Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
File:                     fj-4U_hAs3cM0_pCs_nS-b59G38.mft (raw, json)
Hash identifier:          0PLn65Fh6FCNNNgdxJ9DzE1OsEZ1ynERk1WtxQpquUk=
Subject key identifier:   CF:D9:F6:AF:BD:25:5C:B4:34:69:DA:4F:30:66:9B:A5:50:88:55:A8
Authority key identifier: 7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
Certificate issuer:       /CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Certificate serial:       0197488CE75033F836E4170A68BD13BE15CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
Manifest number:          142E
Signing time:             Sat 07 Jun 2025 04:01:23 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:23 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:23 +0000
Files and hashes:         1: fj-4U_hAs3cM0_pCs_nS-b59G38.crl (hash: c9StD2AWHAA2lGhRqlDS0nefYwMCVcheD02Q/EFaqqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:e7:50:33:f8:36:e4:17:0a:68:bd:13:be:15:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
        Validity
            Not Before: Jun  7 04:01:23 2025 GMT
            Not After : Jun  8 04:01:23 2025 GMT
        Subject: CN=cfd9f6afbd255cb43469da4f30669ba5508855a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a6:fc:8f:65:7c:df:42:a2:a4:58:42:d8:72:
                    f9:0c:62:b5:d6:df:b6:1d:57:8a:fe:e7:6c:31:7c:
                    74:96:a9:cc:b2:eb:3d:c5:4b:67:1f:0c:2c:9e:8b:
                    9f:4a:ef:a2:d0:c4:19:48:0f:aa:2d:51:8e:a2:ee:
                    2d:d6:b7:d5:14:36:34:98:2e:ed:cf:2f:ee:0e:97:
                    69:ea:ef:77:a8:1e:6b:71:80:65:62:6a:bf:84:e7:
                    cd:21:5b:e6:e3:1c:93:9d:e4:b6:c2:e8:8d:4f:b0:
                    3b:e8:57:d4:68:4a:e4:2e:f0:d7:a8:e7:52:7b:b2:
                    af:94:90:b3:0e:76:e9:22:63:87:05:da:47:e1:49:
                    ea:1b:be:cf:c6:fe:1e:15:3f:a4:88:8a:84:b2:bc:
                    5d:f6:5c:22:3f:04:1b:73:cc:8b:10:0f:f8:24:2b:
                    a0:17:a2:be:a8:58:e4:f5:4d:1c:2b:8c:ea:97:fc:
                    01:1e:c6:c9:7e:42:6b:1a:f3:2e:44:95:a1:a0:a2:
                    12:74:c0:55:43:48:08:db:b7:7e:2e:ac:08:73:70:
                    9a:39:48:12:f6:48:5f:06:f8:73:44:c1:21:29:c4:
                    7e:6f:6a:d7:8c:e7:5e:74:16:a6:c8:44:aa:64:e9:
                    5b:40:8a:9a:82:69:72:8f:6f:1f:19:d5:bd:ac:5b:
                    18:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D9:F6:AF:BD:25:5C:B4:34:69:DA:4F:30:66:9B:A5:50:88:55:A8
            X509v3 Authority Key Identifier:
