Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File:                     mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier:          RznLMdFRZx6F9c+thY9q0bO9BONdmYpluBQRtWDqjdM=
Subject key identifier:   88:C0:44:26:6D:53:27:60:93:D8:A9:27:3B:19:DB:D9:99:83:75:E7
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer:       /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial:       019768BC3D42B400BFBCB3D0B1379DC4499F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number:          0D33
Signing time:             Fri 13 Jun 2025 10:00:56 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:56 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:56 +0000
Files and hashes:         1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: sJFZgsgobYBrfzvHhyXI22dgDhnrnpfNM68RIYuENt4=)
                          2: tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa (hash: 8uihYN23ifte2oFPdIuQAy0N/nJNzlURQ/IFD78Lv/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:3d:42:b4:00:bf:bc:b3:d0:b1:37:9d:c4:49:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
        Validity
            Not Before: Jun 13 10:00:56 2025 GMT
            Not After : Jun 14 10:00:56 2025 GMT
        Subject: CN=88c044266d53276093d8a9273b19dbd9998375e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:9f:c1:ce:85:d6:b6:ec:ca:a0:bf:4d:71:
                    02:55:36:3b:cd:87:34:0d:c7:db:26:ce:da:59:f1:
                    e5:6e:77:e0:c8:78:91:e9:b6:88:6f:c7:58:f3:11:
                    58:5c:0c:92:2c:bb:9f:4c:84:bd:43:5f:7a:e8:95:
                    32:11:2e:a3:77:fb:a4:07:88:22:3b:7c:39:16:34:
                    97:35:fc:c5:97:d1:35:23:46:c1:29:72:8a:8b:2a:
                    09:41:78:51:b5:a0:50:a6:ef:ee:f9:0c:42:68:26:
                    4d:0b:1f:7d:2b:17:ad:bd:61:46:a3:d2:dc:82:10:
                    7e:3d:af:d2:0e:36:87:15:8e:bd:d8:43:6b:51:de:
                    40:ab:56:68:09:b7:8e:2b:fb:81:ab:dd:10:30:94:
                    df:2e:7b:fa:46:69:0f:7f:c5:99:15:e0:00:6a:85:
                    fb:30:e6:b3:37:bd:e3:5a:c3:6c:92:b6:5b:2d:40:
                    fc:fd:9f:0e:a2:22:b8:ee:41:ec:ae:12:b0:c8:26:
                    f2:2b:3f:a0:94:69:31:59:c1:4b:cf:df:61:5e:0a:
                    76:8d:4b:c9:6f:ac:49:a3:12:f2:7c:a7:b4:e2:b8:
                    35:d2:56:c8:99:a8:aa:3b:25:96:44:78:dd:73:4d:
                    38:46:f2:3e:5d:07:fc:7f:fd:91:47:94:fd:08:28:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C0:44:26:6D:53:27:60:93:D8:A9:27:3B:19:DB:D9:99:83:75:E7
            X509v3 Authority Key Identifier:
                keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:08:3e:76:89:fd:58:06:e1:1c:a5:5c:cc:e8:c3:90:e7:65:
         4f:19:8d:0e:15:0a:2b:90:bb:5d:3f:63:13:ee:c0:10:44:c8:
         ef:bf:40:f2:0a:9e:1c:d2:60:f5:89:f9:0f:54:0d:2d:88:ad:
         bb:05:fd:0e:3f:9e:8d:f0:7a:4b:6e:d5:ad:87:4a:49:84:20:
         b7:2b:31:ac:cc:cd:d3:13:13:bb:13:36:c4:c0:ee:7a:9c:32:
         a2:78:45:b7:a8:cb:d6:66:bc:f4:a7:26:1f:54:0c:ce:31:17:
         a7:5e:1e:c1:42:83:cb:4c:c7:5d:ea:40:ad:bf:1e:37:b3:ac:
         a9:72:b6:39:21:7e:eb:f6:e7:80:60:4a:9f:87:14:39:de:45:
         4a:4b:24:f7:b7:db:a9:7e:fd:8f:dc:48:ac:83:f3:c2:2e:64:
         ee:68:0b:01:da:6e:27:f3:df:c8:19:f2:36:8c:bb:88:9a:9b:
         54:62:97:93:21:5f:c4:d6:23:49:ba:02:67:71:d3:a5:fc:51:
         b4:db:2f:a3:91:a4:87:72:88:3a:be:1d:63:18:6c:f5:89:e2:
         ba:a7:1d:16:4b:6d:36:2d:d6:a7:ca:20:d0:94:8d:6c:14:cb:
         e3:ce:26:e8:6c:0b:de:de:e8:16:cf:b7:3e:e1:13:ea:ce:de:
         8e:c9:6f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:25:48 2025 by rpki-client