Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
File:                     Rmv4di_kLwoT2n0hypbEMBUA68w.mft (raw, json)
Hash identifier:          EaquFAK2N0IX8MHRnNPWp22iAMek82icjX6Q7skMKGU=
Subject key identifier:   70:1A:9E:AE:CC:DB:6C:90:88:25:BE:E5:02:73:36:14:0A:12:23:DF
Authority key identifier: 46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC
Certificate issuer:       /CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
Certificate serial:       019A1918DD25764067C0FEEF3014EF22B584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
Manifest number:          076C
Signing time:             Sat 25 Oct 2025 02:00:51 +0000
Manifest this update:     Sat 25 Oct 2025 02:00:51 +0000
Manifest next update:     Sun 26 Oct 2025 02:00:51 +0000
Files and hashes:         1: Rmv4di_kLwoT2n0hypbEMBUA68w.crl (hash: FkMhP208whbPtbqiYdB3cy5xZ6OkfyyQBhfqcJBWJIs=)
                          2: ys86q5jXiENW-WW7AK-nkVinoug.roa (hash: PK1sfbQN38TktvS2UC6cxV1eHaxPEymB6l0sa2UeYfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 02:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:19:18:dd:25:76:40:67:c0:fe:ef:30:14:ef:22:b5:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
        Validity
            Not Before: Oct 25 02:00:51 2025 GMT
            Not After : Oct 26 02:00:51 2025 GMT
        Subject: CN=701a9eaeccdb6c908825bee5027336140a1223df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:7b:e4:ff:a6:50:6d:79:c9:f3:a2:15:f5:
                    e5:78:64:77:e8:37:7a:e9:8d:ed:b1:cd:d0:23:ab:
                    0b:4c:59:f6:76:e4:8a:86:e9:eb:c3:a0:68:99:51:
                    e2:80:29:8c:fe:85:e2:f4:bd:46:15:05:76:64:06:
                    18:7a:c9:88:c9:b0:fa:52:73:da:84:eb:c1:2c:4b:
                    25:c1:9d:42:58:53:48:30:e9:2b:1b:f9:9c:1e:93:
                    5b:fd:d4:1b:fc:e1:7b:41:d5:94:32:90:8f:76:c8:
                    ca:b2:1b:3a:e1:b7:cc:3c:c4:8f:0d:c7:4b:e9:94:
                    e9:7a:4e:8a:f0:d8:1a:d9:6d:75:31:d7:17:90:a6:
                    de:3d:9f:9d:2c:aa:f6:69:59:28:e7:96:9c:05:10:
                    9d:56:ed:68:13:7e:9a:11:38:ea:c1:c0:fc:bc:c3:
                    b7:cc:06:eb:e9:57:bc:f3:87:d1:53:6f:e5:fd:7c:
                    7b:5d:c1:3f:34:5c:80:73:2a:57:be:50:ec:5c:50:
                    f5:4d:a9:1e:5e:70:ea:23:35:a0:eb:86:f1:03:77:
                    41:36:b1:9f:d3:04:60:15:69:da:c5:fb:24:cc:5f:
                    f6:43:69:e5:a0:2b:34:0f:5e:ea:53:c6:b6:81:a0:
                    c2:dc:a6:ca:d8:c2:8f:a4:df:b7:a5:8d:03:a6:48:
                    92:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1A:9E:AE:CC:DB:6C:90:88:25:BE:E5:02:73:36:14:0A:12:23:DF
            X509v3 Authority Key Identifier:
                keyid:46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:fd:99:9e:73:d5:c0:3e:83:93:8c:86:fc:8a:41:7d:5b:52:
         16:de:c9:71:0c:18:cd:a8:3b:d8:8a:ad:39:db:4d:50:ab:0c:
         1e:b1:23:cb:90:01:35:02:a2:60:28:03:93:af:0c:cd:28:3f:
         e5:f2:11:69:c6:c6:2f:07:0b:18:b7:c5:a1:56:f6:b7:58:87:
         cb:d6:cd:81:ef:fd:39:cc:f8:a2:d5:28:c0:23:26:8b:35:d9:
         14:18:f8:5a:ee:b5:ba:ff:18:96:8e:2a:a8:08:cb:90:94:d7:
         f0:77:45:6c:5c:c4:58:2b:7c:cd:7e:9d:40:99:d4:04:17:3e:
         e7:c1:c3:84:f2:b3:e1:10:5e:75:5f:98:63:f0:56:f3:97:f2:
         3f:dd:b6:94:87:cd:ee:87:77:94:34:f6:ab:35:18:1a:8a:39:
         00:fb:a8:15:10:8f:da:ca:3d:c0:60:79:fa:5d:61:c9:b4:18:
         66:07:09:eb:c0:3e:37:5c:ad:0f:01:da:7c:7c:98:0b:42:5b:
         9c:06:7b:2a:91:85:45:64:11:03:c2:b8:07:33:88:d5:ad:25:
         6a:d9:12:79:6d:13:93:32:ce:20:34:f7:22:b3:a9:05:41:e2:
         2d:07:ce:00:fa:af:8c:3f:22:b1:0d:ae:cd:cd:74:14:69:3f:
         41:31:a7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 10:42:02 2025 by rpki-client