Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
File:                     aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft (raw, json)
Hash identifier:          3Y71TYcIDsQYz8Kh52TigMh55agcg5JC2m4dneYJMwg=
Subject key identifier:   FC:05:7A:60:F7:38:18:EB:49:53:67:AF:87:5F:12:A0:AC:21:AE:08
Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
Certificate issuer:       /CN=6868f656805380ca86e79173789d668dc401d5b5
Certificate serial:       0197B7EABABBB9ADB1263F236ED3D3AE0115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
Manifest number:          13EA
Signing time:             Sat 28 Jun 2025 19:01:42 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:42 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:42 +0000
Files and hashes:         1: HSyzFVthhSBBD96mxsl0scilpJU.roa (hash: q5u2KllVdiR/BqAy2dqAoFzSZ6PBl0fHr1yzfwddNTg=)
                          2: aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl (hash: Upe01e+AfQXTncgVAkrPjZwv8Kw1BZwjjKmicKh22J0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:ba:bb:b9:ad:b1:26:3f:23:6e:d3:d3:ae:01:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5
        Validity
            Not Before: Jun 28 19:01:42 2025 GMT
            Not After : Jun 29 19:01:42 2025 GMT
        Subject: CN=fc057a60f73818eb495367af875f12a0ac21ae08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fd:64:65:60:c5:35:da:51:df:5c:08:4d:03:
                    79:99:b5:95:5e:dc:e9:a5:b7:b8:b4:ac:84:e6:2d:
                    56:4f:15:ae:00:8b:0d:df:fb:5f:b9:74:71:12:ba:
                    6f:c6:8b:3c:37:26:f6:67:c0:27:c6:65:86:55:ae:
                    26:be:64:74:ac:21:7a:26:68:2c:7a:f2:e6:46:ae:
                    b3:47:0c:a9:9a:11:a4:cd:a8:c2:46:5e:2f:9d:a9:
                    04:c3:39:f9:2d:a7:c2:e4:ce:34:5f:4d:f1:12:cc:
                    11:be:4a:5a:f7:c7:b7:0f:c0:a9:22:62:b3:ee:c9:
                    90:a5:69:bc:c2:4b:ec:ec:2d:61:89:f7:8a:85:c4:
                    b9:bb:d6:34:31:2e:fe:a0:c8:95:0c:91:62:7b:c1:
                    c4:f8:e6:0d:af:29:c0:09:0a:bf:35:da:5a:e2:dd:
                    04:50:44:69:4f:1b:af:8e:e9:4b:8b:67:a1:57:99:
                    73:99:c0:0a:35:e8:e9:7c:a7:5e:25:a4:79:1f:62:
                    fe:f4:7d:12:d6:47:77:da:ea:39:d2:96:92:b1:65:
                    f1:0f:ba:17:63:ce:86:c0:14:95:a0:b8:8c:8d:98:
                    ef:15:6f:bf:99:5b:ec:69:9a:6e:eb:ad:07:76:60:
                    5e:d5:1b:69:81:fb:d8:97:b0:80:8f:af:3d:0f:29:
                    a8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:05:7A:60:F7:38:18:EB:49:53:67:AF:87:5F:12:A0:AC:21:AE:08
            X509v3 Authority Key Identifier:
                keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:1b:34:f8:03:9d:18:2c:22:22:9d:b4:92:8f:37:88:13:75:
         50:3a:1f:9f:5d:1f:eb:e7:0b:e8:88:57:91:84:94:e4:10:e8:
         82:83:4a:7e:df:dc:17:e1:8f:25:41:86:fe:ca:9a:45:ab:b1:
         7d:e3:a1:cc:bb:fb:00:72:48:e7:ce:79:24:6a:32:21:1b:2e:
         8b:79:98:96:4e:99:c2:1b:17:ad:d0:03:04:32:0c:6d:f9:b9:
         5d:bd:08:cf:5a:97:0e:60:74:99:26:14:fd:7d:22:20:50:8b:
         ea:ce:bd:5d:a6:7f:f4:a6:5c:ef:7a:1f:af:53:5e:d3:00:12:
         7b:ed:2c:8b:9f:ce:89:67:27:53:4b:cd:8c:e4:01:b8:cb:6c:
         70:6e:e8:25:0a:2d:09:40:f2:a7:f2:1f:24:a4:91:0c:83:9b:
         da:12:ad:61:8b:5b:6b:9a:25:86:fd:9f:f3:03:b2:a7:05:93:
         e3:a8:0a:ee:5b:e3:f0:b5:07:f1:ad:25:ec:59:8e:5a:78:cf:
         f2:7f:96:2e:2c:6f:8e:a7:67:5d:76:51:86:81:df:e4:67:d8:
         33:03:f3:ae:03:06:04:78:61:32:6c:2a:de:02:3b:c5:af:4f:
         19:0b:29:ff:46:ca:74:80:96:a3:df:0e:83:9b:9b:d0:6e:a1:
         b0:f0:c2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:38:36 2025 by rpki-client