Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
File:                     Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft (raw, json)
Hash identifier:          kiUMlGhFCnY8bHSDjNPCbBA3JhsiGWf1QTti37bGVuo=
Subject key identifier:   5A:73:DB:D7:EF:80:DC:D5:3E:B5:8F:D6:4B:6E:7B:69:FE:5D:1C:CE
Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Certificate issuer:       /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Certificate serial:       019A71B8D55311E985D9C027184954D7DE50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
Manifest number:          063D
Signing time:             Tue 11 Nov 2025 07:02:09 +0000
Manifest this update:     Tue 11 Nov 2025 07:02:09 +0000
Manifest next update:     Wed 12 Nov 2025 07:02:09 +0000
Files and hashes:         1: JoGj50pnCfcj4YvYSQZxvyclrO4.roa (hash: Ehuefj6YltqorbH3ONfFXlgZF7FUv/1f+bkYNPhv4tU=)
                          2: Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl (hash: VL256DjHw9FphVqYLlIBtcnP11AjCsJYLxQhOO/sSoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b8:d5:53:11:e9:85:d9:c0:27:18:49:54:d7:de:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
        Validity
            Not Before: Nov 11 07:02:09 2025 GMT
            Not After : Nov 12 07:02:09 2025 GMT
        Subject: CN=5a73dbd7ef80dcd53eb58fd64b6e7b69fe5d1cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d8:82:ce:24:fd:aa:d6:ab:8e:db:8c:15:8e:
                    85:2b:88:d2:a9:ee:e3:a7:6c:c3:c0:5f:6d:8b:39:
                    20:07:90:b3:f7:cc:ce:1e:ed:71:74:a4:d7:11:2a:
                    c7:07:1f:6f:6f:94:92:22:3e:bc:89:69:45:7a:51:
                    54:90:6a:38:83:d1:c3:24:47:41:5d:bf:10:c9:d8:
                    84:01:c8:2f:5a:37:85:b0:0c:11:1d:83:cb:ff:d1:
                    cb:92:04:d2:d6:74:d1:6c:a9:60:77:17:5d:23:3b:
                    d1:35:df:f0:0a:cc:51:14:14:10:c3:5a:98:67:3c:
                    a9:7f:38:0f:43:05:c9:dd:54:9f:30:c6:1f:4f:d3:
                    ec:29:e2:ad:d7:94:9c:55:4d:a3:e7:81:43:51:4d:
                    cb:89:6b:a1:c4:ee:99:55:05:10:cd:a6:bc:a1:fe:
                    c4:23:68:ee:8d:c5:d9:9e:01:93:30:dd:97:42:d6:
                    62:45:55:67:07:54:3a:53:3a:3f:88:35:a1:d6:8b:
                    38:8a:ce:11:b5:a6:2e:7c:da:93:c8:55:d4:cb:61:
                    ce:25:28:fc:37:98:c0:c5:2a:b0:e6:b4:de:37:93:
                    54:7e:48:70:d3:77:0d:ae:9f:18:dd:bc:df:78:4f:
                    f4:2f:65:17:a5:1b:79:4d:77:36:40:78:80:e1:9c:
                    0d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:73:DB:D7:EF:80:DC:D5:3E:B5:8F:D6:4B:6E:7B:69:FE:5D:1C:CE
            X509v3 Authority Key Identifier:
                keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:83:0c:ed:5c:91:0e:98:4e:b1:11:80:59:17:5f:8b:31:10:
         47:84:52:bb:d9:f0:bd:a9:fa:76:0e:a4:c6:07:5c:93:c0:16:
         7b:21:6f:00:6b:a5:42:0d:78:13:55:f5:d4:54:a3:ae:3e:c1:
         58:d1:d1:e7:a1:be:3e:b2:31:eb:6d:e4:7b:39:84:88:37:4d:
         f0:18:9e:1b:e2:3c:2c:20:44:bf:d6:e5:bf:cb:78:da:fe:2e:
         95:3b:cd:3e:ec:94:9f:14:bd:10:9f:a4:e1:17:2f:3a:47:1a:
         cb:5d:94:c7:9d:a3:b9:d0:cf:32:53:12:44:ff:da:bf:62:ee:
         12:d2:d1:0f:70:67:63:af:2d:35:15:b8:ee:15:50:3f:d7:76:
         07:b2:12:72:12:74:95:b5:f8:11:e3:16:af:3f:fb:6c:f7:1e:
         f0:2b:5f:69:a8:b6:e7:c3:0d:f0:97:85:c3:7e:21:53:23:e1:
         93:68:5e:ae:10:2c:78:93:93:50:6d:ee:6c:7f:7d:70:d2:f1:
         52:9b:8d:51:9b:0a:47:47:c4:5d:be:d9:09:f9:3f:2c:09:05:
         c0:1e:35:a7:5c:bf:b9:f6:e8:58:13:9f:03:d2:3a:a4:55:68:
         52:82:0f:37:e7:dc:2e:9e:93:57:c2:0e:e6:be:fe:bc:b4:b6:
         68:18:fa:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:02 2025 by rpki-client