Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
File:                     Ru0nXFpziIjVgGle3TZxWVlEeSE.mft (raw, json)
Hash identifier:          griPv/cYajSpI3mdE1/2E1X7MLd4ZxArfeFRts75zkQ=
Subject key identifier:   34:00:23:A2:17:E5:EE:11:57:EC:05:95:D8:E1:C1:D7:66:ED:2E:71
Authority key identifier: 46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21
Certificate issuer:       /CN=46ed275c5a738888d580695edd36715959447921
Certificate serial:       01974E8E20ECAD1227EC762CC1AED2528A82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
Manifest number:          05D0
Signing time:             Sun 08 Jun 2025 08:00:26 +0000
Manifest this update:     Sun 08 Jun 2025 08:00:26 +0000
Manifest next update:     Mon 09 Jun 2025 08:00:26 +0000
Files and hashes:         1: Ru0nXFpziIjVgGle3TZxWVlEeSE.crl (hash: b7hfdVVP0QynJRpnXTpkC+11TI1emXARTW0N6TXcZDg=)
                          2: uOExWuSOVw3WsjvU2eYOWMWKUpM.roa (hash: hA0HItJlYM+q1aZPrXih9b73zlhaFUPXGNtsx6XoxS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:8e:20:ec:ad:12:27:ec:76:2c:c1:ae:d2:52:8a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ed275c5a738888d580695edd36715959447921
        Validity
            Not Before: Jun  8 08:00:26 2025 GMT
            Not After : Jun  9 08:00:26 2025 GMT
        Subject: CN=340023a217e5ee1157ec0595d8e1c1d766ed2e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:aa:46:0c:ab:df:f1:82:9f:73:7d:80:40:c4:
                    b0:7d:58:a8:04:55:38:5f:7a:5c:07:30:ab:5d:14:
                    60:ff:8e:c3:e5:f8:f9:f9:03:78:9c:3a:d4:7c:11:
                    91:48:d4:6b:d0:ec:07:90:be:c4:89:be:71:c1:bb:
                    ec:cf:38:04:c8:f2:f0:9d:19:25:7b:90:b2:63:0c:
                    9a:03:4a:a7:9e:67:3e:a9:36:91:7a:7e:bb:20:fe:
                    7b:e2:84:b2:24:8b:3a:b8:34:2e:76:b7:8d:93:c8:
                    c2:a9:63:19:07:f8:f6:a8:c0:ba:ea:1c:93:23:36:
                    a2:44:62:51:33:db:4e:4b:30:9b:d2:ce:18:5f:6b:
                    3f:a9:46:23:d8:74:6e:ca:1a:c5:af:58:38:7d:be:
                    73:16:26:93:a5:d8:77:0e:2f:98:3a:da:63:4d:30:
                    c8:35:ee:04:53:8b:87:ab:f3:3d:03:1d:99:b3:ad:
                    3e:12:ae:78:0f:f3:c2:3c:16:0c:0f:39:83:82:bf:
                    b3:70:c6:b1:3b:bb:11:32:09:cb:f1:72:ab:e0:7b:
                    ca:02:5c:11:95:2e:bf:95:72:66:b0:9c:8e:c1:0f:
                    75:52:47:d3:b3:ab:ee:19:78:4a:a8:aa:2b:87:cd:
                    77:77:90:2c:e1:82:bc:06:e4:43:3d:85:4b:3d:42:
                    02:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:00:23:A2:17:E5:EE:11:57:EC:05:95:D8:E1:C1:D7:66:ED:2E:71
            X509v3 Authority Key Identifier:
