Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
File:                     c46JPc00f32rX3DTUfj84d6qZdE.mft (raw, json)
Hash identifier:          x9qE956TsiGRWGg8d+xJigd1iYNuA26rUun16nEG3q4=
Subject key identifier:   E4:D9:F0:85:BA:76:E4:A3:94:13:79:33:F6:67:FB:A0:44:AB:1B:C3
Authority key identifier: 73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1
Certificate issuer:       /CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
Certificate serial:       01987A5243FFCA1CF42849722A1535A6D939
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
Manifest number:          1618
Signing time:             Tue 05 Aug 2025 13:01:08 +0000
Manifest this update:     Tue 05 Aug 2025 13:01:08 +0000
Manifest next update:     Wed 06 Aug 2025 13:01:08 +0000
Files and hashes:         1: 3ktEzDL0WvhnsuJm2C6DIk-mHBM.roa (hash: OJtb++yW5+MtXw5QSymaUjcZIRPMQ11YahPbPvwPK4Q=)
                          2: c46JPc00f32rX3DTUfj84d6qZdE.crl (hash: 3mMVGR7xUlh59swsL4024oUK0fzNb2YfF5EWCtUhM8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7a:52:43:ff:ca:1c:f4:28:49:72:2a:15:35:a6:d9:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=738e893dcd347f7dab5f70d351f8fce1deaa65d1
        Validity
            Not Before: Aug  5 13:01:08 2025 GMT
            Not After : Aug  6 13:01:08 2025 GMT
        Subject: CN=e4d9f085ba76e4a394137933f667fba044ab1bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:a8:ed:85:78:0a:08:e3:7c:49:de:72:39:
                    ba:5d:52:aa:3e:93:85:5b:79:f1:20:a3:3d:2d:e4:
                    82:2a:7c:bd:81:1e:22:c7:cc:c6:f5:d6:cc:c4:b4:
                    9d:a9:83:8d:73:8a:90:db:86:9e:72:d7:ea:80:45:
                    26:18:f3:a2:61:b5:72:58:16:ea:53:38:01:94:d0:
                    fd:e0:3f:d5:37:d1:2a:c8:e5:b8:29:90:9a:e6:56:
                    19:ea:20:2d:9d:42:9f:36:66:23:e5:96:d2:a7:fb:
                    d8:cd:ca:cb:28:34:37:c3:79:a6:2a:f8:7a:ac:12:
                    5f:9a:69:d0:d5:7a:76:98:2c:68:cb:b1:e5:62:78:
                    77:da:45:6b:ee:96:cb:c3:ad:40:4e:d0:29:35:21:
                    c2:7f:ec:7b:3c:70:42:6d:86:ef:3f:3e:72:04:f5:
                    19:5f:d0:d5:d2:5f:68:41:d3:71:77:d5:37:5b:39:
                    15:95:6d:7e:9e:57:f3:67:a4:a6:40:22:8e:06:e8:
                    43:3e:e1:c0:00:f5:01:7f:68:a8:ad:50:4a:4f:10:
                    b2:7b:0d:7c:33:85:b1:c0:4e:c2:57:33:ac:f6:4c:
                    36:34:fb:b5:ea:75:43:cd:18:21:82:0a:63:91:47:
                    83:b9:c2:2d:9e:16:29:96:c6:eb:74:ad:72:55:02:
                    2e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D9:F0:85:BA:76:E4:A3:94:13:79:33:F6:67:FB:A0:44:AB:1B:C3
            X509v3 Authority Key Identifier:
                keyid:73:8E:89:3D:CD:34:7F:7D:AB:5F:70:D3:51:F8:FC:E1:DE:AA:65:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c46JPc00f32rX3DTUfj84d6qZdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/255149-8c4b-4cd8-919f-77bb532228b4/1/c46JPc00f32rX3DTUfj84d6qZdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e1:ff:48:6b:c8:39:c6:ce:5c:69:61:32:88:bd:7b:01:05:
         d9:5f:b2:c9:97:bb:19:69:a4:06:8c:d9:c5:cc:b5:ab:a7:fd:
         f5:b8:ee:2e:ec:96:e3:18:95:ee:d6:7f:78:af:8d:0c:00:2c:
         06:bd:ac:25:64:83:21:d2:aa:5c:5a:31:a7:21:e9:14:27:25:
         f5:b7:a1:c3:d9:81:d6:21:16:0a:cf:c1:8d:94:24:47:9d:35:
         9d:af:36:26:3c:4f:4d:91:60:85:f1:50:9c:b3:70:01:68:1a:
         d6:51:ef:17:7e:77:bc:8e:32:ba:de:6a:e2:13:95:68:f2:44:
         89:f2:fa:f0:bf:bc:d7:8b:c3:06:3d:5b:6d:b4:5e:03:f7:03:
         ab:aa:b9:92:40:8b:04:06:5b:2f:ad:eb:81:35:ba:c1:c7:ff:
         99:a3:fd:0a:ad:67:01:04:7e:e0:94:2d:ff:13:4d:90:3d:ca:
         82:d6:ca:3c:12:1c:13:8d:41:16:98:85:a9:dc:b2:3d:c6:9c:
         38:59:cd:74:b5:96:83:b7:0e:bf:a0:c1:3a:70:50:b2:c6:12:
         8d:1b:bc:7f:2f:78:4c:df:3a:25:0b:2b:aa:9e:48:2e:d1:9a:
         ba:29:f5:6a:f7:c8:77:2f:1b:30:f4:16:13:5d:c7:29:47:a1:
         2d:bb:1c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:15:53 2025 by rpki-client