Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft
File:                     H65TutIFt6PYV3Frsky_DVW_D2w.mft (raw, json)
Hash identifier:          284vUt0WjfuvifySTijzlUbYpco3B5v35Cj1BQxIHdo=
Subject key identifier:   DD:4C:61:66:38:39:4F:57:71:5F:C1:32:90:EE:2E:F7:AE:0C:7F:E4
Authority key identifier: 1F:AE:53:BA:D2:05:B7:A3:D8:57:71:6B:B2:4C:BF:0D:55:BF:0F:6C
Certificate issuer:       /CN=1fae53bad205b7a3d857716bb24cbf0d55bf0f6c
Certificate serial:       01976D3D8BD10B751537BD7173C65B2C62DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft
Manifest number:          0944
Signing time:             Sat 14 Jun 2025 07:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:39 +0000
Files and hashes:         1: H65TutIFt6PYV3Frsky_DVW_D2w.crl (hash: 1CmP6TbrJbH5yQ9IKq9stb9UiS2mcxQR3r7sg0uOkI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:8b:d1:0b:75:15:37:bd:71:73:c6:5b:2c:62:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fae53bad205b7a3d857716bb24cbf0d55bf0f6c
        Validity
            Not Before: Jun 14 07:00:39 2025 GMT
            Not After : Jun 15 07:00:39 2025 GMT
        Subject: CN=dd4c616638394f57715fc13290ee2ef7ae0c7fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:de:29:d5:b7:1b:87:6e:1c:d0:ea:20:53:
                    72:1a:f9:fd:5a:45:14:b7:1d:de:c4:d1:86:a1:c6:
                    ff:58:db:9e:89:fe:9a:8a:e4:5a:90:95:ce:5f:f5:
                    f9:6e:d0:6d:e8:b8:19:92:76:06:17:e5:0c:37:75:
                    cc:4c:7b:5c:30:f1:64:15:73:f1:81:38:4d:00:a4:
                    c1:3a:06:2d:d3:73:1b:54:ab:55:66:9d:6f:91:cb:
                    c5:01:a0:31:57:0e:f6:f5:64:29:6e:38:51:30:3e:
                    84:0f:4d:0d:d1:31:0e:c4:2c:e2:82:5c:9f:6f:c6:
                    de:f3:9b:61:66:b3:05:03:5e:1a:47:1b:9f:8e:d7:
                    a8:2e:ee:81:03:53:e5:24:5a:36:55:80:c0:ab:60:
                    6f:8a:39:07:1e:03:aa:e4:ca:42:fe:90:42:ad:f4:
                    ea:9f:b6:21:c6:ec:70:bf:9b:e4:99:94:38:0f:ff:
                    c6:65:22:7d:99:ec:37:dc:d7:2e:df:18:5c:b0:bf:
                    05:3c:19:55:3f:be:65:86:ff:4b:30:b9:e7:71:d2:
                    c0:a3:b6:f4:71:f4:aa:cc:64:25:19:79:89:f6:34:
                    b3:25:96:27:6d:2f:fa:ad:a9:b0:ed:db:f9:50:93:
                    44:df:4b:64:d4:7b:22:b2:2c:5e:df:d4:79:e2:af:
                    1a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:4C:61:66:38:39:4F:57:71:5F:C1:32:90:EE:2E:F7:AE:0C:7F:E4
            X509v3 Authority Key Identifier:
                keyid:1F:AE:53:BA:D2:05:B7:A3:D8:57:71:6B:B2:4C:BF:0D:55:BF:0F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H65TutIFt6PYV3Frsky_DVW_D2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/86c789-74ff-4456-b75a-3ac4ad29e46e/1/H65TutIFt6PYV3Frsky_DVW_D2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:34:88:04:dd:13:a9:81:90:95:47:eb:c1:5b:68:b0:f8:8b:
         1f:15:b7:12:b8:7e:4d:e2:05:6c:a0:65:9e:59:03:95:52:30:
         e8:1b:7d:b2:9d:f8:f5:88:b0:b4:4d:c2:2d:b2:1e:94:e4:4b:
         d0:6d:52:01:71:1e:a3:a1:10:ca:9e:a9:05:b4:57:76:55:b5:
         11:96:64:20:88:c9:7c:51:54:4b:d0:5b:1c:46:cf:74:53:8c:
         03:4a:5d:3d:4b:e6:b0:6c:49:37:17:eb:da:52:17:1b:7f:8a:
         94:98:8b:e1:15:45:51:bd:1f:a5:50:d9:ab:2a:12:0a:82:3c:
         a0:75:42:d0:12:3d:af:20:3d:7c:da:6b:08:00:23:64:f4:ef:
         4d:4f:e6:88:e1:49:2c:c2:6e:df:c6:9d:56:24:d9:e4:3e:8f:
         ca:b5:ae:39:05:05:b2:78:a7:49:d1:f9:65:01:5a:92:8d:2b:
         36:b8:10:fa:16:90:53:9d:fd:27:9f:20:8b:f4:f7:a0:ed:a0:
         aa:69:e6:d3:7b:ee:65:55:47:c9:16:4a:e2:ea:2e:9d:59:aa:
         95:4a:24:ec:0c:da:05:64:ea:54:32:db:98:12:53:be:87:68:
         90:c1:c0:d6:ef:71:c8:a5:ea:83:b8:98:9b:21:2d:e5:c3:59:
         c1:e1:7e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:22:50 2025 by rpki-client