Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
File:                     fj-4U_hAs3cM0_pCs_nS-b59G38.mft (raw, json)
Hash identifier:          do/C237xBBkl6jtZ5MMFBNtP5EVl3QItCH6FC7Bq+To=
Subject key identifier:   1B:31:88:08:EB:47:FB:63:E8:6B:94:67:5F:C0:4A:BB:6A:30:23:07
Authority key identifier: 7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
Certificate issuer:       /CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Certificate serial:       0197B88EE08435F07182A5A261B51BFE0B6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
Manifest number:          1468
Signing time:             Sat 28 Jun 2025 22:01:00 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:00 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:00 +0000
Files and hashes:         1: fj-4U_hAs3cM0_pCs_nS-b59G38.crl (hash: NGij0JWqVaaZ4krgCSZiFFnSpBn/k7QyLZmQ0zqFSsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8e:e0:84:35:f0:71:82:a5:a2:61:b5:1b:fe:0b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
        Validity
            Not Before: Jun 28 22:01:00 2025 GMT
            Not After : Jun 29 22:01:00 2025 GMT
        Subject: CN=1b318808eb47fb63e86b94675fc04abb6a302307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7c:02:30:e0:f0:ab:37:ac:3f:bf:35:ed:b8:
                    01:9d:10:a1:df:16:7f:bc:e1:7c:e8:61:4d:00:81:
                    57:92:3e:d3:82:5f:15:9b:1a:53:16:66:1a:63:d3:
                    a1:52:ea:f6:3c:7f:2b:c9:1d:27:3d:aa:34:3c:63:
                    4b:20:ae:3d:64:eb:49:d3:1d:e4:36:9e:22:c1:cd:
                    c6:ad:ff:0a:80:54:91:82:08:44:61:0a:61:b0:f4:
                    64:8d:45:f8:a3:4f:e3:f1:70:10:92:06:a6:e6:7f:
                    54:07:86:00:d7:db:5d:e1:03:5b:9f:9e:0c:2f:87:
                    46:8d:f1:54:fe:c8:05:5e:61:1c:3c:b7:f9:6e:f8:
                    de:45:00:9c:0f:6c:c6:71:f0:cd:3b:6a:08:61:2f:
                    f2:13:ba:4d:22:f2:fe:3b:9b:1b:11:42:62:83:03:
                    7e:8d:9f:5e:4c:d1:77:43:26:34:65:41:d9:f2:ff:
                    99:88:d0:31:e7:71:f6:04:55:1b:91:3f:d9:ec:24:
                    1b:c3:ab:38:cc:66:c7:52:4a:69:9b:7a:ab:e5:a9:
                    93:2c:23:09:d6:24:7d:88:c3:2a:cf:d3:6c:db:b9:
                    19:f9:78:b7:e3:07:49:cf:74:99:8d:c6:5e:e2:9d:
                    f9:c4:99:47:26:c9:8c:e9:a2:c1:8f:fb:cd:bb:99:
                    74:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:31:88:08:EB:47:FB:63:E8:6B:94:67:5F:C0:4A:BB:6A:30:23:07
            X509v3 Authority Key Identifier:
