Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
File:                     Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json)
Hash identifier:          aPqFf0AfDqSrvNbGTv8xZCfDJcMgQ3XEKCXkVCDpPUI=
Subject key identifier:   96:ED:DB:99:D8:77:0A:81:AF:38:E8:F8:4F:ED:5B:76:0F:B6:44:4C
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Certificate issuer:       /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial:       01976327C642AA04B6BC2558D8CC8ED2F639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
Manifest number:          1588
Signing time:             Thu 12 Jun 2025 08:00:40 +0000
Manifest this update:     Thu 12 Jun 2025 08:00:40 +0000
Manifest next update:     Fri 13 Jun 2025 08:00:40 +0000
Files and hashes:         1: AUgXKhms5sel_c-ikTQEBeiAHIk.roa (hash: nkhniPrHRdiqlVaDZb6XiBwOlDSdmietDMUaVI90HtM=)
                          2: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: Aw0JOnmooofrVRWlybgkOAVNW+A6PstMXj8p+yPE47w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 08:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:27:c6:42:aa:04:b6:bc:25:58:d8:cc:8e:d2:f6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
        Validity
            Not Before: Jun 12 08:00:40 2025 GMT
            Not After : Jun 13 08:00:40 2025 GMT
        Subject: CN=96eddb99d8770a81af38e8f84fed5b760fb6444c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:23:4b:fb:c8:d7:3a:7b:30:5c:dc:a7:23:46:
                    24:44:7c:04:72:3c:f3:22:4e:c1:a2:61:ff:f9:20:
                    57:e2:93:b3:f4:ad:7c:e5:2c:1e:31:f9:09:34:45:
                    30:25:42:8c:82:92:8e:16:a7:17:e1:64:73:23:c5:
                    4f:1d:2a:4d:01:53:fb:d6:4d:7d:14:b9:0a:ff:a9:
                    3c:88:5d:b1:6d:d0:9b:b2:5f:cc:5f:51:95:e2:ae:
                    1b:c0:b0:51:72:76:79:08:75:bb:dc:23:1c:90:f5:
                    60:af:dc:18:4e:60:30:04:0b:be:0f:41:3b:f0:74:
                    c9:29:52:0c:5d:5a:f2:98:95:1a:6d:e8:59:24:4d:
                    1e:f3:7a:33:de:19:de:4b:12:e7:dc:eb:ca:c0:81:
                    15:22:64:a5:60:b4:b2:31:a3:4c:56:fc:1a:ce:bc:
                    a1:48:e9:e4:09:62:c4:f2:b6:d2:15:04:f5:1d:35:
                    0b:11:42:be:97:39:97:93:98:ca:52:71:3c:c5:d7:
                    2a:b4:69:33:08:26:19:3f:12:88:44:26:48:9b:15:
                    62:72:37:c6:9e:4c:89:25:37:e1:40:84:11:7a:45:
                    5e:44:6e:e8:f8:bd:f3:4b:7b:17:c2:41:db:40:b7:
                    b8:80:1c:ff:f2:ca:69:45:83:cd:61:d1:da:9b:bb:
                    a1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:ED:DB:99:D8:77:0A:81:AF:38:E8:F8:4F:ED:5B:76:0F:B6:44:4C
            X509v3 Authority Key Identifier:
                keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:8a:28:95:51:43:07:8c:c7:ce:48:ca:d5:43:78:e4:87:77:
         fb:b0:7d:78:97:bd:c6:38:9c:b3:3b:60:37:61:66:8b:e3:98:
         0f:a1:4f:67:db:80:e2:20:e3:3b:ab:ef:47:ab:24:37:7d:43:
         70:30:78:11:bc:56:15:a5:63:26:91:85:89:6f:76:40:d2:8d:
         66:05:0a:26:a7:ed:28:f6:99:b9:09:09:a6:93:34:24:f2:d0:
         17:6f:ad:ef:83:cf:85:48:00:39:21:b5:33:3f:cf:30:31:d2:
         26:32:21:de:f4:e2:a4:76:11:2d:b9:e6:80:f3:c7:d8:8a:cf:
         e2:bb:77:e0:6e:d4:41:4b:1f:d1:89:9e:db:9b:8f:06:eb:da:
         3b:41:d6:c5:2c:97:db:6d:c5:02:3f:a6:d9:38:7e:9e:73:76:
         eb:d4:c9:68:53:68:bc:2c:b2:3f:c6:0d:27:d2:33:42:b0:56:
         83:af:4b:63:37:f6:71:7e:35:fd:6f:0c:20:ef:6a:39:ab:bb:
         3a:7d:fb:73:8b:37:bd:91:4f:df:70:1e:d5:92:c0:36:18:f3:
         ff:5f:9c:59:84:56:5f:9b:1f:e6:b1:39:79:cb:03:00:3b:db:
         79:e3:f3:9b:8b:fc:8a:5b:e5:0b:38:f3:74:d8:43:4f:23:44:
         76:f2:9e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 15:41:32 2025 by rpki-client