Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
File:                     0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft (raw, json)
Hash identifier:          yLNrqHvfJYtg1W1oJv3TPhjM8q8d9w5U2Xc3HAdxMjM=
Subject key identifier:   B0:1B:BE:73:DF:42:EA:27:DF:A4:DF:BC:E0:CB:2D:29:4E:95:FE:E0
Authority key identifier: D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6
Certificate issuer:       /CN=d095364395ccfd8543977358fa9b71f9271544f6
Certificate serial:       0198D54E38BA575740BF4451FD5D225C6038
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
Manifest number:          0E14
Signing time:             Sat 23 Aug 2025 05:02:10 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:10 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:10 +0000
Files and hashes:         1: 0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl (hash: OtnOlizF0/ys0S9RwtIHxfpWkyuyuaTd9B4wuceUikE=)
                          2: WMhbwojz363aPcIT4pKLzOiKIQA.roa (hash: t03L1DneJHTF/s4FlG1CvztpxUkTwBNYCp5o+q76WB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:38:ba:57:57:40:bf:44:51:fd:5d:22:5c:60:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d095364395ccfd8543977358fa9b71f9271544f6
        Validity
            Not Before: Aug 23 05:02:10 2025 GMT
            Not After : Aug 24 05:02:10 2025 GMT
        Subject: CN=b01bbe73df42ea27dfa4dfbce0cb2d294e95fee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1b:6c:fe:64:30:f6:d4:95:f9:b1:13:be:be:
                    8a:65:6d:4e:98:59:62:be:4a:f5:c6:c5:39:8f:9b:
                    d0:ae:6c:95:d5:bc:25:ea:a2:a7:ac:fe:94:df:24:
                    54:96:d2:ae:d9:11:03:71:f5:06:d4:79:0d:ca:66:
                    70:b4:8f:c1:33:d7:9a:e7:d3:cd:1e:3d:67:14:5e:
                    31:ca:1d:a4:d4:74:37:7e:36:b5:f0:f4:92:7c:93:
                    6c:28:26:36:a5:c3:51:09:ca:5c:e3:5a:91:72:a8:
                    8c:4c:2f:bc:30:1f:d1:a7:bd:77:77:9d:2c:f2:ae:
                    9d:ca:f9:e3:6c:47:cb:78:9b:f4:a1:9d:ca:4c:dd:
                    82:a9:77:f5:19:e8:4a:3b:82:e0:51:6f:ff:6b:59:
                    d6:33:a8:82:e0:80:7b:1e:e7:56:da:53:14:11:b1:
                    6e:cb:5d:63:50:5c:19:e1:30:62:65:4c:d9:ce:85:
                    9e:94:b4:93:ff:d8:94:db:e0:fa:f0:37:a5:f1:8f:
                    82:6b:f3:2c:7a:73:08:b9:78:25:86:01:d0:38:97:
                    c3:f1:8f:e0:e1:a7:ff:33:14:d1:0d:c7:87:9c:a3:
                    1b:90:54:23:a2:b3:c4:21:ff:dd:12:37:b1:28:94:
                    d2:aa:ae:93:c6:70:96:0f:67:5b:34:e8:49:77:4d:
                    02:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1B:BE:73:DF:42:EA:27:DF:A4:DF:BC:E0:CB:2D:29:4E:95:FE:E0
            X509v3 Authority Key Identifier:
                keyid:D0:95:36:43:95:CC:FD:85:43:97:73:58:FA:9B:71:F9:27:15:44:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dac732-4aca-4bf8-a6db-e07952db967b/1/0JU2Q5XM_YVDl3NY-ptx-ScVRPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:3a:41:f6:3c:f0:80:6a:9a:ee:31:f0:fc:55:c7:13:bd:fa:
         6e:7c:9c:93:d1:bf:fd:54:30:af:e4:15:a4:02:19:ce:c3:81:
         84:1c:e3:dd:93:c4:a9:8b:fd:5d:6d:2e:a9:fb:26:f7:c1:bf:
         4b:5e:24:a1:e2:c3:79:8e:77:ea:8d:55:69:19:0c:e0:1e:e3:
         6c:ee:e1:3f:c2:d7:43:1b:82:bf:b9:37:b3:31:96:2c:0b:8b:
         af:74:dd:08:53:72:83:04:7c:75:aa:98:a1:cf:57:f1:36:50:
         76:4b:9c:0f:0c:a0:6c:ec:41:cc:18:94:bc:88:1c:54:08:50:
         b8:30:17:01:85:00:17:ad:03:20:91:e6:5d:90:d1:f3:5d:6e:
         0a:e8:9a:87:d4:26:33:16:54:89:ee:2b:77:9a:52:57:62:71:
         dc:74:53:d7:5d:7a:c9:e8:d4:a3:de:d6:99:e9:c9:59:97:46:
         ab:44:02:ce:68:6e:4f:fd:0c:14:2c:6a:58:4c:33:df:24:dd:
         8d:a4:2a:7f:ef:55:26:3c:f7:04:5a:f7:31:c3:72:65:3d:f4:
         2a:b0:a6:d3:31:01:c1:0a:09:23:8e:97:c3:0c:2f:92:3c:00:
         b6:dd:d9:6f:ac:71:7d:d8:e4:d2:43:8d:49:93:ca:52:0f:a3:
         5f:4f:79:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:17:42 2025 by rpki-client