Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
File:                     Ru0nXFpziIjVgGle3TZxWVlEeSE.mft (raw, json)
Hash identifier:          I3SaJvnMph1N1ZC1u2jMvmFX/O8ZmHyyx8bjrQF80yw=
Subject key identifier:   04:A6:58:38:5C:6C:8B:D2:5A:18:EC:B1:F9:EE:52:56:FF:46:CC:AA
Authority key identifier: 46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21
Certificate issuer:       /CN=46ed275c5a738888d580695edd36715959447921
Certificate serial:       0198895737DE1BA2C6F169B1F10B4D94659E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
Manifest number:          0673
Signing time:             Fri 08 Aug 2025 11:00:51 +0000
Manifest this update:     Fri 08 Aug 2025 11:00:51 +0000
Manifest next update:     Sat 09 Aug 2025 11:00:51 +0000
Files and hashes:         1: Ru0nXFpziIjVgGle3TZxWVlEeSE.crl (hash: TQcNgMtccID2zhv1FvQTgHel7nqcUdcSVqqTcPVrIkA=)
                          2: uOExWuSOVw3WsjvU2eYOWMWKUpM.roa (hash: hA0HItJlYM+q1aZPrXih9b73zlhaFUPXGNtsx6XoxS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:57:37:de:1b:a2:c6:f1:69:b1:f1:0b:4d:94:65:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ed275c5a738888d580695edd36715959447921
        Validity
            Not Before: Aug  8 11:00:51 2025 GMT
            Not After : Aug  9 11:00:51 2025 GMT
        Subject: CN=04a658385c6c8bd25a18ecb1f9ee5256ff46ccaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:34:3e:b3:29:5b:0f:f2:32:f2:72:1e:49:f0:
                    aa:ca:42:e0:3c:cc:1d:7e:d4:65:e2:73:3b:61:20:
                    38:d8:b8:f6:54:c2:e7:5c:7a:44:02:12:0f:a3:11:
                    85:29:7c:29:29:e5:1b:5d:9c:ad:23:82:6f:44:31:
                    3e:c3:8b:57:02:21:46:6d:01:0e:55:94:98:e8:6b:
                    53:9b:1c:8f:bc:a7:77:e4:53:c2:5d:f0:b7:82:3f:
                    99:a1:f8:55:50:9e:b6:4f:34:1a:68:d9:87:ad:3f:
                    63:b5:57:e5:f1:4a:b8:9b:b9:fa:a3:05:f9:be:75:
                    53:e2:6f:4e:d5:f8:97:bd:91:d4:ad:cc:3f:d9:97:
                    7b:cc:20:7e:73:63:df:cf:d2:09:af:74:64:64:21:
                    e9:b8:ea:06:0d:ad:8a:fe:4b:62:0e:fd:59:66:b4:
                    20:2b:93:df:b6:f3:f7:83:12:a0:16:65:28:eb:ca:
                    8c:21:e0:b4:d2:cc:10:08:df:64:5c:60:29:da:e2:
                    18:c0:69:3f:f4:31:a9:bd:ce:2f:d3:a5:b9:cc:68:
                    55:71:e1:00:bb:41:01:24:00:8d:6b:39:c4:e7:d0:
                    74:ca:9a:87:8c:66:b2:96:e9:38:66:9d:69:60:a7:
                    91:99:9d:10:5e:b5:10:54:f7:72:9d:3f:38:39:c1:
                    f1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A6:58:38:5C:6C:8B:D2:5A:18:EC:B1:F9:EE:52:56:FF:46:CC:AA
            X509v3 Authority Key Identifier:
                keyid:46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:6f:a5:fe:cc:86:82:1a:be:d1:e2:28:8e:1f:ee:20:67:cb:
         ab:09:f6:7d:c7:62:f6:ec:21:14:3e:eb:bc:00:fc:d3:3a:ad:
         dc:23:e2:86:cf:19:48:1c:54:f6:e0:7d:99:3e:40:d3:c1:c6:
         72:10:4e:3c:34:0c:86:a4:4f:5e:fe:98:01:7c:be:16:c6:eb:
         bf:d9:4e:5d:66:38:e0:fa:79:a4:9b:40:44:50:81:e2:7e:3e:
         8c:da:df:64:95:43:f2:9d:2d:1e:7d:d5:1b:77:ae:88:43:1d:
         f2:56:e8:d7:46:56:f3:a9:33:73:80:57:5e:e1:64:5c:99:c7:
         7f:cf:63:c7:d8:87:b0:a8:33:48:01:04:08:e8:59:b8:35:62:
         aa:fc:95:da:bd:c2:b0:79:c1:87:fc:4a:a4:ea:b8:16:60:16:
         3d:5e:8a:a3:d1:f5:6a:af:07:6e:2c:b5:ea:07:5f:4d:62:65:
         a6:fc:c9:bd:98:35:42:31:63:41:69:8f:01:65:69:97:6e:aa:
         2e:37:aa:29:ef:c1:de:47:62:a3:5e:0b:cc:3c:ba:e7:c7:7a:
         98:c5:39:b5:f6:9a:35:30:08:9b:1c:25:77:bd:47:c4:45:3c:
         fd:ba:48:e2:ad:77:3f:71:6d:9d:41:52:48:ff:6b:c5:cc:19:
         33:db:6c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:58:27 2025 by rpki-client