Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
File:                     ruxDT4IchrfuYxZpHXHMYcQMNGw.mft (raw, json)
Hash identifier:          gwkomNeGg0pj9P/i68g/8xniBy7yT7qQu+pqsZvMZ3s=
Subject key identifier:   27:3B:F0:CF:0C:D5:7A:04:58:30:D2:FE:61:76:15:FD:E5:BD:DE:67
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Certificate issuer:       /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial:       01976C2AC36577AB32E77F37DC7546FC3846
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
Manifest number:          0ABD
Signing time:             Sat 14 Jun 2025 02:00:31 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:31 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:31 +0000
Files and hashes:         1: 5O89Acll2BSQwsAU1cu5uSGZnA4.roa (hash: bQuSQoXZ0EYJdYaZW1OMXS0ZVjJxuMon+vONAFdoiT0=)
                          2: ruxDT4IchrfuYxZpHXHMYcQMNGw.crl (hash: OPntBsdeU8r/igKvDpL4v+O9P45WZnRZyls0C4AEsjs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:c3:65:77:ab:32:e7:7f:37:dc:75:46:fc:38:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
        Validity
            Not Before: Jun 14 02:00:31 2025 GMT
            Not After : Jun 15 02:00:31 2025 GMT
        Subject: CN=273bf0cf0cd57a045830d2fe617615fde5bdde67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:26:10:7f:1c:97:31:17:1d:a9:a1:ec:a7:
                    ae:f8:1a:08:af:ba:af:9c:2e:fd:d7:ef:f6:ed:97:
                    4f:8f:0e:a6:b5:d0:8a:f3:11:12:bf:6e:69:a1:c5:
                    8c:88:d0:b5:29:5a:a3:6d:aa:28:90:b7:1a:2b:24:
                    af:74:3e:3e:4a:c5:6d:b7:1f:48:0c:cf:f9:a0:bd:
                    ec:a8:ee:2d:3c:40:c3:73:61:a6:28:48:5b:e3:ae:
                    25:1b:2c:89:d0:fb:a3:39:13:34:ff:dd:af:39:e7:
                    f0:37:9b:07:a7:ac:29:fa:a4:2f:aa:64:28:02:14:
                    92:58:0d:45:ab:18:e5:6c:59:a8:ab:68:b5:93:99:
                    4d:5c:49:22:65:0d:0e:07:5a:86:a2:71:ff:d4:0c:
                    65:f2:b7:6b:e5:91:f2:b7:d0:6f:2e:fa:d8:18:d3:
                    3e:5e:cf:77:13:01:03:eb:80:8d:88:c3:4f:be:7d:
                    28:ea:69:6c:06:98:b6:22:48:24:7f:12:fb:51:f0:
                    4b:f3:4a:22:74:47:1d:07:0b:d9:99:56:8d:9b:88:
                    35:09:c5:f0:60:39:68:50:fd:cf:6a:f7:4e:b7:a1:
                    70:dc:93:9d:a5:b0:9f:81:0a:c1:6a:af:6d:53:91:
                    31:f5:70:03:b5:c7:49:dc:6a:53:c7:d5:08:a8:34:
                    b6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3B:F0:CF:0C:D5:7A:04:58:30:D2:FE:61:76:15:FD:E5:BD:DE:67
            X509v3 Authority Key Identifier:
                keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:87:3c:1c:8e:3b:91:e8:48:7d:8f:7d:21:e6:3d:60:9f:71:
         43:2d:3e:4a:ef:81:b4:75:ba:29:b0:c0:38:bd:4b:b3:7b:e1:
         e5:a8:c7:49:cf:32:60:3a:e9:30:11:3a:7d:14:fa:dd:ce:1d:
         58:58:c8:bd:0c:ac:59:aa:34:84:0c:09:c3:e4:9f:f8:2b:53:
         e0:4f:4c:c7:fe:5a:0c:1a:2c:6e:b7:7a:be:b4:db:36:10:fd:
         2c:86:1b:6f:1b:8d:6e:74:50:7c:27:67:0f:4d:6c:2c:54:40:
         9b:85:24:51:e4:a7:c5:22:f4:af:70:ad:1f:8d:35:36:00:61:
         35:b9:6c:76:31:05:1f:ed:bd:55:19:7e:ff:1b:5c:64:66:fc:
         2d:e7:01:a4:21:63:89:20:73:0d:ef:18:b7:8e:77:03:1d:d9:
         15:88:3c:69:f5:46:93:7f:e9:c9:e7:19:51:be:93:2d:90:2a:
         5b:3f:69:b6:d2:af:ca:65:44:30:28:4d:3a:ba:79:a8:d9:f2:
         b5:34:16:e9:bc:50:e6:11:58:be:ad:db:fd:c9:3b:2b:4c:be:
         e6:0b:92:91:21:06:fc:17:68:f2:98:25:64:28:fd:6f:1d:75:
         75:10:8f:71:51:51:24:ef:69:fa:16:ae:44:73:a0:62:dd:90:
         41:d8:09:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:48 2025 by rpki-client