Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
File:                     AF8NRLIh9LEcidtolp-Xw8cVSQY.mft (raw, json)
Hash identifier:          vYupYmjdBqSuq7yQwIdKDH+m44BD8X0NIShtrluIbFc=
Subject key identifier:   A1:30:55:80:7A:C6:6F:63:C6:68:9D:5F:E0:92:18:50:22:F9:F3:2E
Authority key identifier: 00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06
Certificate issuer:       /CN=005f0d44b221f4b11c89db68969f97c3c7154906
Certificate serial:       01976F9A450D4986A8E84B565038035FBA70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 18:01:10 +0000
Manifest this update:     Sat 14 Jun 2025 18:01:10 +0000
Manifest next update:     Sun 15 Jun 2025 18:01:10 +0000
Files and hashes:         1: AF8NRLIh9LEcidtolp-Xw8cVSQY.crl (hash: MV1PWjsI6xpWBUKeogL3JTShy/j5u6RnhLlloRCE7uI=)
                          2: YU4fCfmpK-fuEOwSolTjGJvHl-Q.roa (hash: jEvy+I1e+1GaLBXiJtzyH21Rx3ZNEpokSAtj3mt7uI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 18:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:9a:45:0d:49:86:a8:e8:4b:56:50:38:03:5f:ba:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=005f0d44b221f4b11c89db68969f97c3c7154906
        Validity
            Not Before: Jun 14 18:01:10 2025 GMT
            Not After : Jun 15 18:01:10 2025 GMT
        Subject: CN=a13055807ac66f63c6689d5fe092185022f9f32e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:c9:5e:87:e6:10:f5:1e:70:c5:d1:88:f7:
                    6f:d8:5e:ae:c9:5d:bd:8b:be:43:5c:87:99:5d:5b:
                    c7:c4:1e:6c:47:71:e0:53:ac:2c:f4:e9:a1:8f:c7:
                    dc:93:9f:1a:b4:27:7e:b1:6d:62:e1:45:b3:03:1a:
                    7f:2a:34:0d:b5:34:f5:12:40:76:af:cb:5c:67:97:
                    4e:f3:cc:05:f6:af:12:d8:6f:15:20:d1:ab:31:7b:
                    25:4f:44:a2:0e:60:f4:c1:cf:08:3b:94:99:58:36:
                    9b:f7:29:44:18:5a:c8:8f:70:60:a3:0f:cf:f4:d6:
                    c3:aa:2e:f1:61:e5:02:d2:35:e7:33:14:72:ce:c0:
                    90:ef:81:58:86:60:46:93:74:e2:32:3d:2b:06:f3:
                    63:70:ab:c1:f5:da:f4:9d:b7:24:ae:af:42:31:ac:
                    5f:f9:61:b9:82:5b:ef:4e:4a:2b:72:9d:1b:77:c5:
                    fb:00:39:22:de:7b:2a:b7:69:20:d5:f7:08:ad:26:
                    70:e5:ba:80:1f:9f:9a:47:53:ea:9c:83:5a:e1:6a:
                    56:54:86:3d:fd:f9:21:e7:09:c1:8b:65:1b:c1:78:
                    47:3c:96:ea:77:38:9a:da:9e:ed:7a:83:fc:2e:30:
                    9e:fa:b7:b5:ca:c7:95:ea:75:7b:42:46:3e:58:00:
                    27:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:30:55:80:7A:C6:6F:63:C6:68:9D:5F:E0:92:18:50:22:F9:F3:2E
            X509v3 Authority Key Identifier:
                keyid:00:5F:0D:44:B2:21:F4:B1:1C:89:DB:68:96:9F:97:C3:C7:15:49:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AF8NRLIh9LEcidtolp-Xw8cVSQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/68239f-09a3-4108-89ba-eee50dd9193c/1/AF8NRLIh9LEcidtolp-Xw8cVSQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:3d:34:2a:0d:4e:76:3c:00:75:cc:91:ee:50:ff:d5:ef:05:
         fd:ae:91:da:da:39:9a:d1:0b:65:1e:40:f5:5f:42:42:58:ac:
         cc:af:8a:40:6b:f2:f7:19:72:2f:33:a4:d6:c3:37:ef:4d:b7:
         e6:cc:df:6b:ec:8a:7f:d2:2e:5a:9a:ec:18:1f:ed:9b:b7:87:
         23:ce:36:ee:5d:8c:20:ff:1c:a3:73:fc:4d:6e:1b:0a:79:5e:
         ae:a9:fa:b7:80:fe:84:fa:28:19:88:b7:cf:3a:b1:82:41:af:
         11:84:9a:e2:77:6e:27:51:cc:47:74:47:73:ef:06:18:30:1b:
         e5:a5:3f:9d:e3:b6:73:d7:44:ec:be:bf:67:b5:c1:0e:eb:d4:
         16:0e:27:7e:f6:fd:9e:72:f8:91:bc:36:29:f7:3e:06:4e:9a:
         b8:ff:bb:34:01:d4:88:37:59:92:37:d5:cc:27:23:75:57:da:
         42:e4:17:88:4b:4a:a1:57:8b:24:ba:8a:23:48:27:3a:8a:6d:
         ae:cf:d2:e6:f9:21:bd:0b:12:16:40:ca:73:10:79:7d:75:e4:
         6a:e0:67:9b:da:8e:67:f7:fb:a0:fd:d5:5c:d9:45:c0:3f:50:
         54:e1:18:f8:87:ef:22:83:77:0e:58:9d:48:b4:2a:66:a4:44:
         db:de:22:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:06:30 2025 by rpki-client