Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
File:                     ruqgluuzdlfk060hdmQRctbiArw.mft (raw, json)
Hash identifier:          uZYFX3bTadZRyxmwdYLo09vAIl+E/xVkg3jkyJwKQSw=
Subject key identifier:   81:2E:7E:37:A1:ED:3C:7E:C3:17:9F:5A:86:9F:61:C4:69:C5:D6:27
Authority key identifier: AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC
Certificate issuer:       /CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
Certificate serial:       0196C9BB46E81D4EC1549DEF51A162250040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
Manifest number:          09D2
Signing time:             Tue 13 May 2025 13:00:15 +0000
Manifest this update:     Tue 13 May 2025 13:00:15 +0000
Manifest next update:     Wed 14 May 2025 13:00:15 +0000
Files and hashes:         1: ruqgluuzdlfk060hdmQRctbiArw.crl (hash: oH99QzBOoaT+cVW3V7Kb35PZV2r2UeK/+YSwWmuHoCE=)
                          2: skCVKxk18u8iDsYso8A72bgiHug.roa (hash: nn/x2nXxtAw5Z/QReAqKvy2u4x4tQ9QyKaEVK0rkZpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 13:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:bb:46:e8:1d:4e:c1:54:9d:ef:51:a1:62:25:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeeaa096ebb37657e4d3ad2176641172d6e202bc
        Validity
            Not Before: May 13 13:00:15 2025 GMT
            Not After : May 14 13:00:15 2025 GMT
        Subject: CN=812e7e37a1ed3c7ec3179f5a869f61c469c5d627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9f:22:c8:42:22:6c:10:ef:ab:aa:bd:e2:7d:
                    4b:ce:b4:c9:db:b0:49:08:3d:75:9d:63:93:cc:1f:
                    1e:bc:83:dd:52:98:4a:46:1a:21:28:93:a8:97:be:
                    73:8e:3f:4d:75:30:c6:6b:e2:46:11:79:96:31:e6:
                    fc:3d:d7:b9:6b:bf:fb:9b:1e:92:0b:60:a1:8e:a3:
                    e8:91:1e:29:37:45:de:43:62:0c:b9:10:2b:a0:24:
                    54:2a:42:61:75:97:54:d1:f8:c8:4c:37:2d:05:a9:
                    a2:10:06:1b:e2:26:7d:bc:eb:d9:89:b4:d4:f8:09:
                    22:97:11:aa:af:d6:e9:14:7c:b4:4f:85:db:8e:cb:
                    5d:12:ba:88:5b:bd:dc:64:7c:45:fd:a0:f4:07:f0:
                    02:bd:ab:95:f2:b0:79:87:49:ef:5d:a2:d2:50:ea:
                    69:b9:b3:40:4c:62:d9:77:bc:cf:f3:cc:ac:08:98:
                    39:e4:5d:8b:99:ed:bb:bd:55:2d:93:f8:ec:81:0e:
                    77:3d:5e:f9:c1:12:0a:02:e5:53:f2:48:03:4c:56:
                    85:49:97:32:31:71:80:a5:15:62:ff:ee:57:9b:b1:
                    a3:41:e4:88:4c:f8:a6:b7:98:43:ae:2e:d4:cd:9e:
                    7b:6a:25:b8:bd:e5:5a:3c:c0:77:14:15:0c:07:b3:
                    7b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2E:7E:37:A1:ED:3C:7E:C3:17:9F:5A:86:9F:61:C4:69:C5:D6:27
            X509v3 Authority Key Identifier:
                keyid:AE:EA:A0:96:EB:B3:76:57:E4:D3:AD:21:76:64:11:72:D6:E2:02:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruqgluuzdlfk060hdmQRctbiArw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/becf48-035a-4471-bdf3-ffd5bf5969df/1/ruqgluuzdlfk060hdmQRctbiArw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:0c:6b:83:c4:3d:5f:b4:52:07:a2:b3:be:3a:00:33:f8:8c:
         03:6a:c1:f1:a6:68:03:35:8c:09:b2:b1:8c:f9:be:a0:eb:d8:
         97:98:ca:61:da:94:db:1a:27:16:84:be:8b:7c:9b:6d:e2:95:
         2f:65:0d:f1:b8:b3:3e:4b:0a:26:87:90:eb:a2:5a:d4:36:84:
         04:3e:e1:7d:86:aa:10:32:6f:0e:c3:db:97:42:ce:c5:ab:49:
         a6:58:27:46:24:37:73:e0:07:b9:11:de:bd:c5:02:fd:b1:c0:
         4d:ac:26:b2:d8:87:62:17:39:26:f5:46:51:82:0a:08:52:7f:
         ec:c0:85:7a:2b:46:7c:c4:aa:74:83:67:47:5f:9a:e0:20:d4:
         55:1a:a6:4a:89:36:a1:fa:3d:df:33:68:50:56:9a:6c:bc:80:
         b9:ba:ef:a0:26:f2:12:a0:af:6b:65:a1:a8:38:13:8f:db:44:
         4e:ef:18:c0:de:0e:84:75:70:8e:11:3e:74:b0:b3:e4:5e:87:
         43:76:a7:10:aa:0b:2d:90:af:38:dc:97:ec:68:6b:e5:ab:e0:
         d9:f2:36:4f:6a:bd:13:23:74:a0:c0:5e:a8:a0:d1:55:0a:04:
         51:f8:a9:8f:56:5c:e1:2a:52:27:56:46:0f:d0:b9:6f:b4:39:
         c1:4c:6c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:48:25 2025 by rpki-client