Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File:                     Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier:          SbH7Atxn9p/3hn+kaZ9pFt5n12rniBx4I54bb6JJxro=
Subject key identifier:   FD:25:7D:E6:35:CD:3E:9F:07:C3:D6:58:CF:35:8E:BB:CC:7C:E9:16
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer:       /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial:       01976929F8E8646466747DE749D31BF3CF5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number:          0398
Signing time:             Fri 13 Jun 2025 12:00:47 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:47 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:47 +0000
Files and hashes:         1: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: ta5HZ0HqDaXwQu5Z3u4I1d6/t6GFkYmIjR+EeGr7UEA=)
                          2: q-0tOhbXBE8z7Hlp7AMLHyIkH0o.roa (hash: clCq9CQNeepLFI/InJwVfW2jsbdMuqRrXN6npNkjGNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:f8:e8:64:64:66:74:7d:e7:49:d3:1b:f3:cf:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
        Validity
            Not Before: Jun 13 12:00:47 2025 GMT
            Not After : Jun 14 12:00:47 2025 GMT
        Subject: CN=fd257de635cd3e9f07c3d658cf358ebbcc7ce916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c4:54:d6:2e:1f:14:fa:96:80:9a:6a:20:a0:
                    b5:d8:32:b6:ac:36:0f:0e:59:ce:45:a8:05:33:d7:
                    4b:12:fc:5c:dd:67:82:12:43:4b:0a:f7:34:43:d4:
                    56:9c:71:93:01:84:85:54:2c:77:f0:44:10:72:b0:
                    f0:b8:e8:c6:8b:05:b8:0c:1a:da:c5:88:ac:0e:c8:
                    91:c2:9a:5a:26:ba:87:23:09:ff:2b:ba:b2:a5:16:
                    3f:61:1f:bb:af:95:56:5c:2b:c5:45:62:22:8c:86:
                    8e:05:23:64:5a:89:a5:bb:c4:c5:9c:fd:c2:31:64:
                    8c:ba:2a:b7:94:cd:1a:6b:e7:ec:cc:d1:1d:aa:48:
                    33:05:3c:5a:22:0d:4e:49:d3:3f:15:64:3b:a1:d0:
                    b1:95:99:c5:70:5e:4b:86:69:98:4a:1a:77:46:f0:
                    c8:08:6b:0b:71:e3:94:3e:e2:5e:cf:33:42:55:32:
                    fa:24:6b:ec:c2:8e:3d:74:b7:89:a6:67:05:0e:16:
                    c7:30:fd:a1:01:2c:8b:66:e1:3f:df:2e:9b:b7:84:
                    31:98:06:1d:80:ac:23:f2:d7:7b:3c:a3:f5:b1:41:
                    c1:81:ff:40:b9:76:18:92:a1:a9:cc:e0:3b:63:3e:
                    de:38:3d:16:82:51:9e:50:94:ff:c0:88:83:24:ef:
                    68:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:25:7D:E6:35:CD:3E:9F:07:C3:D6:58:CF:35:8E:BB:CC:7C:E9:16
            X509v3 Authority Key Identifier:
                keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:66:1f:fe:6f:4a:9c:5c:86:0f:77:22:50:80:77:b9:42:b9:
         68:81:e3:29:58:09:c7:7a:7c:c2:37:1c:54:a0:17:7b:f4:e9:
         93:c2:35:48:ef:21:f5:05:c8:72:7d:36:e6:d5:3f:b3:28:7a:
         e3:82:7f:f9:c7:7e:55:26:13:3c:fd:35:89:de:90:8e:44:d9:
         5d:b9:57:ec:29:54:e6:bc:39:ac:0e:cc:5f:20:90:6e:85:d3:
         97:2b:bf:e1:ef:62:e9:de:91:f0:fa:38:6d:73:9d:ca:00:3b:
         ed:96:c9:bb:f4:83:04:58:a0:2f:16:2e:0e:c1:9c:7c:d2:2c:
         fe:b5:8d:dc:eb:6e:57:12:14:4c:c8:89:85:ee:1d:3d:4b:e1:
         2f:a1:af:6e:16:38:b6:63:ed:da:82:0d:2f:89:13:f1:01:29:
         3c:3d:75:be:2d:9e:21:c9:18:57:19:73:b1:99:b1:ea:21:15:
         4b:e4:d5:61:0f:a2:3d:e4:72:90:95:89:b6:e9:34:ca:2d:9d:
         c0:dd:97:5e:b2:6c:10:48:d8:1b:d7:bc:4e:66:17:05:3d:80:
         5e:75:70:ae:ab:b4:6f:67:a5:37:b1:4e:e6:12:5c:13:6d:c2:
         f3:6a:aa:8d:1a:95:15:52:de:c4:ad:d4:a8:84:af:19:56:98:
         7b:04:74:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKfjoZGRmdH3nSdMb889aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyM2Y2M2ZiMmJmYzYzMWM0NGY0YmI2ZDk0YmRmMjhiM2Vj
OWRmZjcwHhcNMjUwNjEzMTIwMDQ3WhcNMjUwNjE0MTIwMDQ3WjAzMTEwLwYDVQQD
EyhmZDI1N2RlNjM1Y2QzZTlmMDdjM2Q2NThjZjM1OGViYmNjN2NlOTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsRU1i4fFPqWgJpqIKC12DK2rDYP
DlnORagFM9dLEvxc3WeCEkNLCvc0Q9RWnHGTAYSFVCx38EQQcrDwuOjGiwW4DBra
xYisDsiRwppaJrqHIwn/K7qypRY/YR+7r5VWXCvFRWIijIaOBSNkWomlu8TFnP3C
MWSMuiq3lM0aa+fszNEdqkgzBTxaIg1OSdM/FWQ7odCxlZnFcF5LhmmYShp3RvDI
CGsLceOUPuJezzNCVTL6JGvswo49dLeJpmcFDhbHMP2hASyLZuE/3y6bt4QxmAYd
gKwj8td7PKP1sUHBgf9AuXYYkqGpzOA7Yz7eOD0WglGeUJT/wIiDJO9oYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0lfeY1zT6fB8PWWM81jrvMfOkWMB8GA1UdIwQY
MBaAFAI/Y/sr/GMcRPS7bZS98os+yd/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jZjExYjQtNzk3Yi00ODIwLWJmZWEt
NTNjZDkxYjI4YzRmLzEvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9jZjExYjQtNzk3Yi00ODIwLWJmZWEtNTNjZDkxYjI4YzRm
LzEvQWo5ai15djhZeHhFOUx0dGxMM3lpejdKM19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2Yf/m9K
nFyGD3ciUIB3uUK5aIHjKVgJx3p8wjccVKAXe/Tpk8I1SO8h9QXIcn025tU/syh6
44J/+cd+VSYTPP01id6QjkTZXblX7ClU5rw5rA7MXyCQboXTlyu/4e9i6d6R8Po4
bXOdygA77ZbJu/SDBFigLxYuDsGcfNIs/rWN3OtuVxIUTMiJhe4dPUvhL6GvbhY4
tmPt2oINL4kT8QEpPD11vi2eIckYVxlzsZmx6iEVS+TVYQ+iPeRykJWJtuk0yi2d
wN2XXrJsEEjYG9e8TmYXBT2AXnVwrqu0b2elN7FO5hJcE23C82qqjRqVFVLexK3U
qISvGVaYewR0xw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:34 2025 by rpki-client