Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
File:                     0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft (raw, json)
Hash identifier:          22wwDyvwQ7+C6XMQdIGyk5K7O1vj5qZePSk1z6H7plg=
Subject key identifier:   EC:98:F5:2F:69:B5:2E:00:B7:52:ED:F7:37:B0:F4:EA:ED:75:98:DF
Authority key identifier: D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6
Certificate issuer:       /CN=d095364395ccfd8543977358fa9b71f9271544f6
Certificate serial:       0199228C9EBE6BC642C2279F6C965FE49466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
Manifest number:          0E3C
Signing time:             Sun 07 Sep 2025 05:01:04 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:04 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:04 +0000
Files and hashes:         1: 0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl (hash: BU67w9JTv8pdjHYQG5Lxal+JOee3TIDas27SzPyZEIw=)
                          2: WMhbwojz363aPcIT4pKLzOiKIQA.roa (hash: t03L1DneJHTF/s4FlG1CvztpxUkTwBNYCp5o+q76WB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:9e:be:6b:c6:42:c2:27:9f:6c:96:5f:e4:94:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d095364395ccfd8543977358fa9b71f9271544f6
        Validity
            Not Before: Sep  7 05:01:04 2025 GMT
            Not After : Sep  8 05:01:04 2025 GMT
        Subject: CN=ec98f52f69b52e00b752edf737b0f4eaed7598df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:d8:51:d7:f4:e9:0c:58:66:8e:75:a6:09:
                    a1:2c:ca:52:c8:82:d8:a7:e1:84:45:80:a9:5f:cd:
                    45:b0:91:52:a1:7d:49:79:ff:ee:0a:51:ca:33:ba:
                    49:d4:c7:b5:a7:4e:69:58:cf:f8:8e:f8:16:42:36:
                    1c:56:79:a3:28:de:30:f2:42:cb:7e:c0:10:cf:6d:
                    c3:e0:cd:18:99:ba:03:7c:ae:80:e8:b7:3b:cd:75:
                    c2:6c:27:d1:03:43:d0:53:24:23:5b:b4:ec:b0:4b:
                    32:8d:54:a2:93:45:c1:95:40:42:d8:42:52:c9:ae:
                    57:e5:87:04:63:b8:6d:61:f7:f9:58:1a:68:2d:ec:
                    07:9b:0d:20:04:47:d8:ad:3e:05:62:57:42:be:c8:
                    a0:60:23:38:78:6e:58:c6:b3:0d:ea:3e:02:67:f2:
                    57:95:f9:d0:b0:eb:49:54:0f:5a:34:85:e8:81:3c:
                    f9:50:13:16:a3:c0:a6:cf:0c:c4:b1:c2:af:40:c9:
                    5f:e6:93:77:d0:e6:78:a3:10:40:73:d5:45:e7:3b:
                    55:36:a9:41:b9:fd:56:0f:78:dd:34:84:1d:4a:cf:
                    2a:a0:3d:23:1b:a7:dc:b4:6d:06:fe:91:68:d2:c1:
                    3f:70:4e:7b:7e:69:83:1c:a0:62:6b:81:b2:8e:ab:
                    77:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:98:F5:2F:69:B5:2E:00:B7:52:ED:F7:37:B0:F4:EA:ED:75:98:DF
            X509v3 Authority Key Identifier:
                keyid:D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d1:08:4e:74:de:84:a9:45:17:c8:19:b6:8a:5f:30:bd:2c:
         10:c9:4b:33:5e:1c:0d:b4:16:97:67:ea:bb:0a:a8:09:82:cd:
         48:15:20:fb:f7:30:3e:dd:8b:6f:10:2a:38:43:3e:26:9f:47:
         f7:b8:e9:2f:fd:1c:c1:8a:8c:6d:82:b4:7e:a6:8c:77:b4:e8:
         88:79:5f:fa:59:fb:20:95:f2:70:73:5e:49:93:e3:7e:3f:69:
         ac:1f:b4:cf:aa:10:0b:f3:30:64:4f:10:28:5a:36:b3:55:34:
         20:43:6a:b2:a5:77:29:c1:cb:80:df:d2:8a:a0:1c:e0:25:2a:
         7a:02:ab:6f:09:00:7f:95:56:f7:b0:42:8c:96:40:5d:87:ce:
         71:92:d8:18:86:59:79:39:6e:37:e1:15:da:74:a1:ca:41:ec:
         fb:a8:26:a5:35:aa:25:6c:73:1d:6b:cf:0a:17:a0:dd:c8:53:
         7d:68:15:a2:aa:50:b0:31:3f:94:c1:bf:21:90:15:ce:19:48:
         8c:2a:b7:bc:49:f1:50:d1:3d:c4:08:20:dd:a5:1b:bc:c4:90:
         31:75:ba:c2:2b:54:00:33:fe:39:04:89:55:ff:7a:24:1f:97:
         99:d0:0d:32:0d:17:8c:9c:bd:2d:29:27:56:0e:60:84:54:aa:
         03:9d:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:09 2025 by rpki-client