e4:41:7c:41:93:7f:df:
                    0f:ea:22:69:60:fe:d3:df:0f:83:9d:a5:61:bc:df:
                    c1:0c:28:ca:cb:7f:39:56:a2:e9:f7:f1:06:2d:91:
                    f5:10:e4:85:ef:ac:8c:24:00:4e:db:ac:1a:21:81:
                    18:58:e4:09:c0:35:d8:96:cd:46:b0:44:4f:d3:2d:
                    31:af:57:2f:d9:d5:20:ec:64:47:77:20:60:9b:a6:
                    a4:40:b1:ce:fa:0a:f2:31:c9:0f:07:42:1f:7e:d4:
                    91:8b:c0:1c:66:d2:cf:bf:95:64:2f:19:0a:b5:95:
                    65:f7:de:cb:b6:ea:91:c0:85:7c:5e:78:1f:c6:6f:
                    a4:2d:c8:f4:57:41:a8:b8:e4:7a:63:a8:75:c1:ba:
                    7f:0a:5b:ec:b9:6b:bc:39:5c:89:3c:fc:d8:d1:91:
                    13:86:1f:f2:b9:e8:cc:cb:51:35:c8:de:17:b0:d5:
                    c6:91:d4:b3:a5:0c:c5:d9:17:d7:96:4f:94:47:36:
                    aa:56:b4:9d:8d:35:d3:db:49:2d:ed:93:56:1d:34:
                    2f:ed:7f:69:7c:6e:57:19:d1:e7:e0:c2:6e:43:36:
                    96:8e:45:dd:4e:12:d7:38:0d:21:3d:b6:62:89:d4:
                    26:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3E:6A:AD:0F:FA:70:9E:A6:A2:04:6B:AF:97:0D:DB:81:53:7A:B0
            X509v3 Authority Key Identifier:
                keyid:AD:BB:86:DD:76:DD:3C:1F:7B:40:C9:16:3F:75:25:7B:E6:D0:EE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rbuG3XbdPB97QMkWP3Ule-bQ7vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/bf8d13-79f0-43ea-82d8-9cc6959ff3e9/1/rbuG3XbdPB97QMkWP3Ule-bQ7vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b2:a4:6b:49:6e:7a:0c:07:96:75:33:13:02:c6:72:5a:4a:
         20:4c:18:d7:d4:dd:17:35:4e:4e:52:39:9f:c7:58:3d:1b:7b:
         4d:da:66:2b:f5:cd:74:41:64:00:53:64:54:e9:8d:f5:36:f6:
         76:0c:57:a0:79:50:79:27:96:50:5d:de:d0:4e:f7:4c:90:a4:
         02:9c:5e:5e:48:8f:52:35:6c:50:a4:b4:8f:5b:df:4b:80:41:
         90:55:1f:d0:d7:b2:bb:de:d6:32:f5:09:95:2c:b4:03:55:dd:
         81:91:ea:37:24:c7:88:c0:a4:8b:f3:6f:fc:b3:5c:a4:bf:99:
         8e:e8:f5:b3:d7:c5:e1:96:fb:5a:51:65:b9:e5:43:30:4b:90:
         b0:00:f8:04:a1:9a:06:d6:7f:74:49:3e:69:52:a1:24:20:3f:
         2a:4d:fe:cd:56:8f:a3:78:33:2e:a5:35:cf:71:ce:83:b3:fe:
         22:a2:d0:4b:a6:77:72:b6:1b:a9:92:0d:15:78:cc:56:d1:1a:
         97:5b:91:0b:7c:01:b6:59:4c:bd:bf:34:a2:f2:56:34:71:ff:
         31:30:55:3f:16:6a:1f:49:c7:c8:39:e2:f7:9e:d6:b6:c7:9f:
         77:88:a3:dd:4e:4f:e2:94:a9:d5:87:d2:4c:37:20:0a:24:08:
         6a:ef:ff:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:41:45 2025 by rpki-client