                keyid:7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3e:17:ee:8f:22:e6:c9:8f:b8:ff:4d:77:d2:91:1c:a3:96:
         3a:6a:fd:77:b1:4f:58:39:8e:20:b4:c5:49:2b:5b:f3:68:a6:
         f2:66:31:5c:7d:d4:6d:ec:28:9b:b2:e4:e9:e0:96:84:a7:b2:
         25:68:78:e5:43:de:58:70:e8:37:21:49:91:7b:4a:1e:c0:f1:
         30:bd:b8:f2:d3:6a:99:58:7f:d6:07:33:18:05:e8:ef:bd:a7:
         e6:9f:94:77:06:64:ac:96:e9:06:8d:63:d7:cd:da:3d:f1:df:
         5f:1b:2a:7b:01:72:6d:97:39:b1:a7:19:c7:80:90:52:d7:26:
         40:6c:7c:21:bc:b8:dc:52:7b:7e:04:86:81:31:ee:5f:36:c1:
         a8:c2:fc:91:1c:42:50:19:88:8e:b7:a3:fd:1d:0b:c5:1d:2f:
         54:dc:1d:3b:93:52:1e:5f:dd:fc:e3:85:19:20:24:0f:e4:30:
         27:4e:af:9b:85:d5:0a:8e:2d:ac:a7:9f:48:74:05:c9:c9:f8:
         ff:b4:16:4d:c7:0d:6c:b4:a8:6f:53:1f:d5:01:21:31:6b:56:
         29:e4:08:a8:cf:b3:8e:47:80:09:de:f3:96:6b:c4:1d:34:b9:
         ff:bb:52:bd:37:51:6d:b8:6e:e3:1b:79:92:0a:7f:d1:f7:89:
         0a:53:d6:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4juCENfBxgqWiYbUb/gtvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlM2ZiODUzZjg0MGIzNzcwY2QzZmE0MmIzZjlkMmY5YmU3
ZDFiN2YwHhcNMjUwNjI4MjIwMTAwWhcNMjUwNjI5MjIwMTAwWjAzMTEwLwYDVQQD
EygxYjMxODgwOGViNDdmYjYzZTg2Yjk0Njc1ZmMwNGFiYjZhMzAyMzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXwCMODwqzesP7817bgBnRCh3xZ/
vOF86GFNAIFXkj7Tgl8VmxpTFmYaY9OhUur2PH8ryR0nPao0PGNLIK49ZOtJ0x3k
Np4iwc3Grf8KgFSRgghEYQphsPRkjUX4o0/j8XAQkgam5n9UB4YA19td4QNbn54M
L4dGjfFU/sgFXmEcPLf5bvjeRQCcD2zGcfDNO2oIYS/yE7pNIvL+O5sbEUJigwN+
jZ9eTNF3QyY0ZUHZ8v+ZiNAx53H2BFUbkT/Z7CQbw6s4zGbHUkppm3qr5amTLCMJ
1iR9iMMqz9Ns27kZ+Xi34wdJz3SZjcZe4p35xJlHJsmM6aLBj/vNu5l0YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsxiAjrR/tj6GuUZ1/ASrtqMCMHMB8GA1UdIwQY
MBaAFH4/uFP4QLN3DNP6QrP50vm+fRt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmotNFVfaEFzM2NNMF9wQ3NfblMtYjU5RzM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZGRlYWUtYjU5Yi00MWJiLThmZDYt
MTYzZjBlMDc3ZjIzLzEvZmotNFVfaEFzM2NNMF9wQ3NfblMtYjU5RzM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZGRlYWUtYjU5Yi00MWJiLThmZDYtMTYzZjBlMDc3ZjIz
LzEvZmotNFVfaEFzM2NNMF9wQ3NfblMtYjU5RzM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUD4X7o8i
5smPuP9Nd9KRHKOWOmr9d7FPWDmOILTFSStb82im8mYxXH3Ubewom7Lk6eCWhKey
JWh45UPeWHDoNyFJkXtKHsDxML248tNqmVh/1gczGAXo772n5p+UdwZkrJbpBo1j
183aPfHfXxsqewFybZc5sacZx4CQUtcmQGx8Iby43FJ7fgSGgTHuXzbBqML8kRxC
UBmIjrej/R0LxR0vVNwdO5NSHl/d/OOFGSAkD+QwJ06vm4XVCo4trKefSHQFycn4
/7QWTccNbLSob1Mf1QEhMWtWKeQIqM+zjkeACd7zlmvEHTS5/7tSvTdRbbhu4xt5
kgp/0feJClPWlA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:21:24 2025 by rpki-client