Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
File:                     Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft (raw, json)
Hash identifier:          Lv2XF0bX2Y6Hk1mOJTaI/xxSbH1929YMC0aASQP/KEY=
Subject key identifier:   A6:FB:E3:B9:18:AB:31:C4:96:EC:CC:E8:FE:8A:F7:6B:47:56:83:DE
Authority key identifier: 46:EE:A0:5D:DB:D3:89:DE:CA:F1:8D:B8:0E:3E:11:BF:9C:28:5A:88
Certificate issuer:       /CN=46eea05ddbd389decaf18db80e3e11bf9c285a88
Certificate serial:       01974FA0D1F669AFC9AC4773F7B15442A0F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
Manifest number:          1227
Signing time:             Sun 08 Jun 2025 13:00:28 +0000
Manifest this update:     Sun 08 Jun 2025 13:00:28 +0000
Manifest next update:     Mon 09 Jun 2025 13:00:28 +0000
Files and hashes:         1: Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl (hash: X0/nCAZLAWvVshOT3EaQo2wXUNHoDos6/EEhJY/yrec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:a0:d1:f6:69:af:c9:ac:47:73:f7:b1:54:42:a0:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46eea05ddbd389decaf18db80e3e11bf9c285a88
        Validity
            Not Before: Jun  8 13:00:28 2025 GMT
            Not After : Jun  9 13:00:28 2025 GMT
        Subject: CN=a6fbe3b918ab31c496eccce8fe8af76b475683de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:46:b9:5a:9f:28:15:90:67:a4:cb:e6:a2:
                    43:ce:c5:2a:04:f3:b3:ee:e7:55:06:ee:be:67:74:
                    5a:f4:81:a1:d0:28:ab:34:34:58:de:a7:5d:39:25:
                    2b:a9:de:1a:66:bb:1b:cc:95:83:00:ef:e8:d3:44:
                    d8:03:aa:08:d5:9c:6e:97:ae:55:95:34:8f:f2:5d:
                    bf:09:49:94:10:ec:71:07:ac:1c:ed:6e:7f:1c:33:
                    de:c6:2a:b0:1b:6b:03:b2:6f:1f:39:46:53:f5:de:
                    46:9d:6f:0d:b5:d8:7f:bf:6e:ea:c4:4b:3a:44:8d:
                    0e:5b:03:fe:52:03:40:9f:e9:08:cb:24:59:21:2e:
                    45:9c:d6:6f:aa:9b:9a:45:8e:02:0a:e1:f9:a7:5c:
                    d6:92:b9:f3:6e:95:7f:c2:dd:ef:fe:88:c7:4a:89:
                    ff:9d:5a:50:11:98:b9:67:ad:c3:f3:aa:81:21:0f:
                    ba:90:68:d7:95:72:a1:6d:2a:10:e1:7e:99:e3:82:
                    72:3e:9a:56:9d:5d:39:eb:03:8d:f9:5d:01:59:3f:
                    50:52:df:65:14:dd:b0:08:a1:45:a4:eb:42:30:29:
                    0b:1b:d0:b0:9b:e3:ff:52:a3:8d:fe:e6:fe:cb:21:
                    91:57:0b:b1:f6:3c:86:7c:5b:34:a8:c7:2d:4e:74:
                    c4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FB:E3:B9:18:AB:31:C4:96:EC:CC:E8:FE:8A:F7:6B:47:56:83:DE
            X509v3 Authority Key Identifier:
                keyid:46:EE:A0:5D:DB:D3:89:DE:CA:F1:8D:B8:0E:3E:11:BF:9C:28:5A:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0d:a6:93:c9:fc:55:0b:86:65:fb:77:4e:31:24:70:e0:9e:
         1c:45:98:7f:96:32:76:2a:11:10:65:16:6d:13:30:ca:d5:e2:
         25:da:ae:69:90:2d:7a:2d:c6:c0:37:b6:07:f8:a3:b1:b4:98:
         13:13:99:4b:87:f0:29:32:ce:49:93:36:21:d4:54:80:c4:ac:
         67:2b:c9:f6:1b:6b:10:80:e7:9d:68:81:2d:2b:cb:82:cb:12:
         2a:31:51:98:0c:61:99:8b:94:1e:94:de:3b:87:43:83:08:f5:
         88:de:88:14:8e:07:ff:61:38:8f:54:96:78:b8:b7:61:97:bb:
         2e:a9:10:dd:b4:22:48:ef:39:51:9b:01:12:eb:e7:a0:0e:89:
         5e:11:c4:96:a9:43:09:22:e2:41:2f:40:f5:3f:13:a5:fd:ae:
         85:7d:a7:1f:e8:18:83:06:20:a2:67:5a:69:b8:56:6f:95:1f:
         7f:df:10:c3:5e:f1:d9:72:77:2b:7c:a3:16:53:ef:1b:f5:14:
         de:ef:28:6b:69:b2:a2:27:32:f5:cd:7a:93:b0:bd:9f:2a:36:
         16:49:f5:a1:61:22:81:83:ce:ea:d2:5c:d1:50:7e:37:af:42:
         50:f2:22:61:1c:b3:09:74:42:78:15:d6:f5:54:b3:72:f8:37:
         92:96:78:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:39:32 2025 by rpki-client