Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File:                     ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier:          c5tIJnsuELJhTTU6jH0CGhwUT3W8gy3MQNqXlM96jgI=
Subject key identifier:   1E:6B:EF:8E:12:8F:73:A2:15:60:60:74:E3:F9:5D:FC:13:86:F2:86
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer:       /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial:       0198843112E2C6B0BC013550CF7AB7DAA477
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number:          0B4E
Signing time:             Thu 07 Aug 2025 11:01:05 +0000
Manifest this update:     Thu 07 Aug 2025 11:01:05 +0000
Manifest next update:     Fri 08 Aug 2025 11:01:05 +0000
Files and hashes:         1: 5O89Acll2BSQwsAU1cu5uSGZnA4.roa (hash: bQuSQoXZ0EYJdYaZW1OMXS0ZVjJxuMon+vONAFdoiT0=)
                          2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: H9ReNm80+8Og2sdFCFo5zzvTG5Q+4t2bLqOEdc89Unc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:84:31:12:e2:c6:b0:bc:01:35:50:cf:7a:b7:da:a4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
        Validity
            Not Before: Aug  7 11:01:05 2025 GMT
            Not After : Aug  8 11:01:05 2025 GMT
        Subject: CN=1e6bef8e128f73a215606074e3f95dfc1386f286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:39:c7:b0:43:3c:86:54:da:da:54:b5:23:f2:
                    dc:42:8b:8f:d3:2b:48:f5:5a:3a:7a:5c:4d:3a:c5:
                    4f:7a:0f:cd:a2:e1:c8:f7:e3:b4:98:9b:21:8c:21:
                    ad:94:b6:f7:52:bc:ed:f6:a0:80:52:4e:8a:04:2d:
                    98:ec:d6:4f:b8:bb:5f:28:f3:4e:c0:29:8b:c2:89:
                    68:56:c1:b9:8f:06:74:fb:28:a6:8a:4b:5f:cc:08:
                    b9:f9:ad:d7:81:49:06:36:50:a4:a9:78:4d:b0:7d:
                    db:f9:e3:9e:e7:d2:1a:63:7b:6c:29:ef:58:d8:4d:
                    ad:97:c5:f4:e3:ff:75:e1:55:4c:fe:58:89:65:aa:
                    1e:38:2a:54:7b:74:2a:7d:e8:9a:7e:dc:10:4e:79:
                    7f:03:5d:26:bf:d9:be:8e:98:3e:fc:5d:cb:0c:b4:
                    85:80:86:b1:d0:fe:49:ed:95:9f:39:ab:af:38:ff:
                    99:7d:15:de:59:4d:5b:a6:9f:82:df:d4:03:b0:ec:
                    a1:0b:ff:21:2f:d8:ca:e6:95:b2:4d:13:14:79:30:
                    3d:5f:eb:d8:ca:5d:f5:9a:40:34:92:f6:5b:b8:74:
                    0f:15:0a:8c:e4:09:af:cb:a0:dd:24:d2:dd:7b:b6:
                    a8:8c:5f:f2:a3:70:d8:a6:d2:e7:69:bf:91:bd:18:
                    91:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6B:EF:8E:12:8F:73:A2:15:60:60:74:E3:F9:5D:FC:13:86:F2:86
            X509v3 Authority Key Identifier:
                keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:09:5a:3a:ba:fc:a5:36:17:7b:49:d2:a2:da:c0:fe:f8:95:
         42:88:eb:5d:75:5c:ae:44:6b:13:06:e7:03:50:83:13:bb:6d:
         82:f1:65:6c:dd:0e:08:d6:4e:2f:69:6e:08:d1:11:72:22:62:
         27:69:aa:a9:36:0b:c7:2d:e2:4c:6f:7e:3a:41:55:a2:70:1e:
         78:b3:3b:b1:c7:1f:75:62:55:15:3d:b6:fd:76:0d:93:b3:59:
         1a:8a:8d:43:57:b2:b6:5d:25:b7:f3:4d:c1:1b:a9:ad:f8:1b:
         3a:63:12:c7:2a:67:4d:6b:e6:a1:4a:65:0a:f8:f3:5c:07:f0:
         93:5b:74:d3:cd:85:f6:98:52:6d:61:82:fd:08:f3:48:5f:d0:
         f3:6e:cb:d5:58:63:d5:b8:65:dd:50:77:91:21:57:3c:09:c7:
         06:8d:5d:1b:20:6f:33:a4:03:9a:48:08:f3:ee:dd:6b:52:3f:
         71:66:7d:b5:71:b4:1e:a8:18:27:b0:b3:c6:56:5f:9a:b1:6f:
         40:ec:eb:24:e3:d3:b0:2b:bc:70:b5:9e:30:5d:35:f8:7b:f5:
         d4:12:b4:65:8b:7e:92:69:2e:ba:50:4b:5c:82:28:6e:fb:b0:
         da:14:fe:d3:38:88:7a:6c:c3:13:5c:b3:40:23:d6:0a:f2:ee:
         b0:65:d8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:35:21 2025 by rpki-client