Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
File:                     c46JPc00f32rX3DTUfj84d6qZdE.mft (raw, json)
Hash identifier:          7yRUglYQOy+MgcN8RjaHNKNBsR6QIHfxVanE2L1osz0=
Subject key identifier:   66:09:5A:95:4E:E9:6A:2E:2D:AD:46:D1:95:E9:6B:23:1B:F0:7F:53
Authority key identifier: 73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1
Certificate issuer:       /CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
Certificate serial:       0198D515B155B5DB68F7F919AAEF157AEB34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 04:00:25 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:25 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:25 +0000
Files and hashes:         1: 3ktEzDL0WvhnsuJm2C6DIk-mHBM.roa (hash: OJtb++yW5+MtXw5QSymaUjcZIRPMQ11YahPbPvwPK4Q=)
                          2: c46JPc00f32rX3DTUfj84d6qZdE.crl (hash: OBChCkYpSKVKCvS1TMMMd0iVSKf2reMPu0bbAJynqWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:b1:55:b5:db:68:f7:f9:19:aa:ef:15:7a:eb:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
        Validity
            Not Before: Aug 23 04:00:25 2025 GMT
            Not After : Aug 24 04:00:25 2025 GMT
        Subject: CN=66095a954ee96a2e2dad46d195e96b231bf07f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:20:9e:e1:b8:02:91:5d:88:3d:da:df:69:1a:
                    ff:04:c3:f3:88:a9:cd:a9:81:ce:a2:ab:a6:72:a6:
                    eb:52:c3:3e:8b:43:93:de:52:a8:17:9b:01:49:7b:
                    ea:15:51:e7:1c:fa:c0:ea:1c:db:28:3f:50:78:67:
                    e4:00:6a:3b:f5:6a:bb:0b:7c:ab:ee:06:61:aa:34:
                    eb:9d:93:ce:67:8b:f8:e7:45:40:07:a1:d4:c1:41:
                    4f:01:ec:3c:6f:ac:c7:e2:bd:40:f9:54:91:9e:6b:
                    43:0a:b4:cb:26:0f:96:e8:2c:13:d1:39:26:9c:66:
                    cf:9c:cb:83:34:73:36:fd:dc:83:63:69:78:35:01:
                    a8:9e:73:5d:b6:14:af:46:f9:35:dd:d6:9c:f8:1e:
                    d1:94:c7:b2:b8:57:4b:fc:c0:85:b5:8e:cf:ed:6e:
                    61:84:46:9a:30:b3:79:c1:71:5f:96:9c:6c:63:89:
                    ee:fb:7b:d0:88:17:a0:48:a0:19:5f:e2:f0:ce:fc:
                    77:3a:0d:75:a6:d6:6c:2a:3f:8d:54:5e:f8:c0:fb:
                    21:fd:0c:98:d0:71:3f:3c:46:f1:1f:f1:c4:e4:63:
                    db:10:90:e8:b0:75:e0:fd:26:1a:a5:1a:2e:dc:7c:
                    30:c3:33:9a:bc:c3:1a:df:15:fb:42:2c:05:85:10:
                    b8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:09:5A:95:4E:E9:6A:2E:2D:AD:46:D1:95:E9:6B:23:1B:F0:7F:53
            X509v3 Authority Key Identifier:
                keyid:73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:5a:4b:b9:6f:35:39:c8:3d:dd:5c:9b:90:d0:47:d4:34:e5:
         a6:fc:44:64:88:99:8e:fe:57:ee:60:6f:ca:06:6a:ae:90:10:
         ab:03:5f:7f:ae:db:f0:c2:54:bd:9a:ad:b8:84:58:f1:30:4a:
         c7:8b:f7:8f:5d:37:a4:9d:46:15:ce:b1:d8:c2:b0:f1:d1:fc:
         22:5a:83:f3:8a:14:e6:2b:88:34:61:69:60:ec:4b:01:3b:cc:
         57:1e:d5:0f:03:19:0c:21:06:eb:75:23:75:b3:b5:fd:90:c6:
         fa:59:73:a3:23:f8:2b:4d:91:dd:8e:cf:d3:ae:42:14:87:56:
         5c:26:f0:8a:d8:ef:81:8b:e3:55:0d:14:7f:83:c0:f7:31:1a:
         f9:ed:a7:e0:50:c1:78:8b:e1:cd:b5:87:58:b4:8b:1a:19:cf:
         91:a4:32:04:63:3a:26:32:eb:ea:e7:c9:f7:e0:5b:bc:eb:c6:
         14:af:da:dc:96:58:d9:be:6f:89:7c:b4:0d:38:66:6e:7a:a5:
         6d:4c:15:20:32:14:87:57:4a:e1:36:37:43:3e:63:b9:62:41:
         51:ee:54:07:17:0b:ab:41:32:42:cc:10:bd:f6:a9:fc:43:b9:
         c1:7b:8e:46:82:b5:4e:31:14:1b:ae:7f:b5:b0:ae:0d:70:48:
         42:2b:4f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:04:05 2025 by rpki-client