Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
File:                     Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json)
Hash identifier:          aMsJgrG0Qilaegnp0LwH1KP8CgljoR2n4bzrW6uGP7I=
Subject key identifier:   13:D6:01:C1:3A:84:13:63:BF:6E:29:3D:2B:1E:B1:7A:FE:62:00:9D
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Certificate issuer:       /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial:       0198906C335AEFFC3575073FF24CA102DECD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
Manifest number:          1624
Signing time:             Sat 09 Aug 2025 20:01:06 +0000
Manifest this update:     Sat 09 Aug 2025 20:01:06 +0000
Manifest next update:     Sun 10 Aug 2025 20:01:06 +0000
Files and hashes:         1: AUgXKhms5sel_c-ikTQEBeiAHIk.roa (hash: nkhniPrHRdiqlVaDZb6XiBwOlDSdmietDMUaVI90HtM=)
                          2: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: lJA2Z/5zRFaLIc6bH2dcbkDvyUTmYCQbpIBAoN9k1/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 20:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:6c:33:5a:ef:fc:35:75:07:3f:f2:4c:a1:02:de:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
        Validity
            Not Before: Aug  9 20:01:06 2025 GMT
            Not After : Aug 10 20:01:06 2025 GMT
        Subject: CN=13d601c13a841363bf6e293d2b1eb17afe62009d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:cb:85:e0:0c:39:c7:29:91:93:2f:bc:f9:
                    77:01:75:69:aa:47:dc:7d:b3:49:c5:c6:d1:52:75:
                    20:f3:a8:32:fe:4e:5d:85:75:4e:18:bc:c9:15:19:
                    92:29:11:51:be:28:13:5c:83:7e:a7:d4:46:6f:3c:
                    37:b3:7e:fb:80:c3:3a:8d:6f:07:57:9e:cc:78:14:
                    ed:ee:07:88:71:48:6b:22:58:98:86:80:e8:79:f9:
                    5d:d0:cf:64:64:ce:0a:70:93:dc:61:51:42:a9:21:
                    23:e1:c5:94:e8:3a:0f:29:fe:96:15:4d:63:26:56:
                    42:46:2b:f7:56:cc:42:83:37:14:68:6d:25:7c:b0:
                    3e:d2:24:a4:b1:b9:0f:39:2d:26:05:ea:ee:cc:7a:
                    bf:f7:d6:35:57:54:6c:6f:5f:55:2a:19:82:0e:03:
                    a1:ff:5c:e9:22:24:df:47:80:dc:46:0c:e9:68:53:
                    29:1c:4a:bb:14:dd:32:cf:56:dc:a6:8a:66:39:c5:
                    96:a6:22:f2:9b:1a:7e:db:c6:46:ec:45:e1:f6:7a:
                    a2:6a:56:13:db:70:46:d3:9f:d1:80:ab:90:24:0a:
                    90:f2:58:90:07:e3:c2:7d:a4:5e:b9:b8:5a:c3:9c:
                    d9:d0:d6:f4:99:15:87:90:94:5d:13:3b:8b:6e:fc:
                    1f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D6:01:C1:3A:84:13:63:BF:6E:29:3D:2B:1E:B1:7A:FE:62:00:9D
            X509v3 Authority Key Identifier:
                keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:94:51:bb:62:ca:4c:79:ce:85:8a:35:75:18:91:49:56:6a:
         29:59:6f:eb:9a:f4:5a:c0:72:78:30:ef:22:d5:79:6d:ea:da:
         7f:09:0a:25:de:4f:c6:ad:e2:a7:17:fe:e4:cc:bc:8d:1f:2a:
         89:48:a8:59:2d:b2:b3:3b:df:06:48:7d:71:1c:9f:df:4d:00:
         4b:d0:c8:46:66:91:e1:2e:ee:2e:76:47:ac:9e:e6:58:07:80:
         30:45:c8:30:fa:64:bf:00:9d:90:88:cf:04:7e:11:0a:4a:a2:
         ca:ee:03:0f:6f:87:5c:28:56:63:0c:c0:d4:e0:21:12:90:d3:
         a6:8c:c2:65:c5:03:af:a0:5b:e4:9a:24:0f:15:c6:56:4c:3c:
         d0:0d:29:40:f5:1e:62:d3:97:ed:8f:bb:8d:80:4a:b0:83:ff:
         74:12:80:c4:83:2d:0d:79:29:85:31:1a:f7:ff:c5:35:72:d6:
         6b:2b:29:6b:ee:49:79:e0:73:92:b8:59:f8:71:a3:d3:76:56:
         25:1b:6d:e8:8d:76:58:29:fa:58:35:72:3e:75:a6:34:e9:83:
         05:11:be:7f:72:8e:fd:4a:ed:9d:14:2a:a0:d8:07:f1:a9:56:
         c0:3e:32:af:f4:11:b0:3d:ba:0a:ff:d2:17:ed:c6:6d:a7:9f:
         c3:cb:0f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:44 2025 by rpki-client