Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
File:                     fj-4U_hAs3cM0_pCs_nS-b59G38.mft (raw, json)
Hash identifier:          UpQQu68/Zg3WdE3Y6npnodz4sm2xnMg7XzzLM/IBfq4=
Subject key identifier:   60:E0:90:58:2B:1F:5F:8E:D8:0A:CD:98:66:76:D1:46:4A:1F:C7:C5
Authority key identifier: 7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
Certificate issuer:       /CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Certificate serial:       019873E1F95C676F8440FFDFE0E564A9A2C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
Manifest number:          14C9
Signing time:             Mon 04 Aug 2025 07:00:45 +0000
Manifest this update:     Mon 04 Aug 2025 07:00:45 +0000
Manifest next update:     Tue 05 Aug 2025 07:00:45 +0000
Files and hashes:         1: fj-4U_hAs3cM0_pCs_nS-b59G38.crl (hash: 3Nz7IsauCrBPXi3oGHTCfTqMR59dyudMi7zJGzuyYCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e1:f9:5c:67:6f:84:40:ff:df:e0:e5:64:a9:a2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
        Validity
            Not Before: Aug  4 07:00:45 2025 GMT
            Not After : Aug  5 07:00:45 2025 GMT
        Subject: CN=60e090582b1f5f8ed80acd986676d1464a1fc7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4e:17:c3:b3:41:df:8e:f2:11:b8:a0:ff:fb:
                    7f:6d:66:36:21:3e:41:a3:7e:e0:33:bc:b9:1f:4b:
                    bc:d6:ee:e1:a8:15:c2:b6:57:b7:79:5e:af:a7:27:
                    31:47:92:63:f7:54:da:0f:70:91:ae:f5:69:c2:47:
                    a2:7a:e0:f4:b3:e9:9e:3b:f3:b7:1f:42:61:77:e3:
                    3c:be:f1:d2:69:14:4d:78:17:0d:94:3e:93:6e:b0:
                    26:00:c9:d9:cf:81:aa:23:7e:f5:16:0c:40:80:d8:
                    53:63:14:47:5d:d5:63:19:c1:d1:fa:2d:5d:22:da:
                    0e:10:a7:a0:3a:ac:e2:d2:4c:80:7f:df:56:56:32:
                    9b:50:96:7a:69:99:8f:e9:91:d5:65:15:14:7f:2d:
                    0c:bc:0f:28:ff:40:88:f2:4c:ec:97:f7:f0:fe:86:
                    c2:4c:62:65:3e:15:b6:e0:e2:c5:cc:b8:3c:be:8f:
                    3b:20:64:b8:69:63:dc:13:48:fa:1d:0d:2e:43:20:
                    90:57:db:5e:6c:ee:9b:a8:92:66:79:66:46:6e:ae:
                    07:8a:cd:86:f1:99:2b:c6:d5:cd:bc:7e:4c:05:68:
                    62:ab:15:4b:42:cf:46:3a:a8:1e:26:6c:ca:ef:89:
                    d7:dd:86:d4:5c:cf:de:c0:57:2a:a6:19:6c:7b:c0:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E0:90:58:2B:1F:5F:8E:D8:0A:CD:98:66:76:D1:46:4A:1F:C7:C5
            X509v3 Authority Key Identifier:
                keyid:7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:7a:47:77:fb:c7:0d:c1:67:de:69:fe:cf:79:b4:1b:7a:ed:
         4f:7a:91:95:30:ff:8d:8b:f0:94:15:ff:ce:e5:46:6a:31:c0:
         72:dc:76:ae:80:16:37:74:2e:ab:22:0e:79:78:6c:e0:ca:21:
         f0:2b:b6:1e:50:e7:97:18:0e:2c:6b:24:c1:cb:20:ba:b0:cd:
         fe:30:99:25:12:09:14:5b:0e:2a:db:a2:6a:04:83:ce:73:91:
         76:35:61:a3:87:65:98:ff:e9:74:e9:eb:64:e1:fe:7b:c2:1b:
         f7:ce:0c:14:8c:96:6e:1e:7f:77:e2:ab:e4:60:86:14:19:12:
         a6:dc:d3:5f:93:06:26:21:de:cd:44:c8:3f:01:fb:9a:fe:3f:
         09:16:2d:47:c6:7c:69:a7:1b:c5:4b:f4:58:9e:f1:5e:38:fd:
         c5:5f:e4:c5:9e:e6:a1:fa:5d:35:ba:53:39:57:16:34:fe:02:
         24:a7:83:35:2d:a0:fc:f9:83:f6:b3:0b:17:5f:62:6e:38:16:
         78:72:ea:f2:d2:d6:50:9b:55:ba:7b:1d:9c:3b:ec:8b:2f:42:
         71:75:dd:a1:61:a7:1c:9b:aa:65:b5:93:61:fe:ab:1a:73:34:
         0a:0d:49:6b:74:5a:c8:56:2e:5e:e7:d2:b9:61:ca:a9:a1:97:
         e4:34:62:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:17 2025 by rpki-client