Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
File:                     mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft (raw, json)
Hash identifier:          X0A/9UoI3dFzeZkDE07SX+XsQvYIyrjhv7b+OdonKmA=
Subject key identifier:   B3:1B:CD:35:31:48:2D:F1:82:70:C9:63:71:6F:1E:2E:CF:65:A2:A1
Authority key identifier: 9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC
Certificate issuer:       /CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
Certificate serial:       0196AEB273B4DC4AE6B6738BB720B5B9AF33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
Manifest number:          0990
Signing time:             Thu 08 May 2025 07:00:52 +0000
Manifest this update:     Thu 08 May 2025 07:00:52 +0000
Manifest next update:     Fri 09 May 2025 07:00:52 +0000
Files and hashes:         1: mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl (hash: Ycg2GA7HL5LIzAuPArlWOXHd4bfJXxRrcgqhgkvHHhI=)
                          2: yetABbyl2MadBOs3otjwQ2Snhiw.roa (hash: QjHSeYtiJ8ed7+XFEV/Jho222/lz+EVhX5TG4jAr6Y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:b2:73:b4:dc:4a:e6:b6:73:8b:b7:20:b5:b9:af:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
        Validity
            Not Before: May  8 07:00:52 2025 GMT
            Not After : May  9 07:00:52 2025 GMT
        Subject: CN=b31bcd3531482df18270c963716f1e2ecf65a2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4b:5d:03:22:11:67:cc:fd:16:f7:a9:af:2f:
                    c9:3e:2a:d9:6f:54:8b:c3:7c:d3:1d:b1:10:e3:de:
                    41:ee:fe:ec:93:49:1a:8c:a3:a4:8e:32:4a:8c:5c:
                    0e:b3:e3:43:aa:d6:14:29:cd:8a:35:2f:db:30:b9:
                    97:b5:87:9b:54:83:94:d1:53:c1:31:6e:0e:a5:fc:
                    69:37:3e:81:ab:8d:8d:b5:12:c6:f7:79:35:7b:35:
                    77:3c:0e:5c:6e:9a:e7:dd:eb:71:5e:62:2a:1e:83:
                    cf:25:9e:35:ac:d7:74:86:b2:eb:07:f0:0f:bf:0c:
                    66:e3:21:50:3f:28:3c:80:68:c9:4e:52:f4:26:52:
                    62:ff:59:fe:ca:cc:20:45:b7:5b:32:e7:25:dd:41:
                    aa:cb:28:a1:6a:1d:c1:38:80:e9:15:e2:c8:25:04:
                    d6:01:d5:9e:5b:ae:f7:77:2d:f3:93:8c:f2:84:66:
                    ba:37:d6:fe:a6:ff:0e:ee:e0:95:8c:05:6f:23:61:
                    6a:a9:15:3e:c2:8c:5e:07:ee:19:e5:f9:62:cb:84:
                    37:14:32:80:93:cd:6a:73:65:cd:3c:f3:70:df:c3:
                    6c:98:01:3f:f3:62:36:aa:50:ac:65:27:e3:b4:e2:
                    af:9d:0b:52:e6:5d:78:e5:60:cc:ba:96:5f:f6:d6:
                    fe:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1B:CD:35:31:48:2D:F1:82:70:C9:63:71:6F:1E:2E:CF:65:A2:A1
            X509v3 Authority Key Identifier:
                keyid:9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:84:04:1e:9d:1e:e6:49:01:23:22:bb:39:ae:9a:ba:07:fb:
         53:89:5f:6f:94:99:79:c8:ef:95:2f:4a:63:5e:da:5b:41:01:
         02:5b:7b:83:19:da:86:4c:ee:6f:14:97:a3:fa:23:2c:d5:10:
         32:c1:89:60:a9:d0:f3:29:b7:2a:34:1d:f7:a3:9d:23:62:b6:
         02:04:a9:91:0b:2f:69:58:dd:ce:ee:6c:dc:87:0c:72:4e:c6:
         24:58:f8:db:7a:43:72:23:98:02:8b:e8:87:b7:70:1c:31:31:
         3e:27:13:dd:e9:23:dc:9e:2b:82:0e:53:65:4e:0b:d1:84:a8:
         96:d1:d0:4a:47:84:0a:e5:06:aa:3a:50:98:e0:6d:c0:27:6e:
         dc:03:18:b9:ac:42:13:4f:b8:85:4a:e5:e4:d8:cd:b2:0f:4e:
         c8:91:d0:22:1b:c1:78:a9:d7:9d:ac:e0:0a:e7:9d:a5:91:8e:
         f9:5f:ff:28:15:36:59:39:c1:13:88:1e:1b:78:eb:fa:e9:cc:
         f1:d5:b7:31:ce:8c:82:e0:fc:0a:75:7d:97:89:17:1f:ee:61:
         c4:25:53:6a:0b:49:cb:44:a9:35:81:87:58:78:5a:4a:16:cf:
         5a:31:54:07:d2:ea:ec:d8:16:cc:33:08:4c:39:ca:c7:02:90:
         16:ff:72:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:40:13 2025 by rpki-client