Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File:                     Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier:          lkShrmXfAcqiTP9Devqqmys3dCi31VZ1op5eyHxh2f0=
Subject key identifier:   23:D5:E8:9D:E2:AA:1D:E1:FA:D6:F1:35:3F:94:33:FC:CD:0F:A9:F1
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer:       /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial:       0199FBEC0C75A892F6DD28C6B672C9E9F955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number:          04ED
Signing time:             Sun 19 Oct 2025 10:02:54 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:54 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:54 +0000
Files and hashes:         1: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: hfVerHE6YhsM8GQ5PqdICpcyQHP3l59dqi5xsbHoyZw=)
                          2: q-0tOhbXBE8z7Hlp7AMLHyIkH0o.roa (hash: clCq9CQNeepLFI/InJwVfW2jsbdMuqRrXN6npNkjGNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:0c:75:a8:92:f6:dd:28:c6:b6:72:c9:e9:f9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
        Validity
            Not Before: Oct 19 10:02:54 2025 GMT
            Not After : Oct 20 10:02:54 2025 GMT
        Subject: CN=23d5e89de2aa1de1fad6f1353f9433fccd0fa9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:8a:2d:08:c8:ee:f3:34:bf:0d:d8:ac:83:
                    ba:a3:07:ed:0c:3e:1a:2a:8d:a7:46:b4:d4:dc:61:
                    85:94:94:4d:8b:95:2d:8d:18:f2:69:59:90:ad:fd:
                    5e:ba:7e:cc:b1:cb:d4:c4:7b:be:3e:39:9d:44:e6:
                    2f:33:52:2f:26:ea:09:65:1e:52:cc:6d:b6:0a:05:
                    dd:d2:bc:1e:d0:57:dd:0d:2d:39:4b:3d:64:a9:62:
                    a6:93:5d:0e:22:48:8a:86:31:15:06:9d:08:d3:ea:
                    9d:ae:63:a8:a2:99:b4:72:60:74:f8:29:f8:45:25:
                    17:0c:ec:c7:da:a4:82:02:1e:87:7a:c2:be:02:fb:
                    87:82:0e:36:ef:27:b3:2f:2d:32:ae:8a:3c:d9:65:
                    ee:ab:6e:7d:e2:21:87:4e:32:4a:f0:a3:41:70:7b:
                    b3:e3:64:67:ad:64:8a:ce:b2:22:35:eb:7a:70:15:
                    38:df:19:be:19:78:9c:73:bf:6f:86:9b:6b:d0:fe:
                    1c:7f:a4:bc:98:51:91:a6:a4:58:0d:88:48:77:c2:
                    be:2c:a6:39:3e:77:36:d4:a5:54:60:67:c5:49:b0:
                    ca:5c:b0:70:9f:47:3b:9d:2b:fd:b6:75:8e:29:20:
                    6c:f0:af:28:5a:1b:0a:59:c8:36:52:fb:44:c5:2f:
                    f3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D5:E8:9D:E2:AA:1D:E1:FA:D6:F1:35:3F:94:33:FC:CD:0F:A9:F1
            X509v3 Authority Key Identifier:
                keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f2:5f:1e:cb:d5:5b:7d:5c:9f:84:b7:0e:78:a1:3a:ef:c9:
         40:e8:5f:7b:5f:92:6f:51:3d:15:e0:82:94:eb:c2:b8:d2:3c:
         e8:4e:ec:7c:b4:9c:25:4f:66:f3:11:9a:81:33:5d:75:05:27:
         38:db:87:6b:23:a5:d3:c9:2d:2b:f7:a6:73:a5:53:a3:8a:28:
         08:37:77:64:f2:31:61:77:43:89:f6:4f:b3:34:34:8a:da:57:
         f3:7b:41:98:71:25:7a:91:fb:2e:65:9a:dd:40:c3:a8:b4:99:
         77:35:3d:8d:e5:8b:1a:21:01:c3:62:f4:a9:bd:05:1b:6c:e4:
         89:b2:af:8e:3b:95:ad:51:3a:3d:7e:70:fd:21:84:10:de:34:
         e0:01:cb:5f:7c:8c:47:4d:a6:5d:04:27:25:16:39:ac:4b:81:
         1f:1f:1b:dd:d3:00:3e:f9:9c:fa:5c:e4:46:44:e0:56:29:08:
         78:fc:30:ef:12:08:bf:4c:37:a0:9d:ce:19:3b:e1:9a:7a:60:
         ed:61:13:d8:db:72:4f:c1:04:4e:71:b6:42:d3:7d:22:91:65:
         c6:09:26:14:56:22:cb:1c:95:63:ba:c8:4f:73:a9:6a:04:30:
         e2:80:34:19:c2:9c:52:19:40:46:11:25:a7:06:fb:f9:85:40:
         52:3c:21:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:44 2025 by rpki-client