                keyid:7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:40:c4:68:7d:35:2e:b3:97:db:46:49:9e:c0:2c:02:d6:26:
         97:c7:b2:a3:08:dd:92:d8:97:d4:c5:eb:60:94:a0:c2:cc:f2:
         33:59:26:68:d0:39:46:91:05:d4:c1:bc:75:36:61:b7:bb:99:
         ad:a9:5e:59:31:c4:5c:74:9b:96:a7:da:ea:ba:48:13:c0:8e:
         a6:f3:f1:48:79:98:ef:32:e5:cb:c9:10:ec:c5:4e:de:be:58:
         99:95:e1:9b:a2:5a:45:c0:4a:3e:cc:88:20:09:f1:2c:0a:d8:
         a0:b1:e7:02:03:da:d6:c3:7a:8d:41:16:ce:6f:e1:0b:81:5b:
         e7:ab:f3:33:39:ff:e4:44:3a:d7:87:74:04:0e:ef:91:19:ab:
         7e:8e:9c:95:c5:b0:2d:a7:0d:e3:45:f3:29:bf:8b:67:7e:e3:
         01:11:b3:c1:14:dc:1d:1b:cf:e0:ec:f9:df:64:47:c2:6b:2c:
         7d:09:b0:41:2c:9b:b2:a6:66:a4:cd:1a:d7:4a:4e:f7:f7:2a:
         15:a2:7b:a6:07:54:c8:e7:9c:7d:e8:e9:45:74:b1:67:9f:dd:
         96:c9:84:e2:3f:c8:52:b9:eb:cf:68:98:9f:23:22:96:b8:f6:
         ca:62:eb:d8:94:b4:d8:40:c5:4a:bb:c1:e1:73:fd:6f:57:66:
         61:ab:26:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjOdQM/g25BcKaL0TvhXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlM2ZiODUzZjg0MGIzNzcwY2QzZmE0MmIzZjlkMmY5YmU3
ZDFiN2YwHhcNMjUwNjA3MDQwMTIzWhcNMjUwNjA4MDQwMTIzWjAzMTEwLwYDVQQD
EyhjZmQ5ZjZhZmJkMjU1Y2I0MzQ2OWRhNGYzMDY2OWJhNTUwODg1NWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6b8j2V830KipFhC2HL5DGK11t+2
HVeK/udsMXx0lqnMsus9xUtnHwwsnoufSu+i0MQZSA+qLVGOou4t1rfVFDY0mC7t
zy/uDpdp6u93qB5rcYBlYmq/hOfNIVvm4xyTneS2wuiNT7A76FfUaErkLvDXqOdS
e7KvlJCzDnbpImOHBdpH4UnqG77Pxv4eFT+kiIqEsrxd9lwiPwQbc8yLEA/4JCug
F6K+qFjk9U0cK4zql/wBHsbJfkJrGvMuRJWhoKISdMBVQ0gI27d+LqwIc3CaOUgS
9khfBvhzRMEhKcR+b2rXjOdedBamyESqZOlbQIqagmlyj28fGdW9rFsYoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/Z9q+9JVy0NGnaTzBmm6VQiFWoMB8GA1UdIwQY
MBaAFH4/uFP4QLN3DNP6QrP50vm+fRt/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmotNFVfaEFzM2NNMF9wQ3NfblMtYjU5RzM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZGRlYWUtYjU5Yi00MWJiLThmZDYt
MTYzZjBlMDc3ZjIzLzEvZmotNFVfaEFzM2NNMF9wQ3NfblMtYjU5RzM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZGRlYWUtYjU5Yi00MWJiLThmZDYtMTYzZjBlMDc3ZjIz
LzEvZmotNFVfaEFzM2NNMF9wQ3NfblMtYjU5RzM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkDEaH01
LrOX20ZJnsAsAtYml8eyowjdktiX1MXrYJSgwszyM1kmaNA5RpEF1MG8dTZht7uZ
raleWTHEXHSblqfa6rpIE8COpvPxSHmY7zLly8kQ7MVO3r5YmZXhm6JaRcBKPsyI
IAnxLArYoLHnAgPa1sN6jUEWzm/hC4Fb56vzMzn/5EQ614d0BA7vkRmrfo6clcWw
LacN40XzKb+LZ37jARGzwRTcHRvP4Oz532RHwmssfQmwQSybsqZmpM0a10pO9/cq
FaJ7pgdUyOecfejpRXSxZ5/dlsmE4j/IUrnrz2iYnyMilrj2ymLr2JS02EDFSrvB
4XP9b1dmYasmqg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:32:58 2025 by rpki-client