Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
File:                     dggs9uV3xDJnGZEkoogbNzLO9AQ.mft (raw, json)
Hash identifier:          Y4OCZS8ADERRoVHr0DARG8oO3O4h2HP5GwPYbLoTQU4=
Subject key identifier:   93:27:56:A7:C4:42:E6:A1:9C:F8:D2:73:75:34:70:04:3C:2C:52:20
Authority key identifier: 76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04
Certificate issuer:       /CN=76082cf6e577c43267199124a2881b3732cef404
Certificate serial:       019769CF165E416E360095958796EABA2438
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
Manifest number:          158A
Signing time:             Fri 13 Jun 2025 15:01:08 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:08 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:08 +0000
Files and hashes:         1: dggs9uV3xDJnGZEkoogbNzLO9AQ.crl (hash: 44A3MQqm/uxhuWiS9ruHeWu1Eos3UBSgu5MjE0OrraQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:16:5e:41:6e:36:00:95:95:87:96:ea:ba:24:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76082cf6e577c43267199124a2881b3732cef404
        Validity
            Not Before: Jun 13 15:01:08 2025 GMT
            Not After : Jun 14 15:01:08 2025 GMT
        Subject: CN=932756a7c442e6a19cf8d273753470043c2c5220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:74:d2:6b:d1:da:72:84:fb:5d:48:18:7e:52:
                    ac:4c:79:ec:7d:5c:09:34:c3:bd:f4:c2:2a:a7:11:
                    8f:8a:43:23:e2:9f:08:aa:39:59:21:51:6a:13:87:
                    fd:67:9c:79:9c:a6:cb:59:49:95:26:0d:cc:86:21:
                    c1:22:75:f3:ce:02:fd:41:25:7f:6c:d1:e4:31:ad:
                    ef:92:ba:45:6f:52:97:7c:de:04:5a:f8:ca:50:cd:
                    d3:4b:77:d6:aa:24:2b:c2:1d:68:3f:8f:d4:f0:d2:
                    4a:9e:fc:00:6d:51:46:38:df:dd:fb:da:32:01:87:
                    5f:ea:c4:b3:98:a2:79:42:e1:14:7f:bf:cd:1d:f3:
                    da:26:2d:5f:3c:16:ce:f1:45:52:5f:33:89:76:53:
                    f2:e2:af:d6:09:4c:e0:a6:b2:c0:cf:80:4b:6e:33:
                    d1:d8:1e:53:c1:0e:7d:bf:b1:48:ee:22:77:01:d1:
                    94:be:df:e4:89:0f:18:c1:b9:12:48:99:e7:00:bc:
                    ff:db:77:06:34:f3:40:f0:7e:55:44:25:79:19:b5:
                    a1:97:e4:8a:9d:bd:87:45:3f:70:bc:83:0c:4e:84:
                    99:66:63:f1:85:2d:20:9e:15:1b:dc:b5:aa:85:9c:
                    dc:f7:63:7d:1a:ad:18:3a:e3:11:b6:55:4a:2a:37:
                    fe:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:27:56:A7:C4:42:E6:A1:9C:F8:D2:73:75:34:70:04:3C:2C:52:20
            X509v3 Authority Key Identifier:
                keyid:76:08:2C:F6:E5:77:C4:32:67:19:91:24:A2:88:1B:37:32:CE:F4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dggs9uV3xDJnGZEkoogbNzLO9AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7f7e3e-c022-4739-b939-d5d4f07205f8/1/dggs9uV3xDJnGZEkoogbNzLO9AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:04:f2:5e:96:14:cb:a1:f2:d3:cc:03:d9:f5:3b:ec:8f:28:
         e9:75:e7:04:13:9c:0f:e4:46:f2:2d:9c:02:9e:13:bc:03:d5:
         31:6b:2d:68:f4:5b:4f:fb:d2:96:ef:6f:cc:2c:9e:37:8a:06:
         5c:6b:17:52:5a:a4:54:4b:92:85:b9:be:de:b6:56:4c:9c:a2:
         c5:5d:00:c9:0c:a5:66:00:62:21:90:89:39:78:71:e2:ce:a1:
         a3:29:70:f0:f6:f2:79:37:30:09:ed:de:db:d5:67:f6:a7:d6:
         ca:49:a9:5a:e0:47:3b:3f:cd:c9:52:d4:bc:c3:8e:32:34:f4:
         bf:f5:55:93:49:d7:3b:35:64:9e:7c:2c:aa:74:bf:b5:16:3f:
         9e:40:0a:14:58:1f:5b:d7:f0:a7:0d:eb:c6:3c:57:10:eb:e3:
         c9:e9:7d:59:3c:5d:a5:0c:40:20:d3:4d:4f:f5:74:04:dc:8b:
         6c:0a:cc:68:c8:82:a9:39:78:f6:0c:06:44:e8:aa:65:d8:6e:
         a0:67:89:25:62:48:af:3c:2c:0d:fb:49:ef:86:4c:af:94:25:
         89:18:e2:f7:02:d8:01:33:d7:65:6c:f8:15:ff:be:0d:f2:b9:
         3e:02:35:50:63:14:b3:c1:0a:76:3d:88:78:9f:92:d3:85:8d:
         10:24:33:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:55:01 2025 by rpki-client