Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
File:                     6EKkZljB0BusjUOWHGtJ54jjzMM.mft (raw, json)
Hash identifier:          e837DbdKnmS8wk1zqaNvEz4LrrfYCSTYYN1SVOt1Yjk=
Subject key identifier:   46:ED:43:42:96:44:AC:C0:B7:9C:73:85:50:B1:59:EF:73:E6:A1:46
Authority key identifier: E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3
Certificate issuer:       /CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
Certificate serial:       0198D5F142A8D5B7AEC2265EC80CA318104B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
Manifest number:          164D
Signing time:             Sat 23 Aug 2025 08:00:14 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:14 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:14 +0000
Files and hashes:         1: 6EKkZljB0BusjUOWHGtJ54jjzMM.crl (hash: uK5XWPiz9nmK9grq0KuOyHNLi5DfsDOBNKR22bjNpHM=)
                          2: xANWJIQxy5Izrn9gOyePr5tbhgY.roa (hash: BAFdEGijvRbR7pMhm3hhAYe67gFmqJkY0ASzrXKygw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:42:a8:d5:b7:ae:c2:26:5e:c8:0c:a3:18:10:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e842a46658c1d01bac8d43961c6b49e788e3ccc3
        Validity
            Not Before: Aug 23 08:00:14 2025 GMT
            Not After : Aug 24 08:00:14 2025 GMT
        Subject: CN=46ed43429644acc0b79c738550b159ef73e6a146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:1d:7a:bb:44:9c:f4:86:49:ac:18:10:83:
                    93:bb:62:33:b2:d3:b3:0c:1e:75:98:10:21:66:bf:
                    04:bd:6d:83:6d:55:ed:a5:07:c9:bf:84:d4:44:ef:
                    b8:cb:68:75:83:cf:a2:f4:50:25:42:88:4a:74:af:
                    8e:5c:d6:c1:91:d9:d0:a0:bc:7b:b4:1f:e0:6b:db:
                    79:5e:58:46:2f:90:ed:67:ac:b6:5b:f7:91:94:03:
                    27:19:41:31:91:6e:c5:c9:c9:ae:32:37:d3:2d:6c:
                    4a:9a:c2:55:c2:c8:a5:77:83:f0:e9:6d:f7:6e:af:
                    be:3d:53:1c:6a:37:53:17:62:0b:7e:76:fb:55:1d:
                    fd:fb:60:4b:da:93:53:3a:9a:a6:eb:28:37:7d:61:
                    97:16:85:3c:1d:a6:2d:c4:e2:f9:8e:69:a1:2c:5f:
                    05:26:01:8e:8a:2f:50:89:6c:49:69:a4:49:f0:63:
                    46:4c:f6:da:d7:d5:63:91:28:51:9d:f9:7f:4c:54:
                    7c:20:15:34:61:3d:c9:f9:6a:7c:73:d0:0d:16:c9:
                    23:52:20:e9:bf:4a:60:ef:5e:03:b7:79:6b:8a:49:
                    03:71:2b:55:42:b9:71:0c:8c:6a:3b:39:7a:23:ef:
                    45:cc:17:bd:34:e9:73:47:7c:b6:55:9f:2c:2c:96:
                    ff:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:ED:43:42:96:44:AC:C0:B7:9C:73:85:50:B1:59:EF:73:E6:A1:46
            X509v3 Authority Key Identifier:
                keyid:E8:42:A4:66:58:C1:D0:1B:AC:8D:43:96:1C:6B:49:E7:88:E3:CC:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKkZljB0BusjUOWHGtJ54jjzMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cd092e-6beb-4037-8a5a-fae8d42ae5e5/1/6EKkZljB0BusjUOWHGtJ54jjzMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:c2:1c:c6:90:e1:00:d0:c8:d7:ea:ec:3b:f0:24:c4:0e:cb:
         c0:29:94:fc:34:7d:77:46:22:cc:12:31:8d:f9:fd:c3:66:27:
         31:7e:ad:14:5d:31:69:7b:88:33:21:af:ff:81:30:b1:ae:28:
         60:3c:cf:b4:11:48:73:f5:73:60:d3:ba:82:16:e1:68:06:81:
         44:e1:cd:f9:69:9a:14:54:24:e5:08:8e:00:83:16:07:0c:58:
         81:64:ee:50:5a:be:a4:d7:2c:26:24:96:c7:05:fc:25:f5:57:
         f9:4d:41:10:8e:f0:36:fa:f2:73:bc:f4:b5:2c:d7:89:90:89:
         bf:ed:b9:62:b9:24:c1:54:e2:67:3f:9e:95:89:20:b0:31:eb:
         33:55:98:1d:1d:13:15:be:cc:6e:d7:2a:be:cb:ea:20:bc:2b:
         c1:9b:29:c3:96:8a:0a:fc:0a:78:3b:d5:17:46:9f:f1:a5:d3:
         d9:8d:65:91:05:a6:62:95:cd:5a:19:eb:4b:6b:af:07:b8:ea:
         5e:43:06:79:5e:80:7f:95:13:f2:22:da:d0:b8:71:ef:47:b1:
         ef:e9:40:0a:0c:59:83:03:68:3c:0b:c5:fc:3c:77:3b:0a:c5:
         1b:fc:8d:69:8f:81:db:bb:09:c5:8d:9b:2e:61:ba:b6:ca:75:
         53:2b:9b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:28 2025 by rpki-client