Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
File:                     RRi4nH3OK17cBVgVFs_BnXoxdOg.mft (raw, json)
Hash identifier:          eUfT8Bf9HK//gWPJDnOc+oPDlbGAIuOhyl6Qb7s7rK8=
Subject key identifier:   46:F5:0F:F1:35:BA:0F:05:F3:E8:0A:47:C2:34:42:A1:68:75:78:51
Authority key identifier: 45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
Certificate issuer:       /CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Certificate serial:       0198D583E67A22EF85FB4D2D64CB599D2EBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
Manifest number:          146E
Signing time:             Sat 23 Aug 2025 06:00:47 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:47 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:47 +0000
Files and hashes:         1: RRi4nH3OK17cBVgVFs_BnXoxdOg.crl (hash: 4lAEp431Vnz6guvPcNdKvfAch+wByuN5hNVOkqP7jfM=)
                          2: qkuP3INuoQUlkGzQXsg6hNdv2PE.roa (hash: nbTS8K6lNcxMgwiUyLADYWPREZ9Nv1ZzLCUppLN19Wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:e6:7a:22:ef:85:fb:4d:2d:64:cb:59:9d:2e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
        Validity
            Not Before: Aug 23 06:00:47 2025 GMT
            Not After : Aug 24 06:00:47 2025 GMT
        Subject: CN=46f50ff135ba0f05f3e80a47c23442a168757851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e3:6d:70:2d:4b:74:31:20:dc:40:22:c4:3b:
                    44:4b:e7:c6:2a:4c:a9:84:e1:aa:95:c9:d5:dd:df:
                    8a:8a:11:55:78:1e:01:8c:e5:dd:a6:52:7d:4a:3e:
                    a4:3e:89:eb:9a:50:ef:c0:6c:8c:38:6a:12:25:af:
                    c8:45:e7:c6:c3:7c:b9:79:8c:45:60:1f:36:08:8a:
                    45:e0:f3:56:00:8a:49:6b:34:c1:44:8a:a1:cc:21:
                    a6:3e:58:27:da:8b:71:ac:85:c2:5a:82:5c:79:19:
                    85:d6:22:91:a4:7e:87:97:63:bf:fe:cc:46:ae:e7:
                    e8:04:14:72:46:c4:39:13:b3:41:fc:aa:0b:dd:c1:
                    e7:d1:92:99:d9:ad:9a:31:c4:59:53:25:29:67:4a:
                    bb:55:d2:97:1b:ec:c4:09:a9:9f:1f:fb:fa:1c:81:
                    fb:33:06:91:c1:ec:35:32:48:e8:89:2f:af:a7:aa:
                    86:b8:69:a3:6d:bf:28:ff:8c:ea:57:c7:6f:81:20:
                    f9:fe:06:f1:2b:cd:57:4d:f9:79:aa:f2:ce:fe:c1:
                    c6:d5:ce:35:ca:b3:a0:cd:fb:ca:f1:28:7b:b9:48:
                    ac:8c:91:a0:bf:33:4b:68:39:4c:d4:31:55:5d:ba:
                    90:b9:da:8d:cb:e7:3d:b0:e8:fd:b3:f5:ca:3c:6b:
                    3f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F5:0F:F1:35:BA:0F:05:F3:E8:0A:47:C2:34:42:A1:68:75:78:51
            X509v3 Authority Key Identifier:
                keyid:45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d0:07:7b:0e:66:5b:ae:95:7c:7f:94:a9:81:3e:de:3d:69:
         f3:e6:07:95:8c:0f:5e:3f:a6:eb:a5:79:2e:6b:b2:52:ed:c3:
         57:81:f8:7e:36:b8:66:44:80:2b:94:c2:27:b0:61:10:04:89:
         31:52:c0:56:36:1f:d7:31:e3:04:d7:bc:6d:58:ad:9a:98:9c:
         ee:08:19:8b:dd:74:7e:41:ed:85:a4:9d:64:00:c4:af:17:e5:
         8f:45:ef:a0:3e:94:85:a6:e4:3e:81:74:8e:ee:04:ff:80:3e:
         31:9d:60:59:13:38:97:61:b3:e5:66:89:91:26:30:b7:1d:51:
         3b:8f:5d:d8:ba:25:ff:33:ac:f0:00:47:ea:38:92:49:d9:42:
         7f:da:92:ac:9a:97:71:73:d9:62:be:60:10:57:d0:3a:bf:d0:
         11:4e:dd:e8:c1:d3:ac:c2:e9:68:bc:dc:0d:e3:21:ea:2b:45:
         e2:c3:22:2e:97:5e:91:53:dc:b5:88:b5:03:ff:5a:0c:2a:83:
         28:2d:b6:dd:ec:69:b6:eb:14:8d:be:5f:e5:ce:36:a1:f6:01:
         18:da:58:83:7e:6b:dc:83:6f:6b:5c:d2:1c:2c:cf:7c:d4:a6:
         3c:94:4a:0a:ab:6d:7f:7d:ee:fe:c8:8d:0c:f9:00:99:14:54:
         40:66:05:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:20 2025 by rpki-client