Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
File:                     0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft (raw, json)
Hash identifier:          6DZWDM3Gob9DYCtqxh+VC8XK8iW5xrzhLzrqhoZVI+g=
Subject key identifier:   99:30:B8:F3:C6:37:D1:9B:8F:C9:24:1E:65:0D:99:9B:B8:B8:7F:52
Authority key identifier: D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6
Certificate issuer:       /CN=d095364395ccfd8543977358fa9b71f9271544f6
Certificate serial:       0197684E82758B9A19A9EDF3DDA08C69C1B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
Manifest number:          0D57
Signing time:             Fri 13 Jun 2025 08:01:04 +0000
Manifest this update:     Fri 13 Jun 2025 08:01:04 +0000
Manifest next update:     Sat 14 Jun 2025 08:01:04 +0000
Files and hashes:         1: 0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl (hash: o2EIXbGnCa7ntg4kals3sCuz33eisUMgFlDb3A6SCHY=)
                          2: WMhbwojz363aPcIT4pKLzOiKIQA.roa (hash: t03L1DneJHTF/s4FlG1CvztpxUkTwBNYCp5o+q76WB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:82:75:8b:9a:19:a9:ed:f3:dd:a0:8c:69:c1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d095364395ccfd8543977358fa9b71f9271544f6
        Validity
            Not Before: Jun 13 08:01:04 2025 GMT
            Not After : Jun 14 08:01:04 2025 GMT
        Subject: CN=9930b8f3c637d19b8fc9241e650d999bb8b87f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0e:6d:29:d0:95:12:37:b1:be:3c:4d:89:82:
                    d6:e9:9d:f2:89:1e:f4:28:97:6e:23:2a:4c:f9:77:
                    7b:b8:64:be:0a:c0:45:91:b2:f8:43:58:25:74:07:
                    f5:2b:25:c3:ad:03:5e:53:c7:62:ce:a1:29:76:c3:
                    21:be:89:cf:69:b5:e1:ef:42:e6:03:b2:2b:d1:c3:
                    dc:6e:f4:e1:1d:29:2b:6c:26:4d:2c:5e:2e:ad:0f:
                    d8:c9:1a:ef:0b:20:12:30:9f:5e:07:36:e7:8c:93:
                    1b:b6:47:f0:ed:06:25:48:ab:3b:58:ff:f8:e5:bb:
                    6a:50:ce:19:0c:2f:d5:16:09:e2:81:43:14:99:a8:
                    12:4c:93:e4:d7:35:22:a3:46:87:b4:9d:6b:d5:d8:
                    7a:92:8a:21:81:7b:f0:d6:9e:30:b3:c1:2d:ab:21:
                    83:f3:41:a8:22:51:9e:c8:12:98:6a:1c:19:18:24:
                    f9:e1:c7:41:d3:a0:ea:23:9e:64:90:1f:a0:69:7e:
                    96:7b:68:22:c1:d9:ec:c2:d0:b5:60:d2:c1:d0:40:
                    a3:8a:06:e9:48:b5:33:a9:c5:03:12:9c:05:21:8b:
                    db:d3:66:33:e7:c5:48:49:40:da:16:23:72:0d:a7:
                    f0:4e:be:0d:8c:c2:f8:83:b5:96:53:e3:b9:66:ce:
                    1b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:30:B8:F3:C6:37:D1:9B:8F:C9:24:1E:65:0D:99:9B:B8:B8:7F:52
            X509v3 Authority Key Identifier:
                keyid:D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a2:22:6b:c5:8f:5b:a4:81:68:f6:94:ba:c7:3b:77:8a:ab:
         32:a8:b7:1b:b0:d0:5a:d6:34:15:e0:cd:ae:8d:62:80:41:b2:
         66:6d:ac:92:c5:08:b9:35:f6:34:0d:fa:a2:a4:a7:eb:3a:1f:
         eb:c0:b8:d5:72:04:e6:f7:25:b3:0f:d4:c0:2c:c1:7e:9a:37:
         d9:b1:43:bc:08:94:69:99:cd:02:34:c6:9e:45:4c:22:42:02:
         b5:57:f1:3d:57:76:1d:06:24:78:8a:35:bc:3f:0f:00:c5:00:
         4d:b8:a1:1d:65:d4:b6:d3:b5:84:3f:bb:27:13:9e:bb:1a:40:
         9a:4c:70:fd:40:e6:a8:36:f4:d5:e5:00:d4:de:7a:f7:b4:05:
         5e:3b:cb:3e:da:f5:f1:8b:79:c9:a6:b0:47:89:53:82:b0:34:
         bd:70:ae:d4:1d:a2:8c:f8:48:bb:c8:5e:ff:8f:77:2e:dd:c6:
         25:29:1b:cf:4d:7a:bf:5e:e8:8f:a2:f8:8a:5a:cc:61:55:87:
         c8:31:91:b9:c7:a3:94:ed:a0:cd:2e:76:58:a6:68:31:50:24:
         60:a0:78:99:71:ea:98:d1:4e:a8:dc:dc:0f:5e:50:b9:94:4f:
         f0:06:c5:49:de:eb:da:37:99:c8:05:09:14:b9:62:34:b5:83:
         89:fb:fc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:12 2025 by rpki-client