Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
File:                     0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft (raw, json)
Hash identifier:          Il8qFLm1g2ncs0qGO1TExpIm4weeRtbUlFKLU9F/Ezo=
Subject key identifier:   EB:C3:98:D6:22:4A:D8:9B:F1:5E:58:D6:FF:B4:98:68:7F:3D:5C:9D
Authority key identifier: D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05
Certificate issuer:       /CN=d098e907c63457e6ca6281dfe297d972bffda805
Certificate serial:       01976C61D618A025D3C32DE6F4E8126F67DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
Manifest number:          10BA
Signing time:             Sat 14 Jun 2025 03:00:40 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:40 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:40 +0000
Files and hashes:         1: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl (hash: PIqmbrqrSBG5YlXvXd9TZSIsRiL5z1ekRNXnxINeYXk=)
                          2: ur2jQXpGWWYECBsXTeT3ihs6vVk.roa (hash: BxlFUb0zmMnW7XaJszRYUfw8FuEEod2RQjrGiW/bsc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:d6:18:a0:25:d3:c3:2d:e6:f4:e8:12:6f:67:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d098e907c63457e6ca6281dfe297d972bffda805
        Validity
            Not Before: Jun 14 03:00:40 2025 GMT
            Not After : Jun 15 03:00:40 2025 GMT
        Subject: CN=ebc398d6224ad89bf15e58d6ffb498687f3d5c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ad:5b:a4:1c:02:e8:48:5e:0e:60:34:0b:fc:
                    11:45:09:74:97:ba:a7:bf:71:ca:b5:ab:b1:f7:3b:
                    78:b2:d3:54:a3:5b:2a:04:b8:d2:1d:58:28:7e:32:
                    13:53:f8:34:ef:90:73:12:5b:bb:07:dc:23:8f:5c:
                    a6:7e:40:f3:d7:eb:15:8b:e6:4f:13:76:2f:bb:d5:
                    78:18:08:a7:01:db:72:b6:97:4b:21:ce:9b:04:27:
                    28:8f:13:59:f0:37:3b:d6:71:d1:5b:e8:75:15:f4:
                    3a:99:9f:fc:fa:cf:cf:ee:31:59:fd:d8:fa:88:14:
                    bb:a0:03:e1:d1:96:d0:e1:34:43:ca:51:6b:09:13:
                    0a:b5:f7:dc:d3:35:bd:bc:82:a0:49:6e:cc:5e:62:
                    23:b5:d3:8e:b6:dd:25:a2:f9:ff:db:7e:f8:9e:0e:
                    5a:2e:e5:ef:42:00:d8:77:62:4b:1b:4d:fb:93:6b:
                    80:1a:78:04:a9:87:85:e5:53:b1:f8:1f:fb:77:4e:
                    09:7a:ba:52:42:a7:e9:5a:1e:74:ef:a3:2d:b4:d5:
                    51:db:1c:91:69:ec:73:ba:5e:cd:98:2d:79:a0:ab:
                    3f:a4:c1:8d:4f:36:cf:29:08:8c:cc:8a:e0:48:ac:
                    1c:57:c1:9e:6c:6c:fa:8c:d1:b0:dc:89:de:a7:ba:
                    49:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C3:98:D6:22:4A:D8:9B:F1:5E:58:D6:FF:B4:98:68:7F:3D:5C:9D
            X509v3 Authority Key Identifier:
                keyid:D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:51:91:42:c1:c1:8c:be:ac:eb:4c:92:45:90:de:e6:87:14:
         2f:bc:94:64:3d:73:98:af:11:12:9d:bb:eb:22:7f:58:20:77:
         30:5e:fa:90:e7:cb:c2:28:aa:32:d7:6b:52:c4:36:5e:10:e9:
         24:73:d9:88:a1:b9:ed:77:b3:33:fe:bd:6e:80:52:d5:de:fc:
         d6:75:75:bf:21:de:da:ef:5c:ce:19:ca:fd:f4:3e:d0:05:c2:
         a2:e5:67:8d:0e:1f:fd:68:92:df:57:d0:64:ce:70:18:16:5e:
         ed:80:19:b0:50:da:cd:45:00:54:79:83:f1:7a:28:5c:18:3e:
         82:d1:e6:f9:08:6b:42:98:29:de:fb:69:b7:b9:24:74:08:17:
         57:8b:c8:c1:ca:59:e8:ba:49:1b:51:ad:fc:db:02:57:2e:da:
         a0:69:21:3e:c1:43:38:cd:f6:f7:cf:82:a0:b5:11:59:e5:ad:
         de:5c:ad:83:9c:04:c7:a0:7a:53:84:ef:de:25:89:fc:91:48:
         92:06:b4:73:23:04:3f:aa:6a:a7:93:d4:84:e7:c6:fa:fb:18:
         31:18:1e:f3:4b:25:37:19:0f:da:9d:e5:f9:fc:7b:c8:2f:19:
         29:2f:57:d0:27:13:b8:a7:99:8b:de:d6:87:3b:e1:d0:39:16:
         84:d2:0b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:26:42 2025 by rpki-client