Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
File:                     Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft (raw, json)
Hash identifier:          mBbr9sVuRrfUR7jdKx4n7DJmqNct8joF76K2ZsOB+VA=
Subject key identifier:   F4:12:E9:69:E4:3B:34:A7:D9:A6:DC:2F:37:CD:3F:6C:C3:DE:67:77
Authority key identifier: 46:EE:A0:5D:DB:D3:89:DE:CA:F1:8D:B8:0E:3E:11:BF:9C:28:5A:88
Certificate issuer:       /CN=46eea05ddbd389decaf18db80e3e11bf9c285a88
Certificate serial:       019922FAEACB4C5DE4826F2ACFDB467E8449
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
Manifest number:          1319
Signing time:             Sun 07 Sep 2025 07:01:33 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:33 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:33 +0000
Files and hashes:         1: Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl (hash: 1AaxQhc7iPTncRVczkclegSzftpToA2W2UpUDfbFbGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:ea:cb:4c:5d:e4:82:6f:2a:cf:db:46:7e:84:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46eea05ddbd389decaf18db80e3e11bf9c285a88
        Validity
            Not Before: Sep  7 07:01:33 2025 GMT
            Not After : Sep  8 07:01:33 2025 GMT
        Subject: CN=f412e969e43b34a7d9a6dc2f37cd3f6cc3de6777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8a:37:52:37:14:8c:1c:6b:70:ba:46:78:7f:
                    bd:e2:d1:29:e1:9c:0d:2d:12:60:fc:32:cc:d9:96:
                    b7:8e:56:c1:ae:14:b0:03:20:4f:63:9e:4d:06:bf:
                    51:92:b9:04:56:55:85:12:ab:53:30:80:1a:20:65:
                    37:bf:00:5c:36:d5:49:47:77:7a:84:48:61:37:c7:
                    9d:6a:89:47:4b:a4:53:ca:e3:69:7e:6f:08:c1:d7:
                    7c:b8:e0:21:5d:6a:70:3b:eb:4c:79:c3:d4:df:b1:
                    52:7c:55:68:60:be:10:a7:12:be:a7:a5:d8:d8:aa:
                    6e:88:0e:2e:03:1a:df:55:09:1b:be:c2:cc:69:9f:
                    69:22:c8:66:06:9e:59:d8:45:a1:b2:86:7c:aa:bb:
                    85:ab:bd:5c:44:16:40:1d:0d:50:17:f5:77:12:c1:
                    f7:4d:d6:75:31:e2:3f:7c:bf:c7:bc:bd:fb:40:2c:
                    94:75:c1:b1:36:94:40:b8:69:8d:ac:ec:24:94:b8:
                    8a:06:98:28:61:48:f3:f3:15:70:2c:df:26:c8:0b:
                    2f:f1:aa:f7:5c:bd:3d:f8:90:b6:26:4a:ee:3c:19:
                    60:80:33:be:d5:1a:fc:03:a0:6c:76:9e:34:55:f2:
                    d6:0d:2b:5b:42:96:71:22:5c:53:b9:d7:e7:fb:85:
                    3a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:12:E9:69:E4:3B:34:A7:D9:A6:DC:2F:37:CD:3F:6C:C3:DE:67:77
            X509v3 Authority Key Identifier:
                keyid:46:EE:A0:5D:DB:D3:89:DE:CA:F1:8D:B8:0E:3E:11:BF:9C:28:5A:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru6gXdvTid7K8Y24Dj4Rv5woWog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b91150-ef66-450f-8544-92e1e9daca2f/1/Ru6gXdvTid7K8Y24Dj4Rv5woWog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:0a:cc:65:f1:fe:44:95:2e:78:e3:cc:89:dd:49:68:05:11:
         30:85:fc:6d:7b:29:5c:db:77:ff:dc:68:30:6c:b7:10:39:25:
         7a:5d:a2:1a:a0:5d:3c:a9:77:ff:10:8d:de:13:aa:8a:89:10:
         17:63:e6:99:f2:58:c3:a3:e2:b7:40:19:5f:3e:4c:e2:fc:5b:
         cb:1a:11:a2:3e:80:1f:2e:56:b7:86:4e:98:01:f2:8b:cf:8e:
         64:92:2c:58:22:26:17:ca:ba:bd:8f:36:a7:c4:7e:01:d5:74:
         af:d2:bf:71:07:d6:f2:15:d5:16:5e:a3:3f:17:eb:95:8a:e0:
         8b:0e:d9:1e:58:44:5b:d2:55:bd:a2:53:05:02:cf:cf:3d:5b:
         79:ed:f1:f5:99:ff:49:86:7e:47:71:11:aa:00:74:71:34:4a:
         b1:c0:a8:c0:10:86:1b:64:48:8b:c2:2c:97:72:61:30:c9:df:
         33:d6:d7:d9:41:2d:30:94:d1:fa:42:fe:77:01:cb:ad:63:b4:
         8c:36:d2:9e:59:0e:7b:02:f1:aa:80:c5:25:d0:22:75:90:8b:
         7d:0f:b2:bd:5e:05:fb:d2:b0:2f:fe:4f:a2:45:48:e1:16:8b:
         2f:e6:e7:55:bb:83:50:91:3a:34:c6:9a:93:a9:97:56:bf:44:
         48:05:18:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:34 2025 by rpki-client