Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
File:                     46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json)
Hash identifier:          xRbaScmkCzp4480gHnmgSIuMDIkhtUsGDI3kHT86e2c=
Subject key identifier:   22:42:DB:AF:2F:9B:EC:E0:72:69:34:0F:5E:96:64:A1:9A:B7:A3:3A
Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
Certificate issuer:       /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Certificate serial:       0197C64AD5D0B99E175B298D2C12C4C78963
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
Manifest number:          1550
Signing time:             Tue 01 Jul 2025 14:01:22 +0000
Manifest this update:     Tue 01 Jul 2025 14:01:22 +0000
Manifest next update:     Wed 02 Jul 2025 14:01:22 +0000
Files and hashes:         1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: x7ZWMgLtw2YAK3wUZS8CMlCMkLaeSZ6Z4hcq9WUghjc=)
                          2: kM9y4GrDXnCdNW0cB_r7lGW0ZiE.roa (hash: zTejL3tH1JMvgJP62ZpXEO3alzMxsTDuTLqKj9I1/dA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:4a:d5:d0:b9:9e:17:5b:29:8d:2c:12:c4:c7:89:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
        Validity
            Not Before: Jul  1 14:01:22 2025 GMT
            Not After : Jul  2 14:01:22 2025 GMT
        Subject: CN=2242dbaf2f9bece07269340f5e9664a19ab7a33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c8:e1:0f:f7:d8:6b:bf:1c:af:e6:b8:ac:32:
                    85:1d:b6:f5:39:a6:7b:35:df:cb:b5:ad:29:e7:f0:
                    5e:bd:59:63:a3:5b:fc:f9:0e:78:8c:44:ff:40:83:
                    6a:57:75:c8:04:4b:7a:52:be:39:43:11:36:9f:6c:
                    d3:ed:f6:16:b9:d7:25:60:44:cf:b6:3d:8c:dc:5a:
                    fb:91:e5:8b:02:a5:1b:24:ba:b5:6f:d6:14:02:ba:
                    80:85:00:79:12:f5:b1:3b:6f:f2:f4:b2:fd:26:7f:
                    04:48:f3:41:24:4f:8e:9a:37:29:04:aa:bf:de:3e:
                    8a:4d:ca:3e:14:30:3a:f2:9a:a4:4c:b6:f8:8b:50:
                    01:57:c9:e6:90:f7:14:93:c4:9e:47:1d:f2:0d:23:
                    88:63:12:48:51:be:09:48:da:88:3f:9a:ca:e6:99:
                    3a:dd:a2:c3:c0:6f:26:3a:97:34:b1:61:85:18:e9:
                    53:2b:6d:35:e6:eb:7f:eb:c7:04:dd:f8:61:70:9d:
                    02:bb:60:98:48:e8:a6:28:e7:89:09:b8:0f:3e:4f:
                    9c:91:9a:8c:80:ed:a2:78:00:f7:ea:c0:f0:34:c8:
                    9a:67:f0:c0:97:ca:b9:19:33:80:55:18:82:c5:55:
                    68:c2:22:40:76:f6:09:33:89:3a:02:60:b7:43:96:
                    9e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:42:DB:AF:2F:9B:EC:E0:72:69:34:0F:5E:96:64:A1:9A:B7:A3:3A
            X509v3 Authority Key Identifier:
                keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:3a:d9:c6:08:08:f2:1c:de:e1:e6:cf:59:e0:06:50:ac:f2:
         b5:c8:50:0d:e7:10:bc:88:9a:e6:9a:2c:6a:c2:65:5d:fc:a0:
         b4:c9:ce:50:9d:b9:99:1c:10:43:ca:f4:55:76:f9:75:84:51:
         1b:86:b4:35:bb:51:9c:94:01:76:16:17:f7:dc:aa:96:52:3c:
         f2:c9:ad:7e:65:80:eb:c0:aa:06:6b:87:6c:0f:c5:23:03:f9:
         f5:fd:5d:60:fb:54:51:8b:6c:58:6e:29:46:d7:6d:30:c1:f9:
         8b:36:f2:2f:4e:65:87:bb:22:81:3d:9d:e0:75:67:96:45:08:
         50:a0:db:a0:76:ef:ad:40:20:e8:f2:a8:cc:76:8e:24:4f:6d:
         70:f3:62:72:b6:10:0b:2a:8a:30:9b:5a:87:fc:cb:1b:4b:c9:
         1a:25:c1:62:5e:25:a4:81:e2:f5:b5:af:c4:c5:44:dd:57:26:
         01:a3:a0:29:a3:87:16:ad:dd:26:ae:fa:34:52:96:1d:78:d1:
         47:a3:a9:8e:12:9f:aa:2b:91:2e:9c:bd:c8:db:d9:7d:44:d8:
         23:02:36:cc:24:2b:22:1e:23:1f:5b:c6:00:5c:60:3c:ff:aa:
         71:75:7f:cd:90:cb:70:7a:e4:66:be:22:b8:4f:ca:10:1b:60:
         e4:66:7e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:18:13 2025 by rpki-client