Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
File:                     ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json)
Hash identifier:          av6MSRsASoJUa7yLTP9anmB8bTNMubHODeNFS06uWwI=
Subject key identifier:   76:7B:DA:E4:AD:85:A4:2F:85:65:0C:03:7D:B9:F6:17:EF:86:83:81
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Certificate issuer:       /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial:       0197CE7224FD253183716C806D8C6BA6E068
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
Manifest number:          0A59
Signing time:             Thu 03 Jul 2025 04:01:16 +0000
Manifest this update:     Thu 03 Jul 2025 04:01:16 +0000
Manifest next update:     Fri 04 Jul 2025 04:01:16 +0000
Files and hashes:         1: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: 2vC/z2CrkZd2a4HsBGVYX0eEsNhHMgaDdU2Aim9e0CQ=)
                          2: skCVKxk18u8iDsYso8A72bgiHug.roa (hash: nn/x2nXxtAw5Z/QReAqKvy2u4x4tQ9QyKaEVK0rkZpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 04:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ce:72:24:fd:25:31:83:71:6c:80:6d:8c:6b:a6:e0:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
        Validity
            Not Before: Jul  3 04:01:16 2025 GMT
            Not After : Jul  4 04:01:16 2025 GMT
        Subject: CN=767bdae4ad85a42f85650c037db9f617ef868381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:23:11:05:19:62:9e:7c:29:47:c1:38:3d:
                    20:57:62:37:77:09:9b:28:b5:cd:6d:ab:73:7e:d2:
                    1a:fe:21:3b:f2:29:05:8d:36:34:ef:6d:22:8d:e2:
                    c7:cc:17:42:b0:64:fa:73:46:0c:92:46:c8:9b:79:
                    79:98:dc:10:e2:aa:64:22:7d:56:27:43:8f:58:21:
                    d5:9a:81:38:8f:66:1f:a1:42:a3:7c:14:e9:f7:4e:
                    f1:93:03:61:81:ea:6f:e5:66:87:b1:41:bb:89:05:
                    66:ee:c2:5c:58:3b:f4:1b:31:fc:5c:46:8a:21:32:
                    88:ea:31:7b:87:ab:6d:a9:61:be:07:13:2c:9f:83:
                    24:89:63:1a:64:ce:1c:7c:a1:a5:a6:43:1a:19:a3:
                    96:41:e1:e9:1d:f0:42:bb:45:3b:97:f4:f7:a0:66:
                    ec:27:e9:81:e9:5b:31:12:c3:d4:03:c2:59:44:c8:
                    c9:e6:1c:96:18:1a:da:0d:e3:52:a3:62:b5:54:22:
                    68:e5:44:e3:7f:51:e8:eb:e6:69:82:24:97:2d:39:
                    5e:7f:3c:02:be:73:4a:01:e2:69:a5:c9:51:91:c6:
                    e6:56:d1:ff:bc:c8:60:10:db:e2:09:dc:f7:2a:33:
                    06:82:3b:f8:a8:3d:9f:de:9e:9e:93:2c:8e:69:ae:
                    5a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7B:DA:E4:AD:85:A4:2F:85:65:0C:03:7D:B9:F6:17:EF:86:83:81
            X509v3 Authority Key Identifier:
                keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ea:ed:37:d2:2c:20:df:ac:4a:c1:02:82:14:4e:8b:50:ab:
         7f:54:6c:a6:cf:ed:52:9d:55:96:1e:a0:db:fa:0e:9d:c6:54:
         d1:0e:b3:73:8f:fe:8f:31:36:ed:c9:4b:e2:ab:a6:a8:9c:54:
         70:41:4d:b3:67:9d:c0:85:6d:ec:8a:53:6a:a2:ea:d8:d0:f3:
         97:7b:ac:89:de:0e:18:3e:2c:b5:b2:af:4f:5e:9c:0a:fe:d5:
         82:d6:06:49:ac:cc:5f:9d:17:38:04:58:b4:54:cd:85:73:3e:
         38:2e:7c:af:26:a1:ec:11:ae:25:04:9b:71:6c:39:25:6f:21:
         17:5f:75:be:ff:bb:30:8e:2f:fe:d8:57:ec:d9:c2:46:02:8c:
         ee:d0:02:26:c3:6d:fb:4f:1e:7d:cf:88:12:7b:f0:1c:5b:ee:
         39:0a:de:fb:98:80:4a:4a:37:38:93:5d:39:09:a8:b3:da:04:
         8e:0a:94:14:86:a9:b2:5b:5f:96:17:09:ad:68:fd:94:18:25:
         0e:cf:8a:6c:1b:1c:66:22:4c:e1:0c:c7:ce:3c:5c:fa:e9:33:
         bd:af:6f:b3:c6:45:f1:6e:69:9e:e9:b7:9f:7a:74:0a:26:f1:
         bd:b5:b0:95:7d:e5:86:ce:bc:0c:2f:b8:a5:34:98:3a:e2:43:
         12:cb:3e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:31:34 2025 by rpki-client