Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
File:                     46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json)
Hash identifier:          QPJ0xw3GfPhs0BRtD9he1kp+teSgoj+5a9UjyTewapA=
Subject key identifier:   76:0C:79:4D:3D:B7:27:33:C8:60:C8:A0:FE:28:EA:5B:27:07:EE:EF
Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
Certificate issuer:       /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Certificate serial:       0198D4A81766F8C3D77F5C5FA947D04F4F4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
Manifest number:          15DC
Signing time:             Sat 23 Aug 2025 02:00:42 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:42 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:42 +0000
Files and hashes:         1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: M6aVyYQzC6Dj+YFXL4PO/LnyoW/fr1bviOAl/U/WnjY=)
                          2: kM9y4GrDXnCdNW0cB_r7lGW0ZiE.roa (hash: zTejL3tH1JMvgJP62ZpXEO3alzMxsTDuTLqKj9I1/dA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:17:66:f8:c3:d7:7f:5c:5f:a9:47:d0:4f:4f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
        Validity
            Not Before: Aug 23 02:00:42 2025 GMT
            Not After : Aug 24 02:00:42 2025 GMT
        Subject: CN=760c794d3db72733c860c8a0fe28ea5b2707eeef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e4:a0:38:4d:3f:97:7c:17:38:22:52:3d:a1:
                    66:85:bd:87:ef:ea:0a:09:62:ee:7c:aa:de:e7:25:
                    91:c8:76:cc:43:70:db:90:92:6f:51:9a:5c:c1:a6:
                    de:9f:35:17:dc:64:37:7e:1e:fe:f2:29:bd:fd:5b:
                    c9:f7:5a:6e:97:ab:4b:fb:fb:61:a9:2e:c6:44:98:
                    b0:b8:50:4d:52:20:fc:d6:17:38:2a:ac:a0:0f:9f:
                    38:42:44:bc:5d:63:ec:f3:93:46:59:1f:66:98:ce:
                    77:86:51:fd:55:d9:5b:b4:45:a4:e3:d7:65:2e:97:
                    96:f9:ec:80:da:8b:b7:12:d2:59:b7:d0:dd:c6:2d:
                    76:4a:3a:e3:3d:d2:28:1e:a9:ac:19:74:10:5c:c3:
                    3d:ac:9d:11:81:44:54:b4:84:f4:5b:f1:e7:c7:6f:
                    24:42:99:07:a4:d7:d0:5e:c4:75:6d:b0:87:1b:ee:
                    73:86:9a:d2:40:a3:c5:cd:4d:7c:d9:18:f2:be:80:
                    63:58:c3:64:e8:84:e8:99:6b:3e:0d:84:46:86:98:
                    4e:6a:c8:f7:2c:a0:6b:ae:17:2e:51:ea:e3:a1:1d:
                    72:ce:e1:bd:0e:f2:58:f6:df:2c:53:3f:9e:c8:ad:
                    72:f3:fb:96:9a:0a:f8:e5:be:c0:3d:af:95:ac:0f:
                    57:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0C:79:4D:3D:B7:27:33:C8:60:C8:A0:FE:28:EA:5B:27:07:EE:EF
            X509v3 Authority Key Identifier:
                keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:1b:f6:f3:19:40:01:6a:84:61:b2:c7:49:a9:14:4c:b0:b1:
         7a:63:3d:89:4f:d3:63:c8:58:7d:a3:71:00:5f:62:be:2d:83:
         b9:4e:0e:27:b0:9b:a1:72:bb:29:dd:3e:74:7c:7e:d6:62:9b:
         64:49:e5:14:c5:d7:5e:11:37:3a:57:1a:ec:5f:cb:48:88:f3:
         cf:e3:05:aa:1a:1c:b9:ed:d2:fa:48:59:0e:80:5e:83:de:9d:
         fa:f4:dc:35:bf:ed:9d:8a:b0:3f:d3:45:7f:55:ed:90:12:2b:
         d8:27:58:90:ae:dc:61:af:f3:98:3c:f1:b4:44:2b:ac:d2:44:
         b6:95:1b:aa:31:5a:ac:8f:6c:c0:a2:34:fd:85:5e:88:d3:11:
         9b:e5:bd:c5:56:e9:38:b3:1c:2e:62:4d:13:59:4c:90:63:f3:
         fc:c4:5c:59:25:e8:17:bf:fa:3e:83:c8:c0:93:3f:4d:09:1f:
         82:63:c4:9b:3f:e1:04:61:ff:e1:36:74:4d:8e:36:c6:ca:e1:
         a0:d7:98:c9:74:d3:ee:2b:08:30:7f:85:8b:79:cc:43:d1:59:
         5e:cc:d3:63:f8:ac:db:33:5a:fa:cc:68:47:47:3f:46:24:80:
         b5:34:62:3c:46:77:f4:13:24:a7:c2:86:2c:50:b6:60:37:a3:
         3b:6e:01:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:09 2025 by rpki-client