Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
File:                     RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft (raw, json)
Hash identifier:          7sw/ImiZIRS0C6oo6ja5HI4CZB0t2xz5kV3GFCARuzU=
Subject key identifier:   9B:1C:CC:72:CB:7A:43:A2:47:94:29:AB:9C:2A:66:58:40:10:FA:8E
Authority key identifier: 45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA
Certificate issuer:       /CN=45d58323e7d4f91c37297cd1926566033b3f8aba
Certificate serial:       019A1F1ABC627DA845ADD8A466E72058CFF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
Manifest number:          05E2
Signing time:             Sun 26 Oct 2025 06:00:37 +0000
Manifest this update:     Sun 26 Oct 2025 06:00:37 +0000
Manifest next update:     Mon 27 Oct 2025 06:00:37 +0000
Files and hashes:         1: RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl (hash: f6Y0vcPiKUp6VomKO+GvfQCZlOz9jCLzC+8BPaMCxxw=)
                          2: vUZm6nnQuTxWv0zwrqYoRNaKsTM.roa (hash: Jd8FHgIjElXB18MWjUn4lp0g7hpzNeZ3zr50jxllMWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:1a:bc:62:7d:a8:45:ad:d8:a4:66:e7:20:58:cf:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d58323e7d4f91c37297cd1926566033b3f8aba
        Validity
            Not Before: Oct 26 06:00:37 2025 GMT
            Not After : Oct 27 06:00:37 2025 GMT
        Subject: CN=9b1ccc72cb7a43a2479429ab9c2a66584010fa8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:98:5f:32:4a:f4:e6:5a:91:96:3c:7d:6e:
                    4c:fe:18:80:58:2a:b3:96:cf:82:3d:c3:48:39:0f:
                    3d:01:73:ea:1f:4d:59:99:c8:1d:b4:35:2f:8b:ee:
                    e0:6c:c7:41:f2:d7:96:ec:82:e9:f5:4a:56:00:c1:
                    b2:cf:ac:dc:1c:f7:0e:e5:2c:f7:1a:a0:e8:a9:c2:
                    37:9f:2b:62:32:d2:f8:ea:32:7b:a4:d2:ed:68:42:
                    21:f8:c8:ca:23:98:97:a8:5a:93:ad:be:5b:fc:b8:
                    50:6c:9a:dc:65:2a:24:c8:77:7c:9b:0e:1f:71:48:
                    9d:ca:c7:f4:32:21:3a:22:9e:f2:c7:66:01:76:d2:
                    1e:4c:af:f8:27:41:dd:d6:e1:d7:59:09:48:5f:0f:
                    08:28:2f:86:24:bd:4c:f3:fb:99:7d:92:2b:eb:1a:
                    f4:1d:95:cd:62:2a:d6:38:e1:42:fd:ea:a5:62:20:
                    d0:60:67:b9:08:a6:fd:24:29:32:2e:07:13:c5:58:
                    3b:11:68:42:21:f8:1b:58:18:98:42:79:e0:fc:6d:
                    0c:f5:ad:a0:c0:70:b9:fd:c4:0b:53:0b:be:b6:e4:
                    12:74:36:e9:2d:f2:e3:ee:3a:71:81:f8:1d:3e:3b:
                    92:9e:60:2c:61:de:d7:14:ef:90:84:b2:19:35:bc:
                    66:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1C:CC:72:CB:7A:43:A2:47:94:29:AB:9C:2A:66:58:40:10:FA:8E
            X509v3 Authority Key Identifier:
                keyid:45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:56:74:b8:f4:8b:da:5c:b5:50:fb:84:1c:14:14:a6:9b:9d:
         5f:e9:61:1e:e9:c4:18:bc:bc:f0:f8:71:e4:f6:38:a7:95:6a:
         57:09:8a:3e:56:60:24:d7:7e:68:f7:36:0a:1f:a3:e8:04:20:
         46:2b:05:48:24:e3:c0:d4:2d:4e:b6:04:94:e8:6d:42:87:00:
         04:a6:6a:57:45:77:f0:9e:e3:e2:09:f5:d2:54:03:6f:d9:8b:
         d0:ca:a1:0d:7c:ad:e7:92:a1:4c:36:30:62:7c:24:69:3e:d3:
         64:6e:ad:08:94:c5:9d:73:cc:4f:30:19:60:48:bb:74:31:6b:
         83:d3:1a:33:09:da:c8:17:e9:f2:17:15:a9:4d:6f:31:dc:74:
         e4:fc:b4:bb:5b:e5:83:0a:52:f1:f7:49:e3:37:f5:19:05:61:
         0a:73:2a:f1:5d:c0:13:68:06:42:1e:72:0a:2f:10:fc:a3:68:
         07:ee:31:8b:e7:47:fb:7b:a8:2c:44:f3:0c:85:3c:22:d7:ee:
         ac:06:72:ad:fe:32:14:a2:99:77:dd:23:d9:e8:4f:b0:ac:12:
         f8:d5:7e:d9:79:a5:fb:87:a7:5a:2a:7d:d6:99:30:f8:90:df:
         27:95:98:27:b9:c8:4c:e1:8e:6f:ab:44:e9:00:8d:04:89:34:
         63:2b:aa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:24:21 2025 by rpki-client