Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
File:                     Rk2NgKs3p1e503SClf5mn04JOyM.mft (raw, json)
Hash identifier:          rKifLRhFrQ3Bt4MZX8qCZKrsbatAdkwL2NE1GTU+LeY=
Subject key identifier:   E9:2F:87:D0:B3:A7:B0:64:60:AD:69:1C:17:E7:42:22:63:E0:E0:6C
Authority key identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
Certificate issuer:       /CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Certificate serial:       019848893EF1E7B00E436CE29C82FA8EB83F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
Manifest number:          1049
Signing time:             Sat 26 Jul 2025 21:00:10 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:10 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:10 +0000
Files and hashes:         1: Rk2NgKs3p1e503SClf5mn04JOyM.crl (hash: lJmL5yK9KxFWFgGVUbp9cI5xPJwfZ7DVx8FDMt8yxsA=)
                          2: xJnPr2RyvvePQVXn-sWgNe1aA9M.roa (hash: yJ4J4gghIQZp1yxWa+HqkTzf9ODjqBVN9nX0iZFZokQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:3e:f1:e7:b0:0e:43:6c:e2:9c:82:fa:8e:b8:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464d8d80ab37a757b9d3748295fe669f4e093b23
        Validity
            Not Before: Jul 26 21:00:10 2025 GMT
            Not After : Jul 27 21:00:10 2025 GMT
        Subject: CN=e92f87d0b3a7b06460ad691c17e7422263e0e06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:07:0c:76:28:e1:4b:c0:a5:ea:f3:f9:7e:d1:
                    29:09:5d:1a:21:a9:bd:58:cf:73:0f:c1:89:bc:5f:
                    69:1a:b5:f5:14:93:b0:bf:86:32:71:45:b9:1d:85:
                    c1:76:ab:ce:c5:66:fa:f1:3b:5b:c9:a3:3c:c0:1b:
                    91:86:95:86:f3:5e:97:27:85:13:66:a0:c8:1f:ce:
                    ec:58:90:52:f1:68:91:d9:9c:53:e5:b9:ae:e4:4b:
                    b0:67:a0:06:72:f3:60:36:6c:b3:cf:00:f9:f5:1d:
                    7f:09:fa:14:05:25:73:11:64:0e:5f:7a:f5:42:8d:
                    6a:a1:22:bd:b5:e4:91:1c:20:44:a7:20:29:07:5e:
                    85:a7:18:77:a9:28:74:20:44:8f:ac:95:41:80:57:
                    53:30:89:ee:00:bc:38:a9:ae:74:d1:4a:f3:1d:61:
                    19:54:31:9b:cb:6f:60:a5:b2:fe:df:16:a9:a8:d1:
                    87:cd:e0:87:1a:0b:16:e3:f9:da:98:51:32:d9:5d:
                    92:c1:02:f6:e1:f5:55:ff:54:f2:6d:1c:a3:7a:a0:
                    f9:90:c7:2d:d9:ae:5e:22:52:a8:b5:bd:20:d4:53:
                    4b:1b:3f:b6:d4:3b:a4:e3:ed:89:09:d5:ed:19:38:
                    8b:a1:1b:fc:f9:2d:12:6e:b0:85:ca:ca:57:ca:e3:
                    83:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2F:87:D0:B3:A7:B0:64:60:AD:69:1C:17:E7:42:22:63:E0:E0:6C
            X509v3 Authority Key Identifier:
                keyid:46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:f9:ff:03:d6:2a:93:69:21:fd:b8:33:ad:c9:f3:30:19:eb:
         8d:d1:03:86:1f:ca:48:78:57:35:b9:48:a7:e2:ed:69:fd:a3:
         78:0a:66:d5:ad:85:27:ca:09:8b:b3:ef:4b:13:bf:a6:66:12:
         f1:02:90:23:c0:6d:27:50:4d:f8:eb:70:39:14:d1:f7:d7:e2:
         b5:32:1c:19:ae:4e:2f:b4:c7:39:53:1d:8f:49:da:f8:d8:6d:
         30:3e:09:82:68:3e:b7:0f:12:de:50:ce:2a:d0:bf:b6:8d:9d:
         1c:ff:ae:56:2d:73:58:39:13:4f:66:9a:d2:a0:b6:f4:ba:90:
         bc:26:85:17:98:1c:c8:27:63:d3:1f:68:dd:89:11:62:43:52:
         cd:a8:85:e3:e5:19:79:02:60:82:63:34:9c:f1:f3:70:34:02:
         7d:50:6a:f7:b4:3c:07:7f:bc:0b:85:ac:27:b4:5d:f4:99:d5:
         c0:d9:77:2c:a1:01:b3:cd:83:dc:6a:ff:79:1a:b9:19:95:ca:
         58:7a:f5:1d:91:67:7b:27:b6:bb:af:c8:96:ac:c1:0b:69:cd:
         fa:92:68:91:fb:19:23:94:07:24:66:c9:12:4f:48:48:d4:c6:
         e6:66:87:60:ad:9a:26:43:1c:4a:d2:cc:02:63:33:c9:08:1c:
         5f:b1:18:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:23:12 2025 by rpki-client