Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
File:                     46GMDHrbmEtfd5d-CAComlHvu2M.mft (raw, json)
Hash identifier:          jnLVYVAJ544M06nWlj9P8tngjfElXM98qHv8CKRE47Q=
Subject key identifier:   FC:55:F8:86:42:4F:8E:5C:33:56:5D:66:B9:61:68:2E:2D:55:45:B3
Authority key identifier: E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
Certificate issuer:       /CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Certificate serial:       0196BC3760ACE1087BE30C89E42EBF872837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
Manifest number:          061F
Signing time:             Sat 10 May 2025 22:01:07 +0000
Manifest this update:     Sat 10 May 2025 22:01:07 +0000
Manifest next update:     Sun 11 May 2025 22:01:07 +0000
Files and hashes:         1: 46GMDHrbmEtfd5d-CAComlHvu2M.crl (hash: KWd1UosbCoAPyV6IAYxw5h8oqfVhnF/C0S5uGwIEGiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:37:60:ac:e1:08:7b:e3:0c:89:e4:2e:bf:87:28:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
        Validity
            Not Before: May 10 22:01:07 2025 GMT
            Not After : May 11 22:01:07 2025 GMT
        Subject: CN=fc55f886424f8e5c33565d66b961682e2d5545b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6b:e9:61:f3:74:66:8d:11:ac:e1:c9:73:72:
                    a0:eb:ab:fd:38:2b:3e:1e:66:a2:93:54:74:99:f2:
                    97:1c:0b:4d:ec:72:54:a7:d2:68:fa:32:3d:1b:3f:
                    85:e5:b3:e0:78:77:46:69:40:bc:c9:6a:14:06:fe:
                    9e:11:f1:d0:f9:22:7e:8c:c0:6e:3e:eb:15:04:6f:
                    69:42:93:ae:0c:64:be:3b:5c:1f:7f:c3:bc:a2:26:
                    48:4f:3a:3d:7b:89:d7:77:2f:4f:2f:bb:c2:df:1d:
                    1a:d2:be:73:46:d0:81:e9:25:64:81:41:a3:84:b2:
                    73:84:90:2c:91:02:39:e4:01:db:16:9b:ff:aa:c1:
                    35:e3:4b:ae:59:11:d6:a3:e5:74:4f:30:96:66:79:
                    d8:fa:07:5b:73:63:68:71:11:fa:f0:13:c8:0d:4c:
                    ad:55:3d:af:0f:e0:82:9a:1b:b1:81:97:0e:02:9f:
                    35:0c:e0:b6:c4:75:ec:48:23:74:45:e7:9e:98:35:
                    64:77:66:91:36:61:38:7f:f9:13:d8:6c:b0:cb:54:
                    1e:61:72:8f:72:23:bb:76:f8:f8:0e:04:04:af:ff:
                    a2:ad:82:9e:e8:6e:9b:25:fe:fa:37:de:8e:d9:16:
                    a6:a0:a3:5e:d2:89:ac:a6:8c:24:ad:97:c4:33:a5:
                    e6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:55:F8:86:42:4F:8E:5C:33:56:5D:66:B9:61:68:2E:2D:55:45:B3
            X509v3 Authority Key Identifier:
                keyid:E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:79:11:97:eb:b0:00:46:f4:54:4c:01:b9:0a:08:7c:15:8c:
         c5:e4:eb:44:83:1c:12:15:4a:56:bd:ee:c2:d7:24:07:67:ec:
         99:bd:bf:a3:43:46:04:81:b9:32:f1:3e:d0:84:6f:6a:89:09:
         38:50:47:40:b2:65:20:d0:39:34:d0:7c:e0:cf:27:c9:ee:78:
         df:b1:5b:0a:53:0f:e5:59:ec:30:f6:42:1a:c6:6f:31:38:8e:
         26:33:55:3b:df:43:9e:81:54:c0:4a:02:8b:13:82:01:b0:e5:
         73:c0:ee:f7:a9:90:91:a5:ad:d4:2c:b8:9e:b9:3a:6c:1e:ec:
         51:d7:14:a4:bd:e2:69:95:f5:14:d9:7c:d0:5c:a8:ce:28:c8:
         b6:13:a6:bb:cd:b6:5b:f7:f1:5b:47:a9:15:bb:41:5d:c1:5d:
         4a:1e:08:68:c1:64:ed:27:91:62:22:97:c3:12:ee:16:af:60:
         b9:d5:50:b7:f3:b8:18:0e:19:65:c5:9b:29:46:92:49:51:04:
         88:aa:4c:39:99:0d:cf:68:a2:53:c7:c7:4b:55:0f:12:0b:89:
         6a:7a:e2:c2:d5:4d:13:22:3b:bd:7e:ba:46:3f:fc:d8:11:2d:
         34:9a:fc:3b:a8:2c:54:2e:8d:b0:ce:ab:03:3b:84:76:bd:f4:
         39:06:bc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:10:29 2025 by rpki-client