Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
File:                     0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft (raw, json)
Hash identifier:          MOEk7cHg84waoytj220swVAq2eqGEILavtG6CEybVLU=
Subject key identifier:   0F:42:AA:EF:C4:EF:13:51:80:AE:5E:D4:F1:FA:8C:5F:C0:02:DC:73
Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7
Certificate issuer:       /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
Certificate serial:       0196771EC60C8A1DFC1427F098A21F4DA4ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
Manifest number:          0913
Signing time:             Sun 27 Apr 2025 12:00:27 +0000
Manifest this update:     Sun 27 Apr 2025 12:00:27 +0000
Manifest next update:     Mon 28 Apr 2025 12:00:27 +0000
Files and hashes:         1: 0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl (hash: 9b7Lzt31r22FapOV7bAg1NhNcIvjdBCZAEWyHe/kHpk=)
                          2: XLp6CpBQr9azCpsnYXzng1ufYf0.roa (hash: VoQFnds5dZA1et1XDrrDT8jx8hBkjrNF5oeGODTmq4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:1e:c6:0c:8a:1d:fc:14:27:f0:98:a2:1f:4d:a4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7
        Validity
            Not Before: Apr 27 12:00:27 2025 GMT
            Not After : Apr 28 12:00:27 2025 GMT
        Subject: CN=0f42aaefc4ef135180ae5ed4f1fa8c5fc002dc73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7b:af:41:9c:d9:d4:7b:cd:28:23:8b:8e:09:
                    c3:94:b9:17:25:d0:2e:c6:c6:31:61:00:84:e4:20:
                    85:10:1a:a8:56:b8:48:8c:38:52:d0:c4:27:87:20:
                    e5:2e:9b:9a:26:d6:d6:ad:82:c9:bf:d0:91:0a:c0:
                    03:52:c9:fe:f5:b8:66:04:5d:ef:8b:bc:b7:38:e4:
                    77:00:9b:9c:c1:7c:92:f0:22:96:f4:04:f7:36:e4:
                    0e:0e:5e:1d:69:e9:54:51:4f:da:26:cf:78:ea:00:
                    89:05:bc:c8:c3:7a:44:2b:1b:7b:f3:c2:4b:a5:94:
                    e5:75:73:0f:5f:35:d8:6b:ce:2c:1f:a4:a3:75:20:
                    7e:4f:f8:f8:25:c5:33:96:8b:a6:0a:ae:62:6f:0c:
                    bd:03:2a:08:fa:ac:e9:69:89:93:4b:fb:e5:d7:4d:
                    63:4f:45:a9:36:c9:3c:9f:bd:d9:1f:b3:c7:64:fc:
                    db:a6:92:b5:10:d9:e5:ee:cf:ca:ac:59:6d:b7:0f:
                    e0:0c:06:fb:12:14:b5:65:1c:ff:3c:7b:d4:87:14:
                    3f:31:39:9b:3b:fd:65:60:6c:b8:1a:16:a2:fb:65:
                    9c:fd:17:46:99:7b:f0:db:da:4a:73:7d:18:77:52:
                    72:70:fd:48:fd:ec:1b:19:fc:63:07:be:bd:95:6b:
                    de:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:42:AA:EF:C4:EF:13:51:80:AE:5E:D4:F1:FA:8C:5F:C0:02:DC:73
            X509v3 Authority Key Identifier:
                keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c6:19:83:61:cc:d6:58:fe:c6:d0:8c:5e:7c:b4:b0:fb:95:
         79:34:11:ca:5b:2d:69:c7:86:f1:ab:c7:20:9d:b5:a4:9c:9d:
         d4:96:4f:84:0c:2f:96:8a:1e:95:50:71:3d:b4:ad:c7:59:33:
         af:d7:f3:da:11:0a:f2:54:62:06:ca:1e:a6:c5:76:9f:5f:72:
         67:ca:95:7e:ea:34:b9:a4:b1:f8:95:7b:e5:3e:ec:72:84:ee:
         7b:7f:c7:26:d0:d0:f7:0a:61:2b:2e:22:25:e7:aa:ba:5c:4f:
         66:72:a4:83:86:01:1b:fa:5a:52:f3:26:52:a1:32:69:a1:2f:
         62:74:cf:6c:22:f8:c8:7a:f8:4a:9e:05:f3:62:9e:9b:90:b1:
         e0:54:02:1a:b3:42:ac:23:87:a4:5b:52:c0:47:8e:82:56:0d:
         aa:e7:dc:08:d5:55:73:9f:05:fa:34:a6:2f:07:8e:73:d5:74:
         3d:e8:72:88:11:49:51:b0:36:e8:34:f5:a2:c2:18:c1:ad:4e:
         9d:de:a6:c6:22:5e:86:04:25:ea:1c:29:38:21:64:6f:18:99:
         03:e0:31:8d:9d:b5:b2:87:96:f3:13:59:42:cc:d4:94:4f:97:
         cc:b3:cc:b8:a7:e2:99:48:a9:17:02:e5:8e:46:fa:37:02:71:
         63:9f:75:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:08:38 2025 by rpki-client