Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
File:                     Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json)
Hash identifier:          KmF2pwLCQaDFMxFCaRwZfXKJOfB3moNd7VObeasvnI4=
Subject key identifier:   0E:4C:1A:BC:0B:5F:C7:D5:B4:72:F2:90:06:70:FB:7B:F7:11:CE:DF
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Certificate issuer:       /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial:       0198D9CE7A1763FA3122B53745F21A6C48C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
Manifest number:          164A
Signing time:             Sun 24 Aug 2025 02:00:44 +0000
Manifest this update:     Sun 24 Aug 2025 02:00:44 +0000
Manifest next update:     Mon 25 Aug 2025 02:00:44 +0000
Files and hashes:         1: AUgXKhms5sel_c-ikTQEBeiAHIk.roa (hash: nkhniPrHRdiqlVaDZb6XiBwOlDSdmietDMUaVI90HtM=)
                          2: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: NTacMuNpSChh94/3Wx5QUSeg8q6WiBfQvBkPdx+3Bmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 23:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d9:ce:7a:17:63:fa:31:22:b5:37:45:f2:1a:6c:48:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
        Validity
            Not Before: Aug 24 02:00:44 2025 GMT
            Not After : Aug 25 02:00:44 2025 GMT
        Subject: CN=0e4c1abc0b5fc7d5b472f2900670fb7bf711cedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7d:d8:47:97:3d:f1:10:a1:24:6e:4a:cd:b4:
                    e9:25:cf:a9:c2:ef:aa:35:1f:ed:8c:3d:4d:43:09:
                    6d:76:79:f1:06:8a:c7:2f:65:65:3c:6c:81:00:ae:
                    c0:c6:d5:12:bf:5c:a4:18:d7:3d:88:f5:f5:a7:9e:
                    68:70:1f:69:3a:b4:cc:4c:32:c9:94:27:25:43:e6:
                    cf:61:2a:87:d9:05:22:06:ea:bf:94:e7:d7:d1:c6:
                    8b:59:c7:7e:33:60:78:f7:53:ca:f2:47:62:5e:78:
                    b4:a1:12:97:c4:05:f6:4e:75:91:f6:e7:9a:0a:9d:
                    7b:02:25:3d:55:8d:dd:90:5b:71:b7:d1:1d:10:68:
                    1b:eb:1e:01:be:5d:12:e7:c0:dc:87:fc:11:92:70:
                    24:49:ff:b3:81:44:75:6b:15:22:17:02:61:d3:19:
                    3d:ca:82:94:14:49:b9:0c:8d:ea:32:4d:27:75:c9:
                    fb:50:34:0b:90:65:56:f9:88:9f:6d:51:4e:e6:54:
                    e9:e0:46:9f:41:d3:b6:d8:9d:a6:fd:7b:0c:7d:b5:
                    a3:77:20:09:0b:68:9d:6c:c7:fd:32:14:d8:82:58:
                    87:b1:f5:63:38:7a:e6:14:e5:98:c8:ff:23:6e:ae:
                    13:b4:25:1d:8f:e6:36:68:52:d9:34:9a:dc:e9:f7:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:4C:1A:BC:0B:5F:C7:D5:B4:72:F2:90:06:70:FB:7B:F7:11:CE:DF
            X509v3 Authority Key Identifier:
                keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:23:27:61:b0:57:58:ee:b2:e1:e1:fc:30:6d:02:88:d4:53:
         a8:56:fe:40:6b:ae:e0:f1:7d:d0:3e:30:63:ae:23:f9:13:ce:
         78:6e:cd:85:65:5c:55:d2:d5:42:d4:ac:e8:57:f7:06:85:f4:
         fd:60:04:2f:b5:3a:c4:25:f5:be:7e:51:25:d9:0f:f7:8f:fc:
         3e:5a:1d:b9:44:a8:f9:2f:9e:91:b8:92:66:5b:1a:b4:79:c3:
         c5:06:62:86:46:7e:e0:08:4d:6a:37:7d:fd:ba:06:07:2c:99:
         61:25:73:35:c4:42:32:23:16:f2:e2:a9:02:0e:13:99:bc:38:
         8d:e9:89:b9:0d:1d:a0:8f:f8:0e:6f:c1:b3:a8:51:7c:87:31:
         34:bb:f1:b9:4c:17:f9:37:04:d7:02:95:00:65:bf:ba:15:0f:
         75:5b:53:3e:e5:77:31:cf:9f:45:91:8f:f3:57:8c:d9:55:19:
         5a:ef:92:c1:34:0b:41:4d:08:24:bd:49:42:83:6e:b5:6c:00:
         ba:80:4d:54:af:48:f2:9c:1d:9a:83:d9:11:63:1a:9e:50:00:
         3c:a2:f7:05:43:8d:b6:55:c9:da:d6:bb:a0:67:2c:2b:5c:f1:
         61:99:72:08:7d:cb:3e:05:d8:ad:f3:a5:98:f6:31:34:68:d4:
         53:2b:cc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:39:41 2025 by rpki-client