Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
File:                     afGmtIBLtqOFSkThBp8lcmdBeAU.mft (raw, json)
Hash identifier:          raK7m3XjDS9JkI3SD5sCCsWAEpGflEo9ZF/Y8SfPXbQ=
Subject key identifier:   08:1B:99:73:1E:79:2F:EA:B6:05:AD:AC:75:79:52:21:50:73:6C:53
Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05
Certificate issuer:       /CN=69f1a6b4804bb6a3854a44e1069f257267417805
Certificate serial:       01976D06DDEA02BBD0841D7C46795993532A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
Manifest number:          0365
Signing time:             Sat 14 Jun 2025 06:00:55 +0000
Manifest this update:     Sat 14 Jun 2025 06:00:55 +0000
Manifest next update:     Sun 15 Jun 2025 06:00:55 +0000
Files and hashes:         1: Skkt9qCmFcjyoJKLbWcw_zW-zv4.roa (hash: oMEM2PX5h0QQNYCkDuZtaf8uG3ceVoU4JnbpV2MwKWM=)
                          2: afGmtIBLtqOFSkThBp8lcmdBeAU.crl (hash: WIqzgjQvkxkAQlp4wRCkaiDIXagiRQH9rzfc//NMmBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:06:dd:ea:02:bb:d0:84:1d:7c:46:79:59:93:53:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805
        Validity
            Not Before: Jun 14 06:00:55 2025 GMT
            Not After : Jun 15 06:00:55 2025 GMT
        Subject: CN=081b99731e792feab605adac7579522150736c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c5:b9:5c:7b:d5:04:f3:49:63:3e:8b:99:9c:
                    2c:70:32:6f:b6:a3:f4:98:14:40:69:c9:96:44:0e:
                    14:45:66:5f:05:22:66:31:8b:96:9a:3b:97:54:a4:
                    02:cc:b8:f8:0f:53:aa:dc:52:f7:ee:4b:f7:32:f8:
                    9f:fb:12:b2:10:6f:10:f4:13:63:a8:9a:3a:e4:43:
                    11:da:57:db:9f:ad:8b:fa:f7:6b:8e:26:31:54:b0:
                    1f:e3:8f:56:ed:09:19:89:4a:c0:77:5c:a4:78:f9:
                    8d:d9:ff:0e:5b:ee:27:76:70:52:49:02:ea:11:bb:
                    a5:a0:d4:86:f3:37:11:1e:b1:9c:b8:14:83:20:c8:
                    11:9c:e1:dc:a8:73:ec:0d:90:1a:33:9f:28:90:3f:
                    fd:c7:ac:48:e0:8a:b0:9f:03:8f:73:73:5f:f0:c8:
                    70:15:36:8b:a0:fb:26:a9:60:5a:4d:c2:20:a3:ef:
                    56:ab:5a:a0:d2:ce:8d:22:65:13:45:5f:d4:65:20:
                    ed:c1:a3:77:1d:29:e1:e6:9e:2d:ef:d5:8c:cb:a0:
                    1e:2d:9b:3a:3b:80:ff:14:0c:e1:d2:5d:65:45:5c:
                    a2:5b:46:37:b6:46:e5:42:23:bc:70:41:42:40:e6:
                    3c:b2:cc:46:22:e2:00:ca:09:a6:de:d3:62:eb:db:
                    c7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1B:99:73:1E:79:2F:EA:B6:05:AD:AC:75:79:52:21:50:73:6C:53
