Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
File:                     46ttsqw26Ykzq5momk2cFp6l77s.mft (raw, json)
Hash identifier:          kH0iY0mL+CPYlZOLRG5hPulB6BeksRzmsTelzJ338hA=
Subject key identifier:   AF:26:64:5F:CE:3A:21:AF:A7:C2:D0:FD:50:73:5F:27:34:B1:47:0D
Authority key identifier: E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB
Certificate issuer:       /CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
Certificate serial:       019748F9DC60E7F4E8AC8571E3B999002C5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
Manifest number:          145E
Signing time:             Sat 07 Jun 2025 06:00:23 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:23 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:23 +0000
Files and hashes:         1: 46ttsqw26Ykzq5momk2cFp6l77s.crl (hash: ZyGabgEm8Kih+kkHjHp+ktrTnpHRObQPZ5R2nAWgshI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:dc:60:e7:f4:e8:ac:85:71:e3:b9:99:00:2c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
        Validity
            Not Before: Jun  7 06:00:23 2025 GMT
            Not After : Jun  8 06:00:23 2025 GMT
        Subject: CN=af26645fce3a21afa7c2d0fd50735f2734b1470d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:36:9b:d8:0e:aa:cc:50:8b:b4:db:eb:66:51:
                    7f:30:1f:82:15:a8:0d:56:e3:ba:c1:d3:d8:5e:41:
                    5f:34:16:90:d3:6c:d4:19:50:76:4f:cb:ab:a5:51:
                    dc:ec:f4:40:ac:f6:8c:89:23:80:21:82:4d:30:26:
                    a3:79:b1:00:56:c0:db:bc:f3:a1:c8:9f:b4:fd:27:
                    87:95:7c:af:63:d7:20:c5:9c:e0:ed:cb:21:b6:a1:
                    c3:f4:09:f4:22:fa:a7:3f:61:1b:57:80:db:58:df:
                    d8:71:60:75:99:8c:6e:fc:57:ae:8d:5c:67:e1:4e:
                    7e:70:05:bb:0e:f2:0a:15:bd:d4:cf:b8:a2:e0:55:
                    13:56:35:54:c0:e9:29:67:bc:60:b5:21:78:3a:e5:
                    7b:57:01:18:54:c7:8c:cf:d7:66:32:95:7b:ae:45:
                    0f:fd:5d:36:24:b5:c5:f0:bc:e3:1a:0d:20:86:b8:
                    d2:8b:64:e9:9c:3d:10:fc:99:80:db:e4:05:d2:92:
                    c3:55:b0:d1:d9:7e:d4:36:63:bc:16:a3:91:4a:70:
                    79:64:50:57:7c:36:a4:23:b1:e0:8a:66:98:60:ed:
                    92:a3:73:a7:27:a9:bd:45:58:e2:0d:39:6b:3a:25:
                    36:f9:57:ab:0f:21:12:1d:d5:7c:26:44:85:a2:c0:
                    28:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:26:64:5F:CE:3A:21:AF:A7:C2:D0:FD:50:73:5F:27:34:B1:47:0D
            X509v3 Authority Key Identifier:
                keyid:E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:af:8d:08:aa:11:83:90:5c:6f:78:36:d7:d7:ba:6f:08:f7:
         fa:82:c9:ae:d2:45:42:63:f1:c1:2d:4c:78:00:4a:c7:c7:03:
         37:81:f8:83:ef:bd:61:b7:b2:b7:27:ff:25:c4:48:1f:8b:c2:
         ac:c2:52:0d:4d:e4:80:74:3c:f7:33:48:48:bd:47:a3:82:1e:
         80:ef:07:99:ec:9f:e1:85:29:4c:43:eb:d1:1d:2e:33:0d:94:
         40:09:44:7f:59:ea:01:e9:20:f7:77:57:c7:c4:b2:4f:e0:79:
         5b:23:9b:20:73:7c:bf:13:45:ba:52:df:7f:dc:77:2b:a1:14:
         db:fd:38:03:d8:44:72:2c:80:b8:bf:55:09:38:65:43:d1:5a:
         03:c5:9c:44:8d:27:38:64:6a:ac:0f:5d:b7:cc:20:3d:8f:46:
         b8:87:bf:a7:0b:d5:95:0f:6d:b7:64:4f:89:15:bc:4d:d2:b5:
         a0:ad:e3:31:a6:43:6a:d9:f7:79:25:b2:e0:f1:af:0b:93:d1:
         7b:24:1b:18:d5:35:40:57:5c:f8:ef:e2:5a:47:f2:52:22:93:
         b5:26:14:0e:08:19:14:c3:aa:cf:da:b6:de:2f:50:a1:61:86:
         e6:67:5f:eb:43:14:42:07:63:a2:ea:d5:66:f8:dc:1a:19:60:
         fe:ba:46:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:12:57 2025 by rpki-client