Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
File:                     Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json)
Hash identifier:          zhhOXwQoJqDhsKdC4SQa2C9XyFr8k1L82+jFzhZWb+k=
Subject key identifier:   5E:EE:26:1F:BC:B3:ED:F3:21:4E:8E:02:A9:2B:2F:84:4B:CA:92:2F
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Certificate issuer:       /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial:       01993870549F8AA8B46F093A9F7E57917005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
Manifest number:          167B
Signing time:             Thu 11 Sep 2025 11:01:49 +0000
Manifest this update:     Thu 11 Sep 2025 11:01:49 +0000
Manifest next update:     Fri 12 Sep 2025 11:01:49 +0000
Files and hashes:         1: AUgXKhms5sel_c-ikTQEBeiAHIk.roa (hash: nkhniPrHRdiqlVaDZb6XiBwOlDSdmietDMUaVI90HtM=)
                          2: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: gjXvQ/o1KBR0nS6LdcihhHtCJLLS83/IKSSrgP3b5oo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:38:70:54:9f:8a:a8:b4:6f:09:3a:9f:7e:57:91:70:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
        Validity
            Not Before: Sep 11 11:01:49 2025 GMT
            Not After : Sep 12 11:01:49 2025 GMT
        Subject: CN=5eee261fbcb3edf3214e8e02a92b2f844bca922f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f0:f1:d1:70:5f:78:22:c0:9f:fb:ef:b4:99:
                    1b:b2:ea:61:08:36:d8:67:49:85:8b:35:0a:c5:32:
                    49:31:22:15:a7:a2:f5:ea:5b:a8:35:56:79:be:0f:
                    d8:5f:22:59:dc:d4:c9:6f:fb:64:dc:cd:fe:70:fa:
                    ee:f6:7f:36:08:18:2c:0e:11:95:bd:e2:da:09:b5:
                    b5:af:e1:bc:f0:aa:2c:a3:2c:19:bd:d9:e7:5d:88:
                    e3:37:05:61:e1:12:bd:29:41:dd:c4:ed:a4:08:d7:
                    b4:b9:7f:43:52:76:f2:8d:b4:2f:17:ab:67:1c:91:
                    3f:c8:b0:19:a4:78:39:0b:97:89:ea:05:38:5f:97:
                    47:ab:a6:ca:71:ea:75:0f:ea:b7:87:99:20:ae:e1:
                    44:ac:98:8e:19:c0:67:4c:56:4d:ce:1e:1e:85:4e:
                    82:d5:ed:97:4a:de:10:c7:43:32:9b:6a:bf:3e:d5:
                    81:d8:f0:92:14:73:dc:88:53:09:43:61:58:bf:b8:
                    45:ce:ad:35:1a:b7:7b:ea:5b:00:e3:01:4f:b9:13:
                    c9:3f:24:69:dd:d3:61:bf:fe:65:ca:18:da:a5:e1:
                    85:de:d7:7c:db:25:30:86:e2:6f:02:3b:7e:bb:6a:
                    e7:40:e6:be:2b:8d:ba:0b:33:5e:dd:e7:59:0d:fe:
                    a0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:EE:26:1F:BC:B3:ED:F3:21:4E:8E:02:A9:2B:2F:84:4B:CA:92:2F
            X509v3 Authority Key Identifier:
                keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         f8:4f:b3:ea:36:fd:3e:bf:c9:48:2c:54:b1:2f:bc:d6:cc:45:
         35:38:b6:f5:58:0a:94:a1:26:90:13:8b:30:a1:02:85:66:1a:
         70:a6:64:f3:d2:04:7c:a8:cb:38:37:04:11:5c:c8:68:17:c4:
         04:6c:15:e2:ce:63:17:00:70:95:14:54:a2:54:86:eb:b4:5c:
         45:cd:c1:54:68:14:1b:6e:0a:a4:49:0a:15:0f:d5:25:a3:75:
         cd:51:69:c1:1c:e7:67:1b:0d:52:78:e1:28:9a:ba:8e:99:78:
         be:4f:30:1f:72:c0:1b:38:70:b5:80:14:01:28:d3:aa:71:07:
         05:cf:ce:f0:ee:a0:7c:f4:78:72:af:d2:02:e4:0f:ca:66:31:
         60:5b:3e:11:f2:82:f8:50:c2:ee:b1:b5:52:4a:b7:b0:b1:cc:
         47:9a:b8:0e:32:53:b9:45:77:a7:a1:6c:a1:10:e6:8a:2b:09:
         26:b7:3a:03:5c:3d:1b:c3:6c:ff:b0:a4:69:21:cc:7d:a4:6a:
         c7:30:1e:f2:9d:25:e1:db:b7:47:99:0e:f1:16:96:10:3e:41:
         26:42:ff:5e:eb:dc:ed:7a:2b:e6:f7:58:23:6f:5d:78:53:2d:
         b5:9c:0d:a1:1f:5b:4e:6d:47:4c:81:79:e2:04:5b:50:3c:19:
         ad:c7:b1:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk4cFSfiqi0bwk6n35XkXAFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Y2ZjNDFhNDE5YTdiYmQ2ZDhlOGM0ZWU2ODU1OTViNmE0
MGI5ZjEwHhcNMjUwOTExMTEwMTQ5WhcNMjUwOTEyMTEwMTQ5WjAzMTEwLwYDVQQD
Eyg1ZWVlMjYxZmJjYjNlZGYzMjE0ZThlMDJhOTJiMmY4NDRiY2E5MjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vDx0XBfeCLAn/vvtJkbsuphCDbY
Z0mFizUKxTJJMSIVp6L16luoNVZ5vg/YXyJZ3NTJb/tk3M3+cPru9n82CBgsDhGV
veLaCbW1r+G88KosoywZvdnnXYjjNwVh4RK9KUHdxO2kCNe0uX9DUnbyjbQvF6tn
HJE/yLAZpHg5C5eJ6gU4X5dHq6bKcep1D+q3h5kgruFErJiOGcBnTFZNzh4ehU6C
1e2XSt4Qx0Mym2q/PtWB2PCSFHPciFMJQ2FYv7hFzq01Grd76lsA4wFPuRPJPyRp
3dNhv/5lyhjapeGF3td82yUwhuJvAjt+u2rnQOa+K426CzNe3edZDf6ghwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF7uJh+8s+3zIU6OAqkrL4RLypIvMB8GA1UdIwQY
MBaAFEbPxBpBmnu9bY6MTuaFWVtqQLnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEt
Y2MzMzc2ZWY3MzAwLzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEtY2MzMzc2ZWY3MzAw
LzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA+E+z6jb9
Pr/JSCxUsS+81sxFNTi29VgKlKEmkBOLMKEChWYacKZk89IEfKjLODcEEVzIaBfE
BGwV4s5jFwBwlRRUolSG67RcRc3BVGgUG24KpEkKFQ/VJaN1zVFpwRznZxsNUnjh
KJq6jpl4vk8wH3LAGzhwtYAUASjTqnEHBc/O8O6gfPR4cq/SAuQPymYxYFs+EfKC
+FDC7rG1Ukq3sLHMR5q4DjJTuUV3p6FsoRDmiisJJrc6A1w9G8Ns/7CkaSHMfaRq
xzAe8p0l4du3R5kO8RaWED5BJkL/Xuvc7Xor5vdYI29deFMttZwNoR9bTm1HTIF5
4gRbUDwZrcexKA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 13:27:54 2025 by rpki-client