            X509v3 Authority Key Identifier:
                keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:3f:bd:4c:af:a3:5a:2e:09:71:d2:69:b7:0a:aa:6d:87:cb:
         5f:37:fc:95:1c:d4:04:2c:69:47:c6:a9:25:10:ae:f4:78:fd:
         84:ae:a4:35:92:bc:8e:4b:d1:70:90:ed:fc:b8:ac:f4:fe:0b:
         23:3c:62:90:61:34:68:64:be:c8:9a:8c:b3:db:d6:eb:c4:38:
         cb:a6:5c:a9:24:ea:98:35:72:22:9b:6a:33:cf:2f:14:b4:19:
         2d:dd:60:b0:23:bb:c7:16:22:31:90:13:fe:87:6b:0c:a8:4a:
         3f:d4:e0:d3:1c:ec:e1:60:44:bb:8d:88:68:e2:f7:dd:b7:ce:
         65:91:2f:31:c4:67:cd:cd:91:a8:a1:45:92:88:02:9f:06:e9:
         9c:df:3d:c6:2d:42:c7:ec:3c:96:bb:9a:91:3b:78:4c:96:13:
         08:f8:42:55:0b:0b:d0:10:22:85:e3:23:ca:23:f1:f4:e7:1e:
         93:04:ad:07:e3:4d:fd:17:14:38:c5:36:58:5b:67:7d:b8:66:
         5a:ad:cc:71:f7:84:03:ce:7e:ce:c8:19:58:95:45:de:24:b8:
         9e:b3:4e:52:e8:59:4d:13:93:90:6e:9b:18:ac:a5:ec:1f:81:
         30:9f:00:45:9f:12:b2:20:63:11:6a:c8:65:67:67:8a:95:5e:
         b9:a1:24:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBt3qArvQhB18RnlZk1MqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZjFhNmI0ODA0YmI2YTM4NTRhNDRlMTA2OWYyNTcyNjc0
MTc4MDUwHhcNMjUwNjE0MDYwMDU1WhcNMjUwNjE1MDYwMDU1WjAzMTEwLwYDVQQD
EygwODFiOTk3MzFlNzkyZmVhYjYwNWFkYWM3NTc5NTIyMTUwNzM2YzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMW5XHvVBPNJYz6LmZwscDJvtqP0
mBRAacmWRA4URWZfBSJmMYuWmjuXVKQCzLj4D1Oq3FL37kv3Mvif+xKyEG8Q9BNj
qJo65EMR2lfbn62L+vdrjiYxVLAf449W7QkZiUrAd1ykePmN2f8OW+4ndnBSSQLq
EbuloNSG8zcRHrGcuBSDIMgRnOHcqHPsDZAaM58okD/9x6xI4IqwnwOPc3Nf8Mhw
FTaLoPsmqWBaTcIgo+9Wq1qg0s6NImUTRV/UZSDtwaN3HSnh5p4t79WMy6AeLZs6
O4D/FAzh0l1lRVyiW0Y3tkblQiO8cEFCQOY8ssxGIuIAygmm3tNi69vHbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgbmXMeeS/qtgWtrHV5UiFQc2xTMB8GA1UdIwQY
MBaAFGnxprSAS7ajhUpE4QafJXJnQXgFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZjFmMmUtNWM1Mi00ZmIwLWI1Mzgt
MTczNjZmZjk2Mzc5LzEvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zZjFmMmUtNWM1Mi00ZmIwLWI1MzgtMTczNjZmZjk2Mzc5
LzEvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADj+9TK+j
Wi4JcdJptwqqbYfLXzf8lRzUBCxpR8apJRCu9Hj9hK6kNZK8jkvRcJDt/Lis9P4L
IzxikGE0aGS+yJqMs9vW68Q4y6ZcqSTqmDVyIptqM88vFLQZLd1gsCO7xxYiMZAT
/odrDKhKP9Tg0xzs4WBEu42IaOL33bfOZZEvMcRnzc2RqKFFkogCnwbpnN89xi1C
x+w8lruakTt4TJYTCPhCVQsL0BAiheMjyiPx9OcekwStB+NN/RcUOMU2WFtnfbhm
Wq3McfeEA85+zsgZWJVF3iS4nrNOUuhZTROTkG6bGKyl7B+BMJ8ARZ8SsiBjEWrI
ZWdnipVeuaEk7A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:54 2025 by rpki-client