Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File:                     AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier:          b2DbB6jQQyYvvLUrdvDaAnKQR1u3aN+7FksHP2Ki4EM=
Subject key identifier:   3A:EE:18:71:19:4B:20:21:4B:60:23:7B:9C:B7:E1:6F:C0:65:EE:03
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer:       /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial:       019759126314FCB3EEDB49C46219DDC873F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number:          0DB3
Signing time:             Tue 10 Jun 2025 09:01:06 +0000
Manifest this update:     Tue 10 Jun 2025 09:01:06 +0000
Manifest next update:     Wed 11 Jun 2025 09:01:06 +0000
Files and hashes:         1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: 4ZMseW03mEhr2++BZJQ6k7kz/VPM02odazhPNUKEsi8=)
                          2: B0Hd0utXPhNTqlbRxXDwmF9KHjs.roa (hash: 1ceb7F8O/NW3RMAYN486oZsriG91e3FFu7flF4b5QpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:59:12:63:14:fc:b3:ee:db:49:c4:62:19:dd:c8:73:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
        Validity
            Not Before: Jun 10 09:01:06 2025 GMT
            Not After : Jun 11 09:01:06 2025 GMT
        Subject: CN=3aee1871194b20214b60237b9cb7e16fc065ee03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d9:2d:f1:84:70:b8:d1:a9:a3:e6:9c:38:a6:
                    e4:fa:fe:61:c0:a8:17:3c:9f:0b:f1:bd:45:f6:50:
                    f2:1a:fe:ce:d8:99:16:30:9b:05:1e:33:9f:9c:56:
                    a0:ae:d6:2d:7c:c8:42:23:7c:02:7b:a0:67:1b:b9:
                    29:9c:f7:bc:d4:33:e5:a1:60:44:e8:1d:64:07:84:
                    b5:3f:8f:c0:7f:da:93:d3:90:a4:0b:51:f5:15:a1:
                    92:77:7d:27:10:42:2b:78:c8:75:01:e3:ae:18:df:
                    8d:07:73:bc:00:be:8c:0b:3f:e0:d2:0c:07:7b:a2:
                    cc:52:9c:7b:bd:c9:1c:b6:07:db:0d:ea:4e:7c:4c:
                    60:e3:ae:ae:c1:2a:58:58:eb:64:f4:38:ca:8c:9e:
                    61:32:ac:6d:76:8e:64:be:aa:77:29:45:19:c0:35:
                    0b:c9:32:cb:99:72:8c:71:16:cc:1a:34:88:85:d1:
                    3f:d6:c9:43:0e:53:6a:51:7e:35:ca:4d:c0:b3:ad:
                    e6:87:07:4e:01:84:e4:fc:08:fd:f8:f7:ff:80:95:
                    82:13:5a:28:7d:03:a1:6e:22:78:5b:bb:06:77:ad:
                    09:d0:6e:80:29:79:74:94:48:1e:b2:5f:ba:66:93:
                    76:73:42:b4:e7:cf:a1:1b:2b:2c:a4:ab:d6:4c:f1:
                    62:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:EE:18:71:19:4B:20:21:4B:60:23:7B:9C:B7:E1:6F:C0:65:EE:03
            X509v3 Authority Key Identifier:
                keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:f5:7e:c9:a4:fe:f9:55:75:da:7c:9f:4a:16:8e:2a:56:51:
         d3:ef:c5:be:53:97:3d:db:f2:f1:8e:31:db:b9:bc:aa:c1:48:
         ba:8a:e6:0d:06:81:08:89:22:63:c2:2f:fd:22:f3:c2:b9:bd:
         f4:de:01:60:8f:00:26:34:33:5c:bf:77:a1:a6:f3:27:c8:f2:
         d6:a3:2a:ac:f3:49:9e:4e:7c:bf:ed:41:22:ed:ef:32:a6:46:
         5c:b4:b5:af:c6:5a:ff:3e:05:d1:6b:ff:83:e1:3e:d4:5d:31:
         2d:66:5e:9e:5d:42:d4:72:07:78:ab:e8:7f:ec:5f:b0:ee:80:
         50:00:9d:db:f7:13:61:3b:93:ce:05:94:da:9c:ed:9e:1d:c0:
         81:76:75:e1:de:c4:8b:e2:b3:dd:8f:9b:2e:40:c3:67:87:91:
         e7:84:e1:e6:4b:49:03:ed:17:68:3c:ac:c5:11:25:92:9a:ef:
         34:20:a3:51:dc:f3:50:02:e4:27:be:b8:7d:04:5d:4d:3c:7f:
         40:ea:f2:9a:53:55:0b:58:0c:05:f0:97:ce:46:05:67:f2:29:
         4d:35:1f:85:b0:41:35:af:f2:42:d9:f1:83:17:cf:3d:18:ad:
         d1:a8:ce:24:0f:44:1a:2d:c8:99:b4:75:9b:01:96:20:81:7d:
         02:3e:0f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:27:40 2025 by rpki-client