Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
File:                     Afq489H7PSo1xPZ6SPb2CD6rpXU.mft (raw, json)
Hash identifier:          NoAqfp2dodmJrHhfH7NWhF2yLBqduwPEZNFKYwPphM0=
Subject key identifier:   80:27:4B:3A:3D:B0:E4:E9:FA:93:B9:E2:7C:3B:A6:57:A3:51:72:A1
Authority key identifier: 01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75
Certificate issuer:       /CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
Certificate serial:       0196B85A711882014F57536DD4395A425ACE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
Manifest number:          0512
Signing time:             Sat 10 May 2025 04:00:57 +0000
Manifest this update:     Sat 10 May 2025 04:00:57 +0000
Manifest next update:     Sun 11 May 2025 04:00:57 +0000
Files and hashes:         1: Afq489H7PSo1xPZ6SPb2CD6rpXU.crl (hash: mZb/PlqNuP6igLQCKlyUk177EB6v8jgeNd4e4ksJ3iw=)
                          2: RCG29GRzXNkfnM3mAc2fQgzDKKo.roa (hash: VMJ45tdoRBW32E+FWz6jKq995VHfDQKLmdI/8SmUIrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:5a:71:18:82:01:4f:57:53:6d:d4:39:5a:42:5a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01fab8f3d1fb3d2a35c4f67a48f6f6083eaba575
        Validity
            Not Before: May 10 04:00:57 2025 GMT
            Not After : May 11 04:00:57 2025 GMT
        Subject: CN=80274b3a3db0e4e9fa93b9e27c3ba657a35172a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:16:f7:10:f6:c9:fe:23:cc:66:11:32:98:
                    9f:1f:54:48:bd:53:66:5c:70:00:67:dd:bb:df:7c:
                    f7:69:a0:7a:1a:bc:be:85:c4:d3:d1:4d:df:e8:40:
                    3d:61:dd:54:52:aa:f1:a1:9c:eb:5f:36:1f:dc:c6:
                    e6:8c:e4:e2:a1:c9:f6:8b:be:03:5b:d8:7f:a2:6c:
                    e2:46:f1:67:5a:9c:90:f2:e6:78:54:50:80:d1:5f:
                    29:14:2a:a0:51:ae:6a:37:0a:1e:25:9a:6e:bf:90:
                    44:55:92:17:ea:92:66:54:de:a4:5c:8d:56:42:c6:
                    32:89:b4:8f:4c:1e:74:3d:19:f0:ed:d5:d5:92:e1:
                    73:29:4a:ce:b1:2c:9e:f5:34:eb:ea:a0:b3:c8:22:
                    e2:75:d6:7c:c6:ea:84:52:85:d3:a9:59:ed:76:b8:
                    71:f6:02:ba:bd:fc:c9:f9:3e:26:e8:5d:2d:8e:d5:
                    6d:6b:84:24:7c:cb:aa:e3:b0:f4:43:98:e6:89:a7:
                    cb:19:30:5c:0f:e8:63:8b:c9:9a:db:87:44:bf:d0:
                    25:31:a6:5c:83:80:a8:46:05:0a:d3:5e:59:f0:b3:
                    4f:13:35:ee:3b:6d:27:57:47:30:29:0c:0a:43:9a:
                    ab:dd:cd:a5:9e:f7:0f:92:5b:9c:68:b7:cf:f9:50:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:27:4B:3A:3D:B0:E4:E9:FA:93:B9:E2:7C:3B:A6:57:A3:51:72:A1
            X509v3 Authority Key Identifier:
                keyid:01:FA:B8:F3:D1:FB:3D:2A:35:C4:F6:7A:48:F6:F6:08:3E:AB:A5:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Afq489H7PSo1xPZ6SPb2CD6rpXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/97f917-93f8-405c-9d55-a3c061d8be91/1/Afq489H7PSo1xPZ6SPb2CD6rpXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:94:7f:02:46:5e:ba:6d:b8:53:a6:d7:26:b8:b0:d3:fd:d7:
         09:0a:4a:37:a8:e7:57:b6:87:81:45:4f:9e:29:b6:8c:4c:27:
         a9:67:89:0a:2d:59:c1:7c:e2:e0:d1:61:de:ce:4b:13:c3:14:
         41:4f:cb:95:dc:d0:12:fc:f0:f7:71:63:9f:82:e7:81:26:12:
         b3:20:eb:e1:7b:51:63:a2:00:3f:6b:f9:b8:44:39:35:6a:2c:
         9f:9b:13:27:0d:bd:ed:7f:b6:8f:fa:c9:dc:77:94:d7:0b:92:
         ae:56:0d:7e:c9:55:fd:77:35:e3:68:b4:68:63:1f:77:05:1c:
         63:cf:ad:cc:95:84:30:e3:f9:5e:57:55:5c:df:13:6e:ac:e5:
         29:93:0b:dc:11:eb:29:ed:0d:21:20:27:97:fc:d0:df:81:94:
         0f:cd:e7:61:e3:80:d9:46:4a:bd:7b:3b:e1:e4:5f:bc:17:c9:
         0c:59:f9:16:a9:98:98:96:cf:3e:b8:b9:98:b5:0f:34:1e:cd:
         0f:9a:7a:88:9b:3e:15:3e:40:d2:cf:41:51:ec:6d:7f:44:23:
         bb:8c:c1:fd:ef:88:18:5f:c4:12:67:2b:0a:48:71:d9:0b:5a:
         8a:63:ca:44:83:b0:df:d3:98:6f:86:58:be:73:71:65:d3:dd:
         89:c9:27:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:15:54 2025 by rpki-client