Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
File:                     Afq489H7PSo1xPZ6SPb2CD6rpXU.mft (raw, json)
Hash identifier:          h9Y0KxN+o8vVsOT6jRlrLI9CJ/jz3ZHuTH2irNAOx7o=
Subject key identifier:   5C:7A:99:40:2A:52:C2:F6:FE:E5:E9:21:27:A3:74:56:A2:52:91:C9
Authority key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
Certificate issuer:       /CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Certificate serial:       0198D7057473C1EEA0052315851EBFA98C73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
Manifest number:          062B
Signing time:             Sat 23 Aug 2025 13:01:55 +0000
Manifest this update:     Sat 23 Aug 2025 13:01:55 +0000
Manifest next update:     Sun 24 Aug 2025 13:01:55 +0000
Files and hashes:         1: Afq489H7PSo1xPZ6SPb2CD6rpXU.crl (hash: gvpmHq0nDpdSqOZ8/km8aaeqUSlrq2ePXjJJ0pfG/x4=)
                          2: RCG29GRzXNkfnM3mAc2fQgzDKKo.roa (hash: VMJ45tdoRBW32E+FWz6jKq995VHfDQKLmdI/8SmUIrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:74:73:c1:ee:a0:05:23:15:85:1e:bf:a9:8c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
        Validity
            Not Before: Aug 23 13:01:55 2025 GMT
            Not After : Aug 24 13:01:55 2025 GMT
        Subject: CN=5c7a99402a52c2f6fee5e92127a37456a25291c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:5f:e2:f6:93:7a:ac:f8:55:d7:77:06:fa:
                    08:d4:a0:14:83:f1:12:ed:4b:e0:b2:79:4a:f6:e5:
                    4a:fb:ed:d4:9a:e5:67:9f:4c:8b:dd:13:02:8b:48:
                    0f:1f:3b:a5:be:24:7f:b5:09:95:63:d6:1c:a4:5b:
                    db:ae:97:98:d9:f7:d1:f8:e4:a7:16:f9:e0:08:24:
                    2e:75:1b:3d:4e:8c:88:2e:99:69:f6:4f:be:e5:c5:
                    6b:a7:77:a1:4c:df:e0:1b:2e:f8:d6:58:fc:47:7e:
                    f1:28:69:21:fb:c9:ee:84:a0:dc:77:fa:9c:70:61:
                    22:9b:83:44:73:3c:e7:33:c2:68:a7:de:7e:02:8f:
                    36:91:4e:c0:7e:ed:dd:ef:2f:c2:44:ea:4b:17:74:
                    5a:4e:5b:3f:b1:de:33:98:90:86:5f:9e:75:83:fb:
                    e8:1f:8e:fd:ce:f3:a4:c8:be:c1:fa:72:5c:37:f6:
                    82:c3:e6:91:10:6e:f2:ed:e4:cb:d5:5e:a3:8e:f8:
                    c6:74:45:b3:62:4f:53:bb:31:e6:97:b0:44:9c:be:
                    9b:89:83:58:35:0a:12:87:3a:44:29:23:c4:ee:dc:
                    3f:a9:e8:6b:bc:97:df:0a:8a:07:ec:35:0f:4a:ab:
                    b3:7f:2b:ca:13:66:ae:59:80:9d:b4:bc:72:a4:ca:
                    cc:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:7A:99:40:2A:52:C2:F6:FE:E5:E9:21:27:A3:74:56:A2:52:91:C9
            X509v3 Authority Key Identifier:
                keyid:01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:08:61:3c:d7:1f:c8:73:c6:79:a3:06:3d:27:f4:97:23:16:
         f8:d1:7e:15:c0:b3:d1:10:e0:07:db:f9:89:ec:9f:85:59:c1:
         45:78:42:ae:5b:cf:cc:29:fb:38:29:a3:0c:9a:61:67:cf:88:
         5a:1b:a5:d8:c0:32:19:9b:4c:85:02:37:1d:1e:30:06:1e:f6:
         57:59:d9:f3:1a:3d:77:cd:ab:48:58:0d:61:29:93:0f:1a:ff:
         68:de:8c:7f:f2:96:d6:2f:5f:15:a3:fe:56:78:e5:bc:f9:e0:
         31:71:cb:3b:6c:9c:70:db:b4:c1:a2:08:a9:c0:a0:3d:06:ec:
         63:a5:9f:4b:41:44:da:0e:6e:e1:95:21:ff:16:44:ce:4c:77:
         c6:7b:a9:73:a4:db:ad:e4:ec:a7:62:6a:09:7f:0f:87:92:80:
         c2:8f:58:00:f8:fa:d0:79:c5:3f:5b:40:ee:c9:60:ed:9f:45:
         91:52:e8:4d:a3:30:90:ce:b0:84:8b:16:ad:25:f6:d1:c7:97:
         ef:11:10:a3:a9:59:e4:9d:16:d6:87:52:a4:79:c4:af:06:83:
         8a:48:d8:1f:0b:19:e2:48:61:76:40:cb:aa:e9:f7:ff:e7:87:
         85:f1:74:ef:94:d6:9c:33:81:a1:46:f7:b5:e5:08:a5:a5:e5:
         e4:c3:55:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:16 2025 by rpki-client