Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
File:                     AJpjcoKz0KD8pKVU9pNvffQugWU.mft (raw, json)
Hash identifier:          VtvAGnouMIqeWwbBmqXtgqc0USW0QRSHZFcQXKYCo1o=
Subject key identifier:   D5:E4:F4:14:41:E0:D1:13:0F:45:F9:50:4C:7F:E0:B5:E6:FD:EF:02
Authority key identifier: 00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65
Certificate issuer:       /CN=009a637282b3d0a0fca4a554f6936f7df42e8165
Certificate serial:       01987298ABEE20C9BFE43BBB96F6EB41A139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
Manifest number:          0BF0
Signing time:             Mon 04 Aug 2025 01:01:04 +0000
Manifest this update:     Mon 04 Aug 2025 01:01:04 +0000
Manifest next update:     Tue 05 Aug 2025 01:01:04 +0000
Files and hashes:         1: 2KtTnEqgfSqztCd7tujgpeMQKiY.roa (hash: PzcW2SmGhKzM/HWv9p7Gvr3dpPmkVhm+gAuqFa6OHHQ=)
                          2: AJpjcoKz0KD8pKVU9pNvffQugWU.crl (hash: v1JPuN/aBILMyoG2Cghv1uEmxVrldXHQDxblm1Dy/PU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:ab:ee:20:c9:bf:e4:3b:bb:96:f6:eb:41:a1:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009a637282b3d0a0fca4a554f6936f7df42e8165
        Validity
            Not Before: Aug  4 01:01:04 2025 GMT
            Not After : Aug  5 01:01:04 2025 GMT
        Subject: CN=d5e4f41441e0d1130f45f9504c7fe0b5e6fdef02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:0e:79:89:81:a6:50:1e:25:ea:70:bb:fd:
                    8a:91:02:42:90:64:93:b0:ed:fd:08:36:06:e8:e3:
                    35:1c:82:76:b6:22:bb:cb:92:68:3f:ce:21:37:9f:
                    91:2b:7e:c1:3c:65:2e:94:2d:c1:a5:97:1a:81:f9:
                    f6:67:a3:7f:cd:c5:6b:2f:bc:2d:ac:d5:99:e6:f1:
                    84:bf:39:a7:a6:cd:88:1b:16:cd:ec:4d:4e:d0:c3:
                    d5:da:8f:2b:8d:f0:de:9c:99:a0:69:b1:bf:b8:a5:
                    a1:ab:05:7f:d1:16:96:36:e1:b0:80:51:30:6a:9a:
                    e7:1f:ef:50:0b:2b:ae:e6:17:05:b1:82:a0:b3:32:
                    2c:01:3c:fd:45:84:35:00:07:1b:5a:05:83:42:5a:
                    0f:72:09:0f:a9:72:39:b0:6e:92:59:05:a9:51:b9:
                    d3:2e:55:db:de:84:d0:90:71:31:5b:86:bb:8c:a1:
                    7e:d8:a6:87:e8:32:22:ef:63:fe:3e:67:02:c2:2f:
                    1b:11:16:0b:a1:3c:ec:1d:4e:be:6c:e7:ab:6f:a7:
                    47:18:25:ef:76:fe:b2:c6:a3:27:4b:f3:06:85:3d:
                    50:99:89:f9:49:47:84:ca:27:e3:4e:b9:84:88:fc:
                    9a:e0:da:81:2d:77:2f:40:66:8e:de:5a:28:99:43:
                    26:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E4:F4:14:41:E0:D1:13:0F:45:F9:50:4C:7F:E0:B5:E6:FD:EF:02
            X509v3 Authority Key Identifier:
                keyid:00:9A:63:72:82:B3:D0:A0:FC:A4:A5:54:F6:93:6F:7D:F4:2E:81:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJpjcoKz0KD8pKVU9pNvffQugWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ddc344-64c6-46c8-a25c-d4edc0eb3e0a/1/AJpjcoKz0KD8pKVU9pNvffQugWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:01:b2:c4:50:1a:0b:45:0b:90:ba:ba:0e:1c:e9:c4:f9:62:
         65:41:2c:67:f4:5d:e3:8f:b7:f3:b0:7a:8f:71:71:bf:14:36:
         f5:81:74:f1:aa:b7:6a:c1:4b:4c:2a:bc:6e:ab:8e:11:c8:4e:
         92:05:70:2c:04:d3:7f:22:cc:21:a7:18:9d:6b:fc:79:49:e5:
         d9:9a:ab:0a:97:4f:87:19:ca:62:71:a4:cc:d8:0f:bf:81:e4:
         c8:76:7b:82:24:59:91:4f:aa:45:9f:e8:79:bf:ed:34:83:ab:
         ee:b6:61:5b:c9:21:20:53:4f:6f:c5:f8:67:a0:24:ea:79:61:
         55:4f:11:e9:bc:4b:7d:ec:6d:36:d8:49:b5:68:05:f9:2c:90:
         4a:78:81:4d:d8:d0:3b:07:c7:2b:9a:a3:bd:76:65:22:f6:4c:
         f7:c2:85:aa:3d:25:f5:2a:a9:71:04:ab:b1:3e:5a:78:34:72:
         16:11:58:98:a0:1a:3e:68:54:e0:a4:ae:03:27:86:19:98:7d:
         c0:de:8b:92:2c:50:fd:d2:a6:5b:f2:85:7f:c5:8c:fc:af:c8:
         06:b6:f0:8e:a9:c4:62:14:da:4e:9b:05:01:d5:01:a4:4e:5f:
         ef:4f:61:df:eb:1c:12:8d:76:2f:b9:ba:b5:b6:8d:3f:20:d4:
         75:60:8c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:10 2025 by rpki-client