Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
File:                     0jbg4txaKEOOMOv9HWpqlNs9HEA.mft (raw, json)
Hash identifier:          AU+bT/Oila4eZRe9nPQYcXPrvSe2w07x3Fmkz8c9imM=
Subject key identifier:   F6:1E:1B:05:D4:7B:DB:60:BA:39:D4:37:06:79:80:BE:04:39:12:41
Authority key identifier: D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
Certificate issuer:       /CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Certificate serial:       0197B6A1CB199C93C26266BAB3AF93A726B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
Manifest number:          102F
Signing time:             Sat 28 Jun 2025 13:02:25 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:25 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:25 +0000
Files and hashes:         1: 0jbg4txaKEOOMOv9HWpqlNs9HEA.crl (hash: 9CCJ+r7EfJiexukD7rWCbd6UDhaWiUtU/OiPFiqx2Ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:cb:19:9c:93:c2:62:66:ba:b3:af:93:a7:26:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
        Validity
            Not Before: Jun 28 13:02:25 2025 GMT
            Not After : Jun 29 13:02:25 2025 GMT
        Subject: CN=f61e1b05d47bdb60ba39d437067980be04391241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d2:d0:24:d2:59:fa:a7:11:6b:71:50:38:6f:
                    45:a2:c4:91:12:05:cf:89:c8:df:74:67:48:68:67:
                    1c:d0:26:2a:ac:7b:d1:f5:0f:82:ca:ef:06:0d:32:
                    61:a2:4a:02:d3:e3:41:57:ae:19:00:a7:1f:c7:b8:
                    46:42:4d:29:24:bb:07:19:3a:0f:4f:ee:66:b1:8d:
                    42:30:a3:b5:28:95:89:bc:8d:36:95:94:0a:dc:58:
                    12:c9:4d:bb:de:1e:2d:12:6a:fb:53:71:fe:09:37:
                    c3:ed:5a:9e:52:96:01:ff:e2:56:86:f9:a1:db:99:
                    d2:c5:b8:c9:99:34:12:d6:2c:30:d5:15:b8:7a:f1:
                    94:d3:1e:d6:f0:c0:ee:93:6e:23:c9:8d:87:c0:de:
                    85:1b:02:df:26:58:26:78:97:f0:73:71:8b:f6:d4:
                    c6:93:13:a2:e4:ab:c6:cb:bd:d3:6b:3b:ef:5d:72:
                    0c:96:a1:71:3d:2a:69:23:b6:bc:5b:4d:d4:b1:6b:
                    64:c7:c1:82:b1:23:a1:e6:68:05:9d:1c:13:8e:bd:
                    18:9b:b2:d2:ec:26:b5:0a:0d:17:16:88:0f:da:19:
                    be:d1:5d:02:56:35:20:98:d6:71:13:29:0d:0a:c9:
                    51:3b:e1:54:ac:de:cc:26:d4:49:e8:33:60:56:4a:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:1E:1B:05:D4:7B:DB:60:BA:39:D4:37:06:79:80:BE:04:39:12:41
            X509v3 Authority Key Identifier:
                keyid:D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b5:85:e8:d3:1e:53:e2:18:92:4f:79:f7:f8:a2:a1:5e:39:
         c0:4b:f0:a2:cf:59:c3:6c:d6:d1:a2:19:6f:84:d1:35:4d:4b:
         58:5e:24:6f:bb:1e:2b:36:cc:36:a0:cc:d1:7f:fe:a3:17:c2:
         aa:ff:23:eb:e4:1f:ea:d8:ee:c8:db:2c:7c:8a:be:31:64:a3:
         8a:fe:11:33:79:64:d0:b2:ee:de:8b:f9:6f:2d:65:6c:cd:a3:
         72:7a:2c:79:0c:58:c1:a5:ca:e6:5b:5b:ed:9b:96:eb:d4:62:
         ea:5c:b5:f8:21:ad:f4:a9:d4:60:01:9b:e0:9c:b5:c0:5b:4f:
         29:47:c1:ff:a0:41:80:9c:dd:fd:21:4f:77:b4:9f:eb:ab:90:
         47:09:72:14:ac:7d:49:87:31:0b:cd:06:e3:41:51:a4:40:13:
         a7:33:35:d8:9e:84:3b:21:3a:4f:b0:6f:2e:cb:e1:49:2b:57:
         f4:98:63:5e:ed:e1:a5:d9:25:64:3f:2c:2e:19:16:c4:1b:38:
         37:b2:3e:44:77:91:71:8c:cf:ce:9d:40:65:41:e2:8d:1c:73:
         1a:d6:1f:b0:a4:f8:4f:4f:fd:b9:5b:28:b2:b3:5e:dd:8c:90:
         1c:fc:66:5f:9d:d6:05:c9:d9:43:c5:67:9a:6f:23:14:3d:7a:
         47:e9:56:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:54 2025 by rpki-client