Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
File:                     0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft (raw, json)
Hash identifier:          NvrQ09aIjm0blQQ6d9BWoOljzxQ2U+RXCzn1IWW808Y=
Subject key identifier:   81:7C:5E:67:0D:91:86:F5:1E:48:0E:EF:CE:B4:B2:88:48:EC:47:88
Authority key identifier: D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6
Certificate issuer:       /CN=d095364395ccfd8543977358fa9b71f9271544f6
Certificate serial:       0197496845E72CEA28B64EBB51E167A93CB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
Manifest number:          0D47
Signing time:             Sat 07 Jun 2025 08:00:59 +0000
Manifest this update:     Sat 07 Jun 2025 08:00:59 +0000
Manifest next update:     Sun 08 Jun 2025 08:00:59 +0000
Files and hashes:         1: 0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl (hash: 1clYRmSLFwtNEmzhhg3J8Oxr69/462ffmOk0DYRsFCY=)
                          2: WMhbwojz363aPcIT4pKLzOiKIQA.roa (hash: t03L1DneJHTF/s4FlG1CvztpxUkTwBNYCp5o+q76WB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:45:e7:2c:ea:28:b6:4e:bb:51:e1:67:a9:3c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d095364395ccfd8543977358fa9b71f9271544f6
        Validity
            Not Before: Jun  7 08:00:59 2025 GMT
            Not After : Jun  8 08:00:59 2025 GMT
        Subject: CN=817c5e670d9186f51e480eefceb4b28848ec4788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:ef:46:d4:d4:21:46:49:59:7c:02:9b:1b:
                    9e:d3:f1:90:d2:cc:8f:63:8f:64:85:88:24:4a:93:
                    c0:ca:e5:76:9c:7f:c2:0f:00:28:cb:dd:80:7d:65:
                    d7:fa:09:8c:89:13:bf:18:6d:ac:fd:59:ee:90:bd:
                    e0:c0:74:70:39:c6:e7:62:ce:86:0c:46:e2:59:2d:
                    c0:06:8a:69:48:4c:ec:c9:c5:a5:84:3d:39:5c:e6:
                    93:cc:69:91:1b:d0:a9:9e:df:26:da:ee:78:e4:c0:
                    3c:19:f0:e6:a8:64:ed:48:ab:67:5f:ec:41:8c:7f:
                    e0:97:98:d4:74:5b:46:3e:db:c1:b8:28:d4:8f:68:
                    9f:8b:39:62:4e:8b:89:55:48:53:b6:4e:e7:f8:09:
                    fe:01:9c:ff:7b:2b:e2:94:72:8e:24:c6:68:8a:d6:
                    bd:8e:59:79:55:8b:2c:fd:a0:d2:49:85:53:87:0f:
                    4d:08:8e:16:51:3a:07:21:e4:0b:36:8a:9b:a5:e6:
                    bd:c6:fd:69:7b:33:7c:00:7e:a9:06:5f:00:82:f0:
                    01:2d:44:a8:b4:09:66:e4:4e:44:38:0f:2c:03:63:
                    cf:43:8d:c8:f2:39:23:ee:36:bb:c3:be:6a:1c:7a:
                    b0:9f:1c:08:bc:df:d4:f3:59:56:ed:6b:d3:3b:98:
                    1d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7C:5E:67:0D:91:86:F5:1E:48:0E:EF:CE:B4:B2:88:48:EC:47:88
            X509v3 Authority Key Identifier:
                keyid:D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:55:a0:46:4b:f9:ba:d1:6c:8b:3c:a3:f9:da:39:d4:ce:6a:
         e5:27:c0:b9:f8:6c:61:85:2c:97:47:d3:f0:52:e2:96:dd:c0:
         b4:3b:b7:56:2e:a0:65:de:4b:e3:86:ce:ad:d5:d0:04:3c:57:
         df:7d:90:82:ee:92:82:1a:c4:01:ab:43:3c:4e:9b:f7:cc:c7:
         52:96:f5:a1:85:54:7b:a6:d2:b6:3c:bd:a0:e2:22:5a:82:f7:
         48:0a:c1:ee:25:45:ed:33:cd:b5:7d:67:7a:f8:aa:0c:cf:20:
         81:36:57:bc:45:d4:f8:52:22:39:09:7f:4b:9f:89:4f:17:9e:
         aa:26:8a:d9:b8:96:70:8f:b5:fd:88:3a:51:1a:ce:b2:48:d0:
         cf:21:f6:f9:6c:41:c3:ae:a9:42:fd:79:11:73:55:7c:89:25:
         4f:4f:08:00:06:d5:0e:a1:6d:85:66:99:4d:b3:ca:fc:8b:9d:
         f6:f1:e1:8f:55:08:3e:43:56:de:be:79:ce:1c:49:59:76:4a:
         86:91:64:d4:27:e1:fb:ca:1d:be:2f:21:e9:6c:56:f8:65:72:
         95:a1:80:eb:9d:0d:4a:de:8f:03:83:9a:bf:74:c5:55:2f:55:
         83:35:d8:54:fd:c8:cb:3c:d7:c9:6e:38:fe:bb:b1:4e:be:5d:
         8f:17:98:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:04:05 2025 by rpki-client