Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
File:                     aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft (raw, json)
Hash identifier:          +7y8dd2hEjRd+CuxTIXN26yc8vZBrG3NXjEt3sP/EYc=
Subject key identifier:   35:6C:E9:A2:04:6C:9E:B9:5A:F1:F6:29:AD:D9:EE:F8:9A:9F:65:DF
Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
Certificate issuer:       /CN=6868f656805380ca86e79173789d668dc401d5b5
Certificate serial:       0197C94BD96ED206D3F3879D5F421BE33385
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
Manifest number:          13F3
Signing time:             Wed 02 Jul 2025 04:01:20 +0000
Manifest this update:     Wed 02 Jul 2025 04:01:20 +0000
Manifest next update:     Thu 03 Jul 2025 04:01:20 +0000
Files and hashes:         1: HSyzFVthhSBBD96mxsl0scilpJU.roa (hash: q5u2KllVdiR/BqAy2dqAoFzSZ6PBl0fHr1yzfwddNTg=)
                          2: aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl (hash: v8ZGAuRi7HcObciHeFPya71jh+giem000A+Y6ahP/KM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:4b:d9:6e:d2:06:d3:f3:87:9d:5f:42:1b:e3:33:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5
        Validity
            Not Before: Jul  2 04:01:20 2025 GMT
            Not After : Jul  3 04:01:20 2025 GMT
        Subject: CN=356ce9a2046c9eb95af1f629add9eef89a9f65df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:97:e4:f0:0c:6c:bc:4d:1d:68:f7:40:96:6a:
                    c9:df:4a:dc:ee:73:8a:32:36:2b:b3:17:55:04:27:
                    40:12:be:45:23:64:77:56:49:dc:99:38:49:31:47:
                    68:f3:ac:04:40:af:33:75:bb:22:cc:12:64:b2:81:
                    81:84:b6:17:6b:ad:98:c7:e8:5e:e3:14:17:11:f4:
                    75:30:0b:52:d7:3a:94:a5:1e:d3:0f:b8:14:8e:be:
                    ed:fa:e1:e5:b1:0b:fa:f9:29:dc:27:8a:82:77:75:
                    c2:3d:41:c0:1f:c0:3c:b5:e6:54:fa:3c:03:d1:84:
                    d0:b4:ba:f3:e9:04:67:57:8b:56:ab:b0:17:7e:0c:
                    82:52:b6:9c:d6:6f:b7:ab:b2:59:07:e3:ab:db:c7:
                    81:71:44:fb:b4:66:0b:b4:67:00:e1:a4:9e:15:24:
                    9f:8e:7a:5c:e7:66:fb:b2:19:58:f1:27:66:a7:90:
                    7b:8d:d1:90:f2:5e:58:ea:69:c7:79:1d:cb:e0:3e:
                    7d:83:41:97:08:5a:28:df:1c:1b:b8:45:4f:d8:12:
                    38:63:02:b8:a6:fc:96:76:58:35:de:d9:49:5f:b1:
                    e0:b5:67:bd:12:a8:2b:1b:0d:29:00:e8:6e:24:cc:
                    fd:a0:2b:1e:f2:9c:30:4d:d1:34:e8:5b:c7:28:1e:
                    79:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:6C:E9:A2:04:6C:9E:B9:5A:F1:F6:29:AD:D9:EE:F8:9A:9F:65:DF
            X509v3 Authority Key Identifier:
                keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:68:39:79:8a:6c:3c:aa:04:78:c6:53:16:3d:0e:2d:70:fa:
         2b:b6:62:ab:d3:55:78:d3:4d:51:a4:22:11:b7:9d:ed:7c:44:
         75:4c:8a:38:aa:e8:7c:09:f8:49:78:0f:bf:f8:50:e2:e9:49:
         9a:ef:a1:7e:8f:7d:a1:53:d7:8e:4c:14:70:d9:75:65:3c:6e:
         08:4a:bf:92:15:58:e9:07:82:10:af:bc:71:a8:e9:91:66:75:
         32:72:58:70:0a:e5:b4:49:c7:31:a0:79:88:66:b8:e6:09:10:
         b1:65:34:d5:5f:04:82:ad:45:89:5f:21:59:5e:c1:d4:35:b6:
         df:bd:c2:f6:56:13:9a:81:8c:89:5d:db:5a:84:7f:56:76:de:
         35:d2:d3:f6:5d:40:ae:83:71:94:9e:51:8a:00:a3:69:6f:23:
         6e:1e:bf:f2:2a:18:e0:fe:ba:87:dd:1d:aa:6f:26:6d:36:98:
         c8:46:6c:9a:bb:03:f0:ee:1e:c0:36:30:95:2a:32:66:19:8c:
         1f:5c:b9:84:7c:0d:4e:3d:95:fc:9d:25:5b:41:67:17:cb:d7:
         7e:1c:07:44:d9:bf:9c:f5:f1:4b:56:f8:d6:45:08:71:b1:05:
         14:87:09:91:50:6f:f4:07:00:d1:90:c5:ff:ad:c2:94:ee:6a:
         e4:5c:46:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:56:52 2025 by rpki-client