Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
File:                     46GMDHrbmEtfd5d-CAComlHvu2M.mft (raw, json)
Hash identifier:          QGJUE3XeNTNe12mx5dfVgNwq555aE1WTUg2vH3Uzaxk=
Subject key identifier:   59:AC:73:00:C2:79:8D:8C:02:5A:4F:32:F7:16:07:5F:7B:46:33:71
Authority key identifier: E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
Certificate issuer:       /CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Certificate serial:       01984A0A1C2AB829C582460A964ADE2FE026
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
Manifest number:          06ED
Signing time:             Sun 27 Jul 2025 04:00:33 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:33 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:33 +0000
Files and hashes:         1: 46GMDHrbmEtfd5d-CAComlHvu2M.crl (hash: kSlkFNI5F8T/cPT18iVJAFqw/tuK324VI3DZBPYAwUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:1c:2a:b8:29:c5:82:46:0a:96:4a:de:2f:e0:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
        Validity
            Not Before: Jul 27 04:00:33 2025 GMT
            Not After : Jul 28 04:00:33 2025 GMT
        Subject: CN=59ac7300c2798d8c025a4f32f716075f7b463371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f4:6b:5e:5c:2f:99:91:dc:74:d2:a7:de:10:
                    69:f1:bd:e7:67:1f:03:c6:09:dc:03:37:6d:53:36:
                    6b:30:2d:b4:17:14:8c:30:71:1e:4b:14:db:c3:4c:
                    0f:11:4a:60:d6:79:cd:5f:11:7c:d5:29:a6:92:18:
                    e2:df:6d:c4:e1:fb:68:a1:29:b8:5c:05:fa:5f:fb:
                    ce:1e:f3:0c:cd:19:39:39:1f:10:d3:c5:42:14:54:
                    24:c0:95:2d:4d:20:80:ba:04:fc:d0:b9:1a:7b:41:
                    cd:9a:94:39:60:81:60:30:a3:d1:bf:0d:42:38:d2:
                    2f:04:75:80:74:d6:bf:e6:ab:64:70:aa:99:47:89:
                    02:a2:ea:94:12:bd:82:6c:03:86:95:2b:64:ae:9e:
                    66:9b:32:8b:19:dc:cf:45:b5:72:10:01:4a:68:9e:
                    d1:19:81:e6:12:6a:ba:7b:f3:9b:bb:84:e6:73:4c:
                    75:cb:31:49:b3:fb:80:48:0b:30:61:4c:86:4c:f4:
                    80:f4:fd:95:e1:a9:10:9a:27:eb:25:d0:c8:7e:e9:
                    da:cd:b3:e8:26:bd:94:42:0f:f6:50:7e:a3:3e:e6:
                    b7:0d:6c:0a:3f:d1:8c:4b:24:6d:71:4a:34:a6:10:
                    43:72:e6:54:ca:e3:2d:1e:44:2a:ad:b9:a1:63:e0:
                    42:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AC:73:00:C2:79:8D:8C:02:5A:4F:32:F7:16:07:5F:7B:46:33:71
            X509v3 Authority Key Identifier:
                keyid:E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:26:df:2b:64:4c:9c:c2:9b:9b:a2:5a:b1:9c:fb:31:f3:c6:
         cc:61:11:82:56:22:bc:e3:e8:82:85:a0:36:a3:72:fb:ec:5f:
         42:f5:b0:f7:1e:29:27:65:5d:95:62:35:f3:b0:23:4b:e7:c7:
         c8:50:e3:91:41:34:9a:09:2e:08:08:99:d9:e3:9e:d3:6d:f8:
         eb:8f:f5:99:31:1d:54:1f:a5:b3:fb:bd:e3:9c:eb:1a:c2:35:
         69:62:d7:0f:c8:94:c9:9d:0f:03:2b:7a:e5:85:b8:28:8b:d6:
         bd:48:c5:df:37:7b:2b:69:5e:26:28:7f:35:ba:2b:7b:a2:49:
         b2:e9:2e:94:64:30:91:fd:c4:51:9b:4b:ec:57:9e:e8:b8:e8:
         4c:ed:ee:5f:eb:67:af:2f:ac:1b:c7:4e:ff:99:91:11:01:6b:
         7f:d0:ac:b8:90:72:03:80:36:e3:7e:74:12:b1:c4:d1:cc:6f:
         7d:a9:92:e3:70:0b:22:fd:eb:21:73:1b:a9:93:ee:65:84:6a:
         6e:91:ee:ab:ba:10:11:94:28:a6:57:0b:64:b6:07:5e:59:3e:
         63:df:af:46:83:38:bf:54:f7:28:79:a9:8a:a5:6f:42:43:84:
         d0:69:80:a2:f6:2e:12:32:c9:33:48:30:02:b5:40:ed:ae:07:
         99:ce:6a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:41:43 2025 by rpki-client