Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
File:                     0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft (raw, json)
Hash identifier:          8TXoaPJ4xlR62inmPqA6lZb4VxRHpk9bSRMH5/5D9oc=
Subject key identifier:   5D:25:21:78:57:93:EA:72:2A:0B:40:7B:E6:1D:F3:36:97:16:AE:90
Authority key identifier: D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05
Certificate issuer:       /CN=d098e907c63457e6ca6281dfe297d972bffda805
Certificate serial:       0196B10E673799477AC034ED96B197B3A9C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
Manifest number:          1059
Signing time:             Thu 08 May 2025 18:00:33 +0000
Manifest this update:     Thu 08 May 2025 18:00:33 +0000
Manifest next update:     Fri 09 May 2025 18:00:33 +0000
Files and hashes:         1: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl (hash: ibgM6R0ZMfKrRfEakj6cmqKyuJ3o7pdDNaOCq0A2pkg=)
                          2: ur2jQXpGWWYECBsXTeT3ihs6vVk.roa (hash: BxlFUb0zmMnW7XaJszRYUfw8FuEEod2RQjrGiW/bsc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:0e:67:37:99:47:7a:c0:34:ed:96:b1:97:b3:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d098e907c63457e6ca6281dfe297d972bffda805
        Validity
            Not Before: May  8 18:00:33 2025 GMT
            Not After : May  9 18:00:33 2025 GMT
        Subject: CN=5d2521785793ea722a0b407be61df3369716ae90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:62:e0:4e:c9:0f:b7:d0:19:78:9f:a6:38:1f:
                    d3:3f:ef:df:46:76:d9:50:2c:29:90:da:f1:ed:40:
                    6f:a0:5c:c9:6a:ab:cf:ac:39:5c:6c:3b:95:5f:94:
                    cc:7b:81:be:9e:b5:55:f8:24:fb:5f:07:17:1c:9c:
                    55:5d:7f:e5:51:c5:80:0d:6b:29:73:3a:75:6b:92:
                    82:3e:7f:f2:ee:ee:ca:ed:d4:25:fb:91:32:0f:20:
                    35:2e:7c:2e:94:98:65:a8:fa:06:14:d2:05:33:62:
                    3e:54:37:b6:9b:1f:49:2d:c4:87:07:45:a4:1e:44:
                    89:28:f2:e2:c2:10:6a:6a:e9:e0:be:be:9d:6c:c5:
                    cc:3a:d6:b1:a7:f0:17:6a:a9:9f:17:bc:5b:6d:a9:
                    46:a2:52:fa:ec:0b:91:73:45:ed:05:5f:07:26:a1:
                    68:f1:69:3e:ff:35:10:0a:b9:38:06:bc:09:ca:6d:
                    e7:df:43:e3:74:77:a3:47:92:cc:65:95:f3:8e:d7:
                    f3:08:98:b2:f2:97:eb:14:89:36:b1:8a:87:22:bf:
                    17:4a:61:e0:6f:cd:98:ec:5d:a7:7a:7c:c1:04:ba:
                    a9:4c:dd:be:75:ed:54:61:c9:de:69:57:85:a0:0e:
                    33:5e:cf:bf:26:f6:dc:75:ee:f7:9c:f2:7b:43:ec:
                    36:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:25:21:78:57:93:EA:72:2A:0B:40:7B:E6:1D:F3:36:97:16:AE:90
            X509v3 Authority Key Identifier:
                keyid:D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:36:c2:f7:c2:9a:de:da:37:6e:ab:c5:ec:09:55:e9:5c:57:
         41:3a:71:2f:34:1e:5d:55:3f:72:3e:cb:cf:ce:3a:20:5a:49:
         16:74:33:9a:bb:9a:3c:2b:f5:90:49:78:27:72:0c:34:c1:40:
         99:99:32:49:54:18:9c:83:3b:00:b3:18:81:8c:5c:da:91:59:
         32:46:53:e4:11:69:d4:14:f8:05:61:7a:05:2b:fb:db:5e:94:
         f5:fc:1a:79:54:3a:4e:4c:fb:23:30:0c:4f:d3:56:bc:3c:12:
         20:22:6d:2a:a0:7c:07:fb:d8:55:b4:05:d3:16:fa:09:4e:a1:
         d2:41:b4:78:6a:8c:4f:d7:36:1c:98:50:9d:f1:bf:df:33:df:
         0f:77:25:f7:6b:c4:ff:a9:76:e2:10:9d:a4:14:22:07:ac:f2:
         d1:46:f6:05:da:f3:3b:67:67:03:28:b1:31:a0:f9:fb:06:ad:
         c8:0d:42:86:1b:b9:db:51:2a:69:73:4f:2e:a2:b3:c0:6c:6a:
         cc:d8:fb:1a:d7:bf:69:0f:13:71:38:03:cc:e4:7e:73:1f:6f:
         84:f7:c1:8b:05:9f:aa:92:5f:23:05:bf:32:b5:38:40:4c:85:
         a6:a5:66:60:b3:9c:c4:61:d0:d7:f5:1d:c0:39:3c:96:ce:f2:
         bb:be:94:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:36:55 2025 by rpki-client