                keyid:46:ED:27:5C:5A:73:88:88:D5:80:69:5E:DD:36:71:59:59:44:79:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru0nXFpziIjVgGle3TZxWVlEeSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/06e27a-c039-48df-ae7e-3f8e7f103899/1/Ru0nXFpziIjVgGle3TZxWVlEeSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:1c:d9:21:d7:27:5f:11:6f:7b:78:37:9c:58:cb:7b:c0:a8:
         2a:23:a1:c2:c2:88:3b:8c:b7:b6:19:84:f5:8b:c6:af:44:7b:
         ed:1e:ef:5c:3e:b6:53:e9:7d:37:5b:03:82:a3:c6:9e:9c:f6:
         d8:23:58:6b:3b:84:42:c5:9e:1b:3b:f8:b5:4b:30:1f:fb:bc:
         0f:47:02:1d:ab:fa:05:4a:53:59:b6:4a:01:b4:9f:06:1c:99:
         c8:5d:ac:52:e5:0b:3e:ca:55:59:04:63:97:eb:7b:61:cc:47:
         12:81:c7:57:39:11:8b:fa:13:14:16:2d:35:31:ef:69:2f:ed:
         76:36:75:ae:51:85:c4:b9:46:d3:2a:6d:d9:7b:e5:aa:3a:ee:
         bf:e5:93:aa:84:62:9f:d0:a2:c0:f3:d3:57:90:62:0c:6a:1d:
         6b:48:94:bf:b1:23:35:b7:b0:61:8c:58:5c:11:dc:35:c5:2c:
         c2:96:19:d7:50:52:78:91:e8:02:56:dd:34:25:20:b7:d3:1a:
         df:c6:3e:35:3f:31:7c:93:fb:03:09:eb:24:22:af:88:8e:86:
         00:fc:1a:f2:0f:a7:d9:43:b4:65:85:11:7d:36:2c:4d:35:be:
         18:dd:ec:50:a4:0f:24:68:db:07:06:28:41:a9:05:14:10:dc:
         28:02:4d:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOjiDsrRIn7HYswa7SUoqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZWQyNzVjNWE3Mzg4ODhkNTgwNjk1ZWRkMzY3MTU5NTk0
NDc5MjEwHhcNMjUwNjA4MDgwMDI2WhcNMjUwNjA5MDgwMDI2WjAzMTEwLwYDVQQD
EygzNDAwMjNhMjE3ZTVlZTExNTdlYzA1OTVkOGUxYzFkNzY2ZWQyZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKpGDKvf8YKfc32AQMSwfVioBFU4
X3pcBzCrXRRg/47D5fj5+QN4nDrUfBGRSNRr0OwHkL7Eib5xwbvszzgEyPLwnRkl
e5CyYwyaA0qnnmc+qTaRen67IP574oSyJIs6uDQudreNk8jCqWMZB/j2qMC66hyT
IzaiRGJRM9tOSzCb0s4YX2s/qUYj2HRuyhrFr1g4fb5zFiaTpdh3Di+YOtpjTTDI
Ne4EU4uHq/M9Ax2Zs60+Eq54D/PCPBYMDzmDgr+zcMaxO7sRMgnL8XKr4HvKAlwR
lS6/lXJmsJyOwQ91UkfTs6vuGXhKqKorh813d5As4YK8BuRDPYVLPUIChwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQAI6IX5e4RV+wFldjhwddm7S5xMB8GA1UdIwQY
MBaAFEbtJ1xac4iI1YBpXt02cVlZRHkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnUwblhGcHppSWpWZ0dsZTNUWnhXVmxFZVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wNmUyN2EtYzAzOS00OGRmLWFlN2Ut
M2Y4ZTdmMTAzODk5LzEvUnUwblhGcHppSWpWZ0dsZTNUWnhXVmxFZVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8wNmUyN2EtYzAzOS00OGRmLWFlN2UtM2Y4ZTdmMTAzODk5
LzEvUnUwblhGcHppSWpWZ0dsZTNUWnhXVmxFZVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBzZIdcn
XxFve3g3nFjLe8CoKiOhwsKIO4y3thmE9YvGr0R77R7vXD62U+l9N1sDgqPGnpz2
2CNYazuEQsWeGzv4tUswH/u8D0cCHav6BUpTWbZKAbSfBhyZyF2sUuULPspVWQRj
l+t7YcxHEoHHVzkRi/oTFBYtNTHvaS/tdjZ1rlGFxLlG0ypt2Xvlqjruv+WTqoRi
n9CiwPPTV5BiDGoda0iUv7EjNbewYYxYXBHcNcUswpYZ11BSeJHoAlbdNCUgt9Ma
38Y+NT8xfJP7AwnrJCKviI6GAPwa8g+n2UO0ZYURfTYsTTW+GN3sUKQPJGjbBwYo
QakFFBDcKAJNxQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:09:16 2025 by rpki-client