Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
File:                     46ttsqw26Ykzq5momk2cFp6l77s.mft (raw, json)
Hash identifier:          ag/i/v6F9g8D/TUFL6Gx05e2827LbeXzxIBOnBDOW8c=
Subject key identifier:   66:69:32:33:0C:CE:4E:F0:01:54:F0:52:FB:5D:3A:8B:97:3C:6C:79
Authority key identifier: E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB
Certificate issuer:       /CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
Certificate serial:       019A4F62CF4663052FAC4DBA2375198D2E48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
Manifest number:          15EF
Signing time:             Tue 04 Nov 2025 15:01:06 +0000
Manifest this update:     Tue 04 Nov 2025 15:01:06 +0000
Manifest next update:     Wed 05 Nov 2025 15:01:06 +0000
Files and hashes:         1: 46ttsqw26Ykzq5momk2cFp6l77s.crl (hash: oWCi5ijx5EWge29ss751qtQ3tPSFaBGSMNVxzjTjfVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:cf:46:63:05:2f:ac:4d:ba:23:75:19:8d:2e:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
        Validity
            Not Before: Nov  4 15:01:06 2025 GMT
            Not After : Nov  5 15:01:06 2025 GMT
        Subject: CN=666932330cce4ef00154f052fb5d3a8b973c6c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:58:04:44:a1:41:c1:f5:0d:fc:ef:cc:77:ef:
                    7b:3b:c4:56:e5:66:f6:45:86:c8:bd:bd:64:23:07:
                    51:f2:e1:4e:88:db:ff:9c:68:32:f7:66:74:7e:9b:
                    35:46:7f:25:d7:fb:b4:2c:c2:cf:57:5d:99:07:10:
                    e9:b1:d4:02:cb:2f:00:41:06:44:07:ac:b7:91:8c:
                    36:b5:a9:dd:d2:bb:ec:08:fd:84:75:51:4e:56:c2:
                    e4:be:3c:eb:b4:dd:0f:d5:53:e1:1f:fd:86:22:59:
                    e5:d7:50:fb:8d:6f:25:5d:ed:60:37:b6:44:b8:46:
                    74:8a:b6:b3:03:82:a4:3c:49:33:58:9e:ae:15:12:
                    16:95:c5:bc:8f:56:66:9c:61:32:f5:18:6d:62:73:
                    39:3c:00:85:b0:de:a8:ff:64:b1:f6:ec:1f:57:2b:
                    5d:0e:04:62:f6:f0:8f:14:2c:0c:08:e6:fc:38:27:
                    c9:87:f2:b1:a9:03:d8:a1:de:47:ae:ef:4c:30:72:
                    53:31:46:0a:78:fe:1c:27:76:8c:ef:69:6d:df:5b:
                    f3:22:a3:18:ff:de:43:af:15:5e:4b:6e:51:0a:f2:
                    09:85:f1:76:8e:e0:5c:e6:84:e7:d1:8f:7a:2c:02:
                    fa:56:75:2c:dd:03:7d:47:d0:e5:30:3c:5c:69:79:
                    5b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:69:32:33:0C:CE:4E:F0:01:54:F0:52:FB:5D:3A:8B:97:3C:6C:79
            X509v3 Authority Key Identifier:
                keyid:E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:97:af:56:5f:49:36:01:8c:75:1b:63:4d:af:5c:ff:96:b2:
         24:0c:b0:06:12:ee:dd:88:bf:ad:c3:2d:54:b1:9e:2f:8a:da:
         02:0c:73:6e:f7:2e:c7:d4:0a:e4:62:fa:73:5c:32:d1:15:61:
         6e:38:5b:46:10:6e:92:b9:1b:cd:06:04:30:e3:95:75:a6:1d:
         33:7f:5f:91:60:b0:36:2c:08:b2:3c:ec:87:23:bb:45:c5:ed:
         75:85:4e:ce:b7:a8:48:b0:24:44:e8:0e:05:6b:13:ee:2b:98:
         fe:a8:73:72:e0:df:4d:83:93:6c:6a:b9:6f:55:a9:6a:4c:80:
         f5:80:21:1d:32:5a:c6:68:35:fb:d1:35:b5:73:62:a0:85:7a:
         92:de:17:65:f1:9d:90:e6:6c:99:5f:ec:cc:05:ee:97:c2:50:
         9f:2d:b4:eb:a2:5d:37:f2:94:32:1b:f7:a3:ff:5f:fd:37:ec:
         e5:85:cc:03:55:6d:e7:a6:b1:7e:04:fe:9c:1b:90:63:ef:5c:
         d5:17:21:df:1e:25:6f:c1:88:50:b6:b9:f3:27:d6:91:ea:72:
         ab:43:f4:2b:74:cd:57:22:36:30:c8:1f:36:92:16:cb:c8:0f:
         5f:5c:64:aa:de:1b:0d:da:eb:f4:41:5f:67:8b:77:e7:32:4e:
         7b:1b:ac:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:58:08 2025 by rpki-client