Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
File:                     Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json)
Hash identifier:          CxjN76GIcLbrLZG3I2QqlrMwWTpXfdA342nhNOaww6w=
Subject key identifier:   01:C9:13:3B:3D:BF:80:75:42:1A:8F:82:45:50:1B:00:3A:87:E9:4C
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Certificate issuer:       /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial:       019753B4E2733549E5B1C45A1A322DD0141D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
Manifest number:          1580
Signing time:             Mon 09 Jun 2025 08:00:52 +0000
Manifest this update:     Mon 09 Jun 2025 08:00:52 +0000
Manifest next update:     Tue 10 Jun 2025 08:00:52 +0000
Files and hashes:         1: AUgXKhms5sel_c-ikTQEBeiAHIk.roa (hash: nkhniPrHRdiqlVaDZb6XiBwOlDSdmietDMUaVI90HtM=)
                          2: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: gkkN82vS0MRnW5NnOZtZnurNlA5WNCgTL37+nTphd44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:53:b4:e2:73:35:49:e5:b1:c4:5a:1a:32:2d:d0:14:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
        Validity
            Not Before: Jun  9 08:00:52 2025 GMT
            Not After : Jun 10 08:00:52 2025 GMT
        Subject: CN=01c9133b3dbf8075421a8f8245501b003a87e94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:32:e0:e5:d1:99:fe:9d:a5:f8:f3:4d:ed:5d:
                    eb:61:93:01:2d:64:43:10:9d:0f:20:03:32:8f:ac:
                    db:77:3c:c2:3e:fa:c6:3f:b0:cd:f4:79:bd:90:f8:
                    1b:62:5b:05:aa:c4:b3:4a:14:b6:6a:d3:f4:a1:0b:
                    31:b1:1d:18:2c:d5:41:20:0d:27:0c:62:06:60:b9:
                    69:c0:8a:53:67:7b:c0:2f:62:79:f6:b9:5c:04:c1:
                    ec:ca:cb:72:99:90:14:49:f8:da:c6:44:16:f3:26:
                    a0:53:48:fa:36:df:d1:49:33:9e:a0:2f:03:aa:f8:
                    f0:d8:de:58:71:4d:32:00:86:ee:d3:91:ff:c2:02:
                    f9:18:a2:da:52:98:88:1f:3c:2f:c6:ea:05:c4:62:
                    e7:b1:ca:b5:22:47:a4:97:57:aa:bd:65:da:0c:fb:
                    ea:37:68:df:1f:1f:80:91:22:08:fc:3b:95:74:59:
                    49:9a:ef:34:fa:e4:33:7e:54:58:55:a7:7d:2e:4e:
                    5d:e0:6b:b9:e0:2f:a8:76:d5:69:fb:a3:5b:53:53:
                    06:47:33:59:fb:f3:2b:7f:0f:20:4f:86:c5:a2:cc:
                    02:e5:36:d4:4d:d3:5c:97:01:c5:41:bd:9c:1f:54:
                    f2:51:5d:a8:27:ad:76:f9:94:de:ba:de:41:4a:20:
                    59:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C9:13:3B:3D:BF:80:75:42:1A:8F:82:45:50:1B:00:3A:87:E9:4C
            X509v3 Authority Key Identifier:
                keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:15:de:47:03:46:0f:ec:e7:f5:e1:4f:e1:4d:2c:c5:45:1a:
         c4:ca:53:c5:fe:14:8b:23:54:e9:02:19:1b:63:62:bb:a1:b3:
         6f:ce:11:dc:de:59:62:5f:66:e8:5b:e7:a1:5a:3c:10:64:65:
         8d:a6:c6:eb:68:cf:5b:f9:a7:aa:03:ae:0f:51:5e:70:e6:39:
         63:11:ea:ab:8d:18:52:5e:44:9d:77:19:fe:0e:e2:72:3f:53:
         38:ab:ed:5f:92:1f:37:e6:77:5e:cd:00:0b:83:43:ce:60:54:
         a4:ae:91:18:2f:00:ed:6a:a3:fa:a2:df:78:c0:fc:2c:de:1f:
         b2:c7:7a:cd:ce:94:75:dd:db:cb:a5:69:ee:3b:c8:c0:01:72:
         1c:df:f5:d6:7c:ad:a6:76:00:81:20:f7:59:5d:22:99:e3:ab:
         f4:98:f4:42:36:76:a1:5b:89:55:ac:53:eb:bd:3a:b1:f7:0f:
         6b:1e:47:bc:cd:2d:b9:b3:80:47:4d:31:d9:8a:e7:fd:d5:a9:
         23:7c:1b:b8:50:b9:93:36:c1:20:cc:1e:d5:0b:69:98:f0:86:
         c6:92:b4:92:ab:6f:a1:29:f5:68:1c:fc:e5:fb:8b:65:25:91:
         3f:7c:a5:01:a8:cf:be:e9:1c:91:e3:21:68:55:d0:47:e8:30:
         af:a0:55:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:36:22 2025 by rpki-client