Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
File:                     mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft (raw, json)
Hash identifier:          HR+bUqSbrXxLz7wIdLB1uBUV3Xj90v/NfVmS7iVtepw=
Subject key identifier:   2C:B5:64:EA:18:60:32:AF:9F:8B:D8:58:B9:89:C8:A7:64:AE:53:9D
Authority key identifier: 9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC
Certificate issuer:       /CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
Certificate serial:       019747428B717B7BE63701C06F63AF6CCA89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
Manifest number:          09DF
Signing time:             Fri 06 Jun 2025 22:00:32 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:32 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:32 +0000
Files and hashes:         1: mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl (hash: lHcvdCoilUImOae35qNP0rFNimRBO3RnUvDVPQvO9MM=)
                          2: yetABbyl2MadBOs3otjwQ2Snhiw.roa (hash: QjHSeYtiJ8ed7+XFEV/Jho222/lz+EVhX5TG4jAr6Y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:8b:71:7b:7b:e6:37:01:c0:6f:63:af:6c:ca:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
        Validity
            Not Before: Jun  6 22:00:32 2025 GMT
            Not After : Jun  7 22:00:32 2025 GMT
        Subject: CN=2cb564ea186032af9f8bd858b989c8a764ae539d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:93:c2:71:f3:87:39:f2:6b:c0:6a:9a:a9:ac:
                    20:92:87:89:e7:7e:b7:ce:24:e3:ed:80:71:4b:b9:
                    04:d2:c5:e9:1f:74:38:68:43:c5:48:98:ca:df:6e:
                    47:60:67:6b:a2:38:a6:da:7b:ad:1b:6b:78:05:ff:
                    2f:ce:38:42:02:df:fc:f5:cc:7b:a2:86:f9:ca:5c:
                    b6:12:3e:30:db:77:15:ce:eb:33:c6:00:4a:8c:88:
                    80:2c:4e:c6:ca:86:96:7c:0e:ab:12:82:08:50:a9:
                    dd:6d:4b:15:5c:c9:81:45:96:62:d5:ec:95:a7:0d:
                    0b:56:48:10:38:fb:54:ab:f8:4b:09:8e:f4:29:03:
                    fb:ea:05:d9:9a:e9:82:32:21:d5:3b:f7:68:81:bd:
                    de:03:ff:b7:16:51:0c:f1:05:1a:3c:7d:d9:2e:cb:
                    47:33:93:3e:a9:8f:60:ab:3d:08:86:53:e7:4d:92:
                    30:84:92:30:f3:db:91:62:9b:ef:52:99:2f:fd:a1:
                    5b:94:50:9b:b7:11:09:49:f3:66:89:b5:80:61:6f:
                    84:2e:0b:6f:6a:d7:b2:5a:3a:e3:6f:a9:1a:04:8c:
                    0d:2a:e0:16:b3:95:22:b5:07:85:42:6b:6d:26:c0:
                    c8:e1:dc:78:c7:e3:9c:d4:58:45:9e:bf:f7:6f:15:
                    ee:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B5:64:EA:18:60:32:AF:9F:8B:D8:58:B9:89:C8:A7:64:AE:53:9D
            X509v3 Authority Key Identifier:
                keyid:9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b2:e6:73:57:2f:96:4a:92:81:d9:41:38:1a:0f:b8:8c:0d:
         c6:75:6e:c5:03:6e:28:22:ab:0c:34:85:00:c5:b4:7b:82:cc:
         4c:43:41:67:cf:13:53:bb:20:bc:e7:53:f8:71:ff:79:27:d4:
         29:26:75:7c:a6:17:74:77:e3:ff:ad:a9:38:14:24:42:9d:59:
         42:01:5e:ed:98:70:e2:60:3a:44:33:e7:03:1c:8d:6b:fd:76:
         3a:7c:b1:c1:c1:3d:63:6f:3e:71:ec:92:11:85:e0:e6:4f:46:
         b1:46:51:a5:e1:0e:47:c4:87:2b:59:fd:07:5a:a6:14:5c:33:
         b9:ef:21:73:44:b7:8f:75:55:8b:b7:57:cd:56:08:47:aa:40:
         5f:87:b0:df:1e:b5:10:17:6a:fd:a5:d4:d8:65:33:bc:b5:02:
         c5:3e:28:0d:13:0e:be:90:c0:ed:a4:ec:21:0c:c4:e2:f9:d7:
         a8:da:66:cb:91:bb:0d:65:30:ee:62:10:59:36:58:14:4b:21:
         95:df:2a:98:bd:bd:a0:cb:e6:1d:74:f9:46:0e:a4:46:df:d1:
         ac:94:d9:0d:74:a5:0a:90:7b:6c:90:4e:5c:63:fb:0d:d1:c5:
         c7:e1:92:ed:72:29:83:10:9b:f7:3f:45:39:94:2e:d0:4d:bf:
         59:46:4a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:19:10 2025 by rpki-client