Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
File:                     Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json)
Hash identifier:          9zodo0IEHTXE2IFkk7ce/oZ2Q8La/9g/E8ETqzHOs6U=
Subject key identifier:   03:EC:0B:9B:FD:28:54:9A:DE:AE:2D:99:66:CA:40:9D:17:8A:7D:3A
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Certificate issuer:       /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial:       019757918737EB4865CA918930324C0B324A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
Manifest number:          1582
Signing time:             Tue 10 Jun 2025 02:00:44 +0000
Manifest this update:     Tue 10 Jun 2025 02:00:44 +0000
Manifest next update:     Wed 11 Jun 2025 02:00:44 +0000
Files and hashes:         1: AUgXKhms5sel_c-ikTQEBeiAHIk.roa (hash: nkhniPrHRdiqlVaDZb6XiBwOlDSdmietDMUaVI90HtM=)
                          2: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: YF7RtqXztCxvHzgFB0tclvdYnXyRO/nyVLoKKSwJGQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:91:87:37:eb:48:65:ca:91:89:30:32:4c:0b:32:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
        Validity
            Not Before: Jun 10 02:00:44 2025 GMT
            Not After : Jun 11 02:00:44 2025 GMT
        Subject: CN=03ec0b9bfd28549adeae2d9966ca409d178a7d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3f:30:7b:fe:13:f2:e9:96:87:aa:6f:3e:13:
                    40:3d:99:fe:81:0e:cd:e3:cc:f1:75:44:16:15:9e:
                    6c:72:38:1d:9e:2a:3d:85:b4:13:a9:c8:2f:a2:ad:
                    03:ba:ca:3b:d8:48:59:39:61:65:fa:8b:7d:5f:c5:
                    25:7a:fa:b1:96:9f:ea:61:b5:f6:ee:a3:f0:2a:5e:
                    ad:16:15:c5:59:03:de:30:22:10:10:fa:9c:25:f9:
                    f7:83:ee:ff:58:b3:7d:ca:29:62:29:8c:81:4e:f2:
                    53:67:80:7f:19:1e:c1:09:12:06:6e:27:e7:52:aa:
                    fa:e8:5b:0a:63:b5:d5:3b:12:b9:8f:7b:03:9b:8c:
                    cb:a4:ac:b3:53:73:b9:2d:f6:4c:cb:b6:a0:5b:f3:
                    9b:b1:b1:f8:d7:99:0f:c6:c2:f4:b1:6d:5b:10:bd:
                    59:f3:a4:2d:56:a3:a7:7d:32:19:3d:36:7b:a1:64:
                    6a:5c:6d:86:e0:84:d6:a4:e8:e9:0f:15:d5:6a:c3:
                    cb:46:89:80:25:f1:c0:f0:a2:25:0c:fe:bc:e8:ff:
                    21:b9:ff:6b:98:fe:fd:cd:f2:f8:c1:72:84:81:8e:
                    cb:5c:b8:1a:11:8f:e3:82:f7:79:52:4c:e2:8c:a6:
                    96:09:e9:33:96:c3:4f:58:62:48:dd:e1:39:8e:36:
                    b2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EC:0B:9B:FD:28:54:9A:DE:AE:2D:99:66:CA:40:9D:17:8A:7D:3A
            X509v3 Authority Key Identifier:
                keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:59:c8:46:c1:ba:b4:4c:68:58:96:48:e9:85:e7:91:2d:59:
         b0:66:bf:c6:a8:c5:a2:ff:3f:18:12:09:6e:79:6e:21:5e:d2:
         60:68:d2:56:59:52:d1:1f:d3:21:e0:c3:36:6e:4f:bd:e7:80:
         7c:94:98:73:2d:56:2f:7b:1e:00:c6:3c:45:cc:18:6f:35:a1:
         7a:0d:9d:98:dc:37:c2:2f:1a:4a:c5:0d:9c:a8:e9:ab:70:ee:
         76:cf:78:14:07:f3:6d:d4:75:a3:17:d4:2f:0a:02:1f:05:37:
         2f:00:a8:3a:4e:1d:8c:bb:71:82:15:79:73:fa:dc:c2:54:9d:
         b1:75:e1:86:c8:18:ad:a2:e2:5e:90:bc:69:5b:ec:02:a4:82:
         0a:ba:67:f3:0a:43:8d:69:db:54:d8:3d:7b:16:44:38:1c:d4:
         62:49:94:73:2e:71:d9:35:29:9a:6d:5e:b3:8f:5a:9a:f7:c5:
         7e:df:eb:7c:30:31:83:36:2b:82:af:77:18:71:b6:ff:6d:d6:
         29:91:3f:d8:b0:f7:dc:dd:61:3c:44:24:79:75:b0:25:5f:66:
         68:6f:a8:71:9b:8c:f9:ff:6d:58:b2:15:f9:4c:4b:49:5d:66:
         11:08:e2:58:82:07:a0:44:e0:6f:1f:d5:ec:a8:6e:78:82:aa:
         c1:ad:48:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 09:46:49 2025 by rpki-client