Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
File:                     0jCN0RIG-lLbAE5FWsjZla9MOwg.mft (raw, json)
Hash identifier:          dhwOREX4FdpNBP+UsbF98oebC2+xMoNkPk7zvUUd5Og=
Subject key identifier:   53:10:D8:5F:9C:7F:46:5D:AA:7E:AE:C6:9A:70:FE:5D:D6:DA:A3:BF
Authority key identifier: D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08
Certificate issuer:       /CN=d2308dd11206fa52db004e455ac8d995af4c3b08
Certificate serial:       01984A40DEE30E8D536AD0917B183CA9827F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
Manifest number:          0584
Signing time:             Sun 27 Jul 2025 05:00:21 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:21 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:21 +0000
Files and hashes:         1: 0jCN0RIG-lLbAE5FWsjZla9MOwg.crl (hash: KfkmlU5lIczbPojdqQJydXoN1/TrhUta9Wdyln8T5qc=)
                          2: MODcJVbQ7tIyULkAi32tBDPkIQ0.roa (hash: b4XxIhCxRBgha/DwCew59vKJiKvbCmMkhqVHdTGJTgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:40:de:e3:0e:8d:53:6a:d0:91:7b:18:3c:a9:82:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2308dd11206fa52db004e455ac8d995af4c3b08
        Validity
            Not Before: Jul 27 05:00:21 2025 GMT
            Not After : Jul 28 05:00:21 2025 GMT
        Subject: CN=5310d85f9c7f465daa7eaec69a70fe5dd6daa3bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cf:5f:95:80:05:f1:c7:84:b0:2c:ec:63:75:
                    99:4d:46:aa:ad:2a:9e:34:b6:e3:77:aa:05:5f:e6:
                    4d:24:d7:f4:2a:2f:69:c2:3a:7a:cd:37:4e:40:d3:
                    54:21:1e:17:c4:87:ea:be:b8:95:f3:c8:f9:69:81:
                    1f:b1:97:ce:ab:b1:09:af:91:69:49:2f:79:40:b4:
                    d7:2f:e4:7f:01:7b:f7:f3:fa:53:b7:44:ee:1d:6e:
                    ac:9c:37:52:00:da:35:f3:f1:3e:09:09:e8:9a:bc:
                    e1:66:c8:97:18:bb:9b:c7:4c:4a:df:3a:2c:69:13:
                    ab:95:81:d2:fb:93:77:a6:7c:79:5a:04:c6:35:c2:
                    7c:d5:85:42:48:22:10:c6:88:23:54:cc:f5:28:a1:
                    ea:55:1e:ba:d2:63:11:93:01:a4:07:b8:82:2d:1b:
                    98:46:ac:0b:5b:7f:37:fb:37:3b:e8:ff:1d:55:fe:
                    59:0f:91:06:e4:1a:45:99:62:7b:b2:5b:38:01:39:
                    d0:e0:43:61:05:c3:8c:78:ff:c3:0d:d9:78:01:63:
                    ef:57:d8:bc:6c:7d:18:0d:1c:39:64:a7:84:bd:16:
                    a4:da:60:f2:24:85:1c:20:4a:de:6b:41:2c:26:70:
                    6c:28:4f:75:0e:b8:bc:1f:4f:2d:3b:2b:2c:ce:d2:
                    fa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:10:D8:5F:9C:7F:46:5D:AA:7E:AE:C6:9A:70:FE:5D:D6:DA:A3:BF
            X509v3 Authority Key Identifier:
                keyid:D2:30:8D:D1:12:06:FA:52:DB:00:4E:45:5A:C8:D9:95:AF:4C:3B:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jCN0RIG-lLbAE5FWsjZla9MOwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cfeb07-66f7-4b51-bea6-dadbee1e2c2c/1/0jCN0RIG-lLbAE5FWsjZla9MOwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:1d:2d:7c:8d:81:56:18:7a:2f:b4:d4:d6:88:41:ce:43:38:
         9b:e4:93:f2:35:9d:bf:12:0a:45:a9:b8:eb:4a:3e:ba:9a:3f:
         f2:17:74:33:0e:ac:38:2e:4f:12:fa:8d:35:4b:cf:b2:6f:ce:
         67:24:68:72:0e:0f:1b:dc:8d:da:9a:b4:40:69:61:2c:26:de:
         11:5d:e3:1b:ee:11:5e:dc:17:fe:d4:55:f9:86:cc:26:59:e5:
         1b:b0:02:e3:85:1c:47:85:cf:d2:59:97:74:b2:7e:2f:0b:35:
         f3:82:8c:92:f2:e2:73:e9:d6:8d:6c:56:a3:8f:61:8e:c2:74:
         12:72:0d:f3:0f:0e:85:b4:34:f8:af:13:6f:fa:ee:38:63:b3:
         c0:6a:d3:84:19:16:b0:cf:b6:29:7b:db:d4:61:19:ad:ca:cb:
         83:19:f5:19:6b:15:f2:c0:79:39:fb:9b:67:90:a0:e3:37:ab:
         4e:24:0c:93:79:46:5e:b3:36:61:37:16:fc:d7:96:0b:25:29:
         ac:66:6a:00:28:58:44:48:b1:22:ae:cf:7c:0b:25:74:8a:12:
         b2:05:6e:e2:7f:b6:54:da:21:1f:e0:ed:8f:ef:ad:d8:0f:05:
         e9:78:1c:23:f4:b5:13:27:f4:54:33:1d:69:25:f0:12:84:1b:
         54:b2:9a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:55:54 2025 by rpki-client