Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
File:                     Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft (raw, json)
Hash identifier:          Ag5nAaRzyp3hKWUqLLEyA7jWPI8uUtJ6Y35usNdm2wc=
Subject key identifier:   07:F4:02:58:28:D8:57:62:8B:66:5E:20:E7:98:C2:EC:4D:06:7C:DC
Authority key identifier: 46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48
Certificate issuer:       /CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848
Certificate serial:       01991809835AECE34A09340593ACA5965B54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
Manifest number:          04E2
Signing time:             Fri 05 Sep 2025 04:01:40 +0000
Manifest this update:     Fri 05 Sep 2025 04:01:40 +0000
Manifest next update:     Sat 06 Sep 2025 04:01:40 +0000
Files and hashes:         1: Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl (hash: mALxkmM+3qzu/AmIOh7G1SazjWrWc4rY3worTX/PcJc=)
                          2: laXjmsr5wiUZR5pUuEVXQE2tlq4.roa (hash: lZiORjXr/RyEYVt6VHpENnlIs3IOUoCnLBaaTPOTOeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:09:83:5a:ec:e3:4a:09:34:05:93:ac:a5:96:5b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848
        Validity
            Not Before: Sep  5 04:01:40 2025 GMT
            Not After : Sep  6 04:01:40 2025 GMT
        Subject: CN=07f4025828d857628b665e20e798c2ec4d067cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:e9:a3:d5:5d:76:8b:a4:52:fb:23:d9:47:
                    f3:9a:8c:a9:50:f4:95:4a:4c:c3:24:ca:53:59:e6:
                    ff:62:37:f0:93:9f:a1:a3:c1:4f:c3:cd:bd:ee:8d:
                    b3:7b:ec:1d:2c:da:cf:46:56:47:0b:ba:de:3b:16:
                    70:6b:be:40:84:74:c7:57:bf:42:80:2d:32:51:0c:
                    bc:b2:aa:ba:13:6a:79:46:ba:28:2a:61:5b:d9:45:
                    08:7b:9b:d2:21:a1:9f:c8:9a:80:45:82:dc:88:47:
                    e1:12:1e:7f:a1:d5:b4:9a:f0:96:25:ce:16:1e:19:
                    6f:9b:bb:78:60:8f:a3:ba:a9:74:ba:30:f2:47:44:
                    b5:fb:b0:2f:97:de:9a:e7:55:18:05:93:06:8d:76:
                    d2:cb:91:94:8f:d6:29:0c:69:4a:21:22:58:72:e1:
                    64:c7:33:48:9d:a2:b7:14:3b:46:fe:4e:1a:05:19:
                    a5:e0:1a:3e:8a:3e:c0:85:eb:46:b9:16:3f:22:f0:
                    44:b3:9a:33:c7:b8:f9:83:d0:e2:4b:1e:35:4f:af:
                    94:0b:bc:71:b3:46:a9:5d:58:ca:07:d7:48:c1:19:
                    41:13:63:0b:e1:54:98:ef:3e:e1:09:12:4f:f8:50:
                    d9:68:e3:9f:55:59:fc:df:67:3f:30:1d:6f:59:17:
                    ce:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F4:02:58:28:D8:57:62:8B:66:5E:20:E7:98:C2:EC:4D:06:7C:DC
            X509v3 Authority Key Identifier:
                keyid:46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d1:a8:b1:f9:7d:3b:70:2c:07:b7:f2:a4:01:e2:6b:64:04:
         0c:7f:e0:38:02:f4:7d:2d:fd:ab:56:5d:e8:65:12:7e:01:50:
         5f:40:9d:17:10:54:21:03:e3:6a:ac:52:b9:b0:8d:d1:eb:95:
         55:7a:32:1f:d1:6f:e0:10:28:e3:da:e7:48:90:0f:f2:c7:56:
         76:82:ee:53:06:8f:0d:4a:73:6f:55:18:b5:01:fd:77:19:3d:
         90:2e:86:c9:09:2a:30:94:cd:99:fd:56:23:5b:28:d5:ec:bf:
         0a:0d:95:b7:62:d2:72:1a:af:cf:51:7a:58:9f:b4:b8:3d:00:
         58:e2:47:61:89:2a:01:96:f3:8d:f6:dc:28:a6:26:ce:e7:ef:
         be:1d:6c:30:08:4b:e9:8a:ce:3d:11:fb:1a:20:28:32:b6:7a:
         69:3b:9b:5e:d8:35:e9:aa:f0:fa:be:95:8c:e1:bb:73:6f:88:
         9e:a3:1b:20:f9:ef:46:af:f9:e2:2e:3e:13:3b:5e:df:e9:8d:
         da:c2:3d:6a:70:82:29:45:9a:cd:14:17:02:49:76:32:9d:66:
         83:0f:4b:10:10:19:a3:07:20:81:e1:fb:e2:90:c5:df:ac:d3:
         1a:34:a8:d1:65:11:66:52:75:55:bb:f8:14:fb:c4:57:ad:f0:
         75:8b:7f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:49 2025 by rpki-client