Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
File:                     AJJn8-O54eu5eZaQgLDfqyTDYBo.mft (raw, json)
Hash identifier:          Eld4/jXKwW7XCPjbc6M8v7ozu761j+Lwzttm4SG7LEU=
Subject key identifier:   F1:C3:56:D2:53:79:05:92:CC:F7:7B:52:10:6B:EC:10:80:5F:72:F4
Authority key identifier: 00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A
Certificate issuer:       /CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
Certificate serial:       0197B745344B5776812486F6181F0A1605C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
Manifest number:          0188
Signing time:             Sat 28 Jun 2025 16:00:55 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:55 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:55 +0000
Files and hashes:         1: AJJn8-O54eu5eZaQgLDfqyTDYBo.crl (hash: zjiIP6SxSj4mYyEvzfI8NuYR+0FiqUXUplvmLMlc0qQ=)
                          2: jt-iRSNGZBGhABnXoxTRm_rAskI.roa (hash: l7KIq5bWvwsgCT6cMEiSjjaqu0hDSyke8GcgCL2LIpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:34:4b:57:76:81:24:86:f6:18:1f:0a:16:05:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=009267f3e3b9e1ebb979969080b0dfab24c3601a
        Validity
            Not Before: Jun 28 16:00:55 2025 GMT
            Not After : Jun 29 16:00:55 2025 GMT
        Subject: CN=f1c356d253790592ccf77b52106bec10805f72f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:ff:d7:13:3e:e7:34:14:5c:51:60:21:5f:
                    0e:28:62:68:ae:ef:98:a5:31:7b:c6:25:26:e1:57:
                    e9:8a:de:bb:b5:a6:89:70:25:83:79:50:ab:ce:fd:
                    35:ac:db:17:57:a8:17:c9:38:41:24:67:fa:92:ab:
                    b1:87:15:22:6d:57:a4:38:05:fb:6c:fc:b3:27:d2:
                    41:2b:b9:c0:94:e0:e7:66:da:db:70:78:bc:06:c5:
                    aa:1e:69:03:1a:75:0f:d4:4c:30:2b:7d:d9:5f:aa:
                    92:83:56:91:b9:26:98:bf:5d:05:c1:15:93:4e:4d:
                    59:9d:83:0d:06:1c:f1:03:cf:e5:2f:5d:70:6f:f8:
                    34:15:24:4e:e3:6f:b0:41:c9:be:e0:c1:16:ed:5d:
                    a8:ae:9a:bc:4b:65:81:db:40:1d:f4:2b:7b:5d:aa:
                    05:0a:45:bc:51:84:88:31:63:71:66:4b:98:ba:b5:
                    70:c6:08:b7:00:8c:cf:01:ed:78:5d:a1:b3:7a:50:
                    19:8f:8b:82:91:97:b5:e4:1e:0e:61:7a:1d:a3:da:
                    fd:aa:ca:47:80:93:ff:0b:de:b6:26:8e:8d:6c:4b:
                    ea:54:f5:ea:81:4a:49:2a:9c:00:63:ee:82:bc:17:
                    88:d7:05:36:73:90:36:aa:41:a1:5b:f9:3c:c4:28:
                    2f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C3:56:D2:53:79:05:92:CC:F7:7B:52:10:6B:EC:10:80:5F:72:F4
            X509v3 Authority Key Identifier:
                keyid:00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:85:67:23:21:c2:b7:e8:e9:a6:b7:41:a1:9d:92:0a:d5:fd:
         3e:ec:3f:53:59:12:3f:54:56:a7:d7:3c:f1:4b:72:1c:d3:38:
         1e:6f:07:7c:e8:eb:c2:49:ea:b7:21:c3:0a:98:48:e3:c2:de:
         92:bd:af:76:e0:3c:e8:93:c7:5a:df:b8:0b:22:11:d9:4a:88:
         5f:91:c7:9c:aa:94:87:66:80:78:76:2d:82:85:06:f5:f9:98:
         86:b3:f4:19:bf:4a:0f:42:29:94:82:54:14:db:67:6e:2a:bc:
         d1:9a:f5:bf:2d:57:19:8d:3f:ad:13:29:b7:84:14:6f:98:d9:
         4e:06:8f:ab:37:c2:43:17:7b:11:ad:a8:a9:47:61:9e:6b:d5:
         ac:56:3c:1d:3e:8c:75:f6:b4:f0:78:9e:42:52:34:07:e9:e5:
         8d:d3:cc:07:d8:50:89:4b:75:d7:c2:94:ff:b1:1a:98:15:4f:
         cb:43:17:63:d3:8c:60:e0:89:e9:78:5c:26:39:5a:6a:96:3b:
         5c:e7:0a:56:c2:a3:6c:f7:0f:6a:e6:85:1b:aa:cf:c8:df:ca:
         17:9f:fd:72:b8:e8:2f:93:30:33:13:d1:70:62:02:27:ee:98:
         f9:91:2b:d0:f1:da:db:31:65:51:be:0f:4b:9d:e1:03:e0:e7:
         7f:3a:a1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:56 2025 by rpki-client