Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
File:                     afjrNm_GyKCb-xQPFQX57GddQuQ.mft (raw, json)
Hash identifier:          yQnQrXhPN4I8mkXMtoD2xISbuEr1ZuuvSQf+ZZQYnjc=
Subject key identifier:   33:A2:E8:2F:95:6F:0D:57:DB:F9:BA:8D:B9:3F:67:C2:36:49:EB:F8
Authority key identifier: 69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4
Certificate issuer:       /CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
Certificate serial:       0197B6A0A690CC12C7D9BB6DA2668C19D43B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
Manifest number:          0889
Signing time:             Sat 28 Jun 2025 13:01:10 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:10 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:10 +0000
Files and hashes:         1: afjrNm_GyKCb-xQPFQX57GddQuQ.crl (hash: E/uWjXnWNI+owk+ZTS7X7EpGU619LkC7DAqaGLid8EE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:a6:90:cc:12:c7:d9:bb:6d:a2:66:8c:19:d4:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f8eb366fc6c8a09bfb140f1505f9ec675d42e4
        Validity
            Not Before: Jun 28 13:01:10 2025 GMT
            Not After : Jun 29 13:01:10 2025 GMT
        Subject: CN=33a2e82f956f0d57dbf9ba8db93f67c23649ebf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5e:c3:ef:2a:81:c4:21:89:4c:61:a3:53:c6:
                    84:f2:b4:c4:4c:30:38:c5:02:eb:82:67:5d:a8:c8:
                    f9:e3:e8:3a:93:41:67:10:28:18:d2:2c:83:6a:c6:
                    97:82:94:43:7a:68:7a:c0:b8:fe:4b:3d:ca:0a:b1:
                    31:15:ee:4c:32:a5:25:15:79:f5:79:76:d6:9b:b5:
                    e0:dc:6f:ac:df:18:26:80:56:6f:6c:a2:61:37:36:
                    53:55:69:b8:f0:52:d5:dd:11:c6:f5:12:d9:d0:c6:
                    dd:aa:e6:c2:73:8b:de:3a:b3:a7:16:94:6d:78:99:
                    8d:17:5f:82:be:ef:f0:52:eb:41:90:c0:57:0c:ca:
                    fe:db:38:e8:8f:35:a9:03:f9:fe:d5:b0:cd:71:cc:
                    d1:15:42:40:8e:7e:b7:de:5c:01:4f:dd:88:fc:12:
                    05:e1:41:31:a3:4a:44:0f:20:39:98:2f:4e:08:fd:
                    9f:d1:fb:d4:5e:f4:ff:4b:2f:3e:0e:ae:20:17:24:
                    30:53:17:76:05:6d:56:4e:3e:c0:b6:2b:5e:84:3c:
                    86:0b:9b:20:20:91:09:f2:cd:e6:93:34:31:78:e1:
                    ee:a2:4a:b4:3f:25:90:c7:86:22:0c:90:ea:63:11:
                    43:d9:1c:6c:6d:d9:1d:b5:a1:aa:d6:f5:5c:99:f1:
                    29:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A2:E8:2F:95:6F:0D:57:DB:F9:BA:8D:B9:3F:67:C2:36:49:EB:F8
            X509v3 Authority Key Identifier:
                keyid:69:F8:EB:36:6F:C6:C8:A0:9B:FB:14:0F:15:05:F9:EC:67:5D:42:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afjrNm_GyKCb-xQPFQX57GddQuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fdad8c-9ed3-4f01-b107-7486c0582f2a/1/afjrNm_GyKCb-xQPFQX57GddQuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:53:23:6a:d7:ca:e0:45:e0:d6:df:6e:38:b0:01:97:f4:df:
         bf:cb:1a:ff:a2:f4:c1:12:e7:d8:96:be:75:42:70:3b:1b:90:
         f7:b2:26:7e:70:8b:82:5d:5b:3a:67:d1:dc:f6:40:26:c5:d8:
         aa:76:fe:84:32:01:76:cb:75:c2:5d:37:6a:29:31:73:6e:ea:
         0d:63:b2:ea:cc:37:6a:c9:e2:f0:af:af:29:1f:5b:31:8b:c1:
         c1:36:ef:8f:e6:86:b0:9a:7b:d7:6b:e3:47:fd:27:fe:52:f8:
         c2:28:97:ae:e9:7a:0f:37:e5:bc:08:b4:95:56:9d:11:d4:de:
         8d:ad:7a:39:46:e2:75:35:21:7f:a4:26:57:db:bd:c4:ad:9f:
         d8:0c:4d:7e:7b:0f:81:02:22:e7:af:ef:78:e6:65:20:ea:f1:
         54:08:43:5a:ff:3e:23:47:2d:15:31:0e:56:06:71:33:ea:08:
         f3:a5:a6:65:75:a5:6b:0a:bf:23:fe:07:60:21:00:9c:7a:ca:
         4e:ae:14:da:ad:de:1e:c8:87:0d:93:31:56:db:5f:fc:6a:89:
         be:ee:a3:06:5d:6a:36:9d:cc:fd:aa:e9:56:a6:51:a3:2a:7f:
         98:09:ac:f1:61:c0:0b:d9:bc:21:ce:87:db:97:cd:7d:ce:0b:
         26:1f:fc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:08:23 2025 by rpki-client