Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          QMdGEgaMc65lqlFy8z3OPkC4k3SKCdLWA4FZZau6pFs=
Subject key identifier:   2E:DE:3D:8E:4E:33:A2:67:3F:7B:8E:D6:D1:69:2F:E3:D7:8C:37:66
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       0198D4740C939327262CC08A6C263F5CDD70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 01:03:51 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:51 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:51 +0000
Files and hashes:         1: L0dTKkQLJ3uzLHQGVfykgpUct-Y.roa (hash: 5V6u+yE0dUBJcNB/BjBYWG3G1jW8CFnCJRPOVXm/+Pc=)
                          2: MQbRmyMiZ7drfjUV2srkSRdezP4.roa (hash: gjEdlX/wGs/3ibPMlMpi8lsSgsJHw2rwLC0B8NaMJ5Y=)
                          3: QZzbQhQ_hTZIcpg_dJkoU6Xnnto.roa (hash: ldOsJ7e5BAcbKryAIK3bxjb3zV/1t/RqgjAXr4tG6fc=)
                          4: RkiK4rh0-E_-W_HqKwRMEYj0Jsc.roa (hash: gqhP/twOb4neptA72hsuXyc44XyhAEB7mRcgXtdjn0o=)
                          5: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: Tw43WCs4MyV5eXes+KWyGI1GpJcBn+zBkc+Dr6wayH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:0c:93:93:27:26:2c:c0:8a:6c:26:3f:5c:dd:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Aug 23 01:03:51 2025 GMT
            Not After : Aug 24 01:03:51 2025 GMT
        Subject: CN=2ede3d8e4e33a2673f7b8ed6d1692fe3d78c3766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7d:32:88:a0:f3:dc:46:1f:d9:f8:41:38:39:
                    88:03:b6:23:25:49:02:d7:da:41:4a:ac:37:fe:a7:
                    cc:12:89:b9:ec:32:09:eb:9b:4a:8e:36:e2:e3:81:
                    19:03:17:ae:68:57:42:93:b6:bf:a1:8d:59:f2:ff:
                    c7:8c:9d:ee:a8:2c:46:04:19:5e:2b:b8:89:9e:d9:
                    25:71:0e:f7:c6:3f:06:42:aa:3a:69:88:62:d9:83:
                    4a:2b:4d:31:73:3a:0a:17:9d:d8:fa:2e:1f:1b:b1:
                    2b:d8:44:f1:34:f2:94:da:e4:d0:24:ae:ff:9a:6b:
                    d3:dc:c8:e0:41:a0:f7:6b:fa:6e:00:cc:32:3c:37:
                    39:cc:5d:39:f3:81:d0:7f:53:77:51:32:1f:43:ec:
                    36:8c:1f:10:c3:bf:89:6d:28:81:16:d3:2e:f9:e6:
                    67:9d:21:f1:9c:28:3b:db:d5:44:4c:4a:3e:7d:0a:
                    86:6c:a8:20:be:30:d4:b4:43:01:51:8d:fe:bd:86:
                    7c:8e:00:a8:17:ca:ae:34:f9:b3:4a:23:0f:7e:80:
                    71:0f:e0:19:da:59:16:18:f8:2b:76:b5:c9:35:01:
                    94:f9:a2:bc:21:14:60:ca:e2:6a:7f:b2:0c:ee:27:
                    1c:a9:dc:a5:0b:d4:9a:c0:a1:78:63:cb:ae:15:a2:
                    92:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DE:3D:8E:4E:33:A2:67:3F:7B:8E:D6:D1:69:2F:E3:D7:8C:37:66
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:8e:71:2f:65:d4:13:a7:18:87:3c:6b:51:8c:59:91:5d:d6:
         fa:dd:3b:d9:44:bf:ac:42:e1:d1:38:24:28:10:6d:65:67:46:
         7a:5c:05:3f:65:db:5e:c8:29:5c:d3:d3:24:13:9c:d9:ea:3e:
         83:22:4d:72:60:8a:1e:d7:21:e4:2a:9e:5d:86:b3:fc:77:9c:
         79:2a:87:5c:49:4c:01:08:70:08:32:61:fa:4d:ba:27:41:13:
         27:38:b3:29:c4:47:8d:5c:21:37:fc:38:ca:3d:d8:8f:59:d9:
         7e:96:c4:84:fe:09:f9:a0:02:e3:a4:5d:bc:f2:66:65:30:b4:
         77:ee:98:24:53:8f:2e:0c:17:f2:f9:90:0c:b8:1f:4b:61:e4:
         5f:d8:67:a2:f5:29:15:70:fa:3d:d7:d5:d7:3f:0b:87:75:61:
         5e:00:06:df:44:67:3e:fa:4c:29:a6:9c:49:42:52:3d:50:ed:
         c6:90:a1:7a:2c:95:a5:80:cd:d9:c3:04:fd:19:85:b9:90:e8:
         81:c5:25:b8:69:c5:2a:38:1d:d5:40:8c:90:0e:64:f3:04:39:
         23:77:35:84:00:75:0d:76:90:3f:b9:88:2c:aa:c5:fe:f7:7b:
         74:a7:8a:32:bf:0f:ee:d8:d2:8a:96:a3:5d:a5:a0:eb:c1:ad:
         1a:fe:ab:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:52 2025 by rpki-client