Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
File:                     DghyLSZ7Tv9ER6STM6AlqFICCpg.mft (raw, json)
Hash identifier:          WEKT2WBgmTTwmJI6vKmqrxS80liC+0SB+jQkpX3fgPU=
Subject key identifier:   3C:69:62:76:46:BC:50:38:D5:9C:95:FA:0F:B0:6E:2F:11:5D:3E:26
Authority key identifier: 0E:08:72:2D:26:7B:4E:FF:44:47:A4:93:33:A0:25:A8:52:02:0A:98
Certificate issuer:       /CN=0e08722d267b4eff4447a49333a025a852020a98
Certificate serial:       019769CEEA414D19952C4A09C41752FD9BDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
Manifest number:          087E
Signing time:             Fri 13 Jun 2025 15:00:57 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:57 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:57 +0000
Files and hashes:         1: DghyLSZ7Tv9ER6STM6AlqFICCpg.crl (hash: 14xq1eyqU1jQYsFtLos8F+Ciy4vijf1HVGw6W1K9xU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:ea:41:4d:19:95:2c:4a:09:c4:17:52:fd:9b:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e08722d267b4eff4447a49333a025a852020a98
        Validity
            Not Before: Jun 13 15:00:57 2025 GMT
            Not After : Jun 14 15:00:57 2025 GMT
        Subject: CN=3c69627646bc5038d59c95fa0fb06e2f115d3e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:fa:6a:2e:23:95:30:85:d8:23:9b:f3:62:
                    1a:29:dd:31:ca:d9:63:29:29:51:40:1e:ee:da:c7:
                    3e:06:5f:7b:d2:2b:9c:fa:c5:d3:b2:21:c3:4c:4a:
                    50:82:2e:0c:5b:c6:f0:ea:cd:28:14:2c:16:6c:83:
                    f0:b8:4c:e9:cc:30:6c:46:9b:06:64:50:1d:64:84:
                    35:e7:66:54:ff:37:2e:a5:c0:4b:32:82:b1:5f:e8:
                    39:a9:e3:bb:e1:c2:1a:c1:f6:5f:b0:01:1d:3b:bb:
                    b0:95:9e:f8:9f:3f:b4:91:2e:d9:a8:bc:95:b1:82:
                    24:48:a5:b3:3b:e8:43:a0:46:47:a0:b6:3b:96:1f:
                    60:78:7b:c6:e8:d8:d7:6c:c2:0b:2c:8c:0e:ea:18:
                    06:29:a3:e1:10:8e:27:de:f0:2b:43:ca:33:13:df:
                    55:f0:4e:d0:da:8e:19:8f:70:03:94:3b:a7:c4:2a:
                    71:53:17:68:c0:dd:27:0a:1a:44:a2:03:ae:07:bb:
                    65:87:36:e1:38:f8:07:1b:03:8f:2f:3c:57:6a:6d:
                    a5:60:b4:16:79:d1:3c:cb:09:8b:e3:bd:87:0c:f3:
                    a7:15:ee:4a:08:57:34:55:23:ed:8c:5c:60:32:8d:
                    c6:94:0b:08:9f:3c:f9:71:57:78:35:00:d9:0d:54:
                    5d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:69:62:76:46:BC:50:38:D5:9C:95:FA:0F:B0:6E:2F:11:5D:3E:26
            X509v3 Authority Key Identifier:
                keyid:0E:08:72:2D:26:7B:4E:FF:44:47:A4:93:33:A0:25:A8:52:02:0A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghyLSZ7Tv9ER6STM6AlqFICCpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a569ac-028f-4397-8b66-9933bff3dc4d/1/DghyLSZ7Tv9ER6STM6AlqFICCpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7a:ad:81:dc:96:f1:3e:2f:86:13:19:c2:03:6c:0c:b7:2c:
         dc:d9:91:37:38:62:6a:0e:d7:44:3f:92:2d:9d:2f:27:81:db:
         60:42:ca:bd:ba:4d:00:5d:58:b5:5c:33:9b:e1:d8:e0:d1:f7:
         df:9b:61:8a:1e:cc:94:70:19:a9:a3:f0:d3:06:59:64:ec:f9:
         3f:3a:ab:57:22:de:11:26:7a:98:86:fc:b5:90:25:99:e6:2e:
         22:0f:bc:75:6d:3a:6c:80:24:cb:68:35:45:e3:84:f2:47:1c:
         74:c1:e2:a5:c5:08:11:aa:fd:db:40:39:a9:82:48:1f:b2:5b:
         a0:21:fd:af:d9:5e:a3:a7:8c:f5:70:47:32:68:42:06:1e:ad:
         dc:06:de:f8:82:c7:d3:16:37:9a:09:92:d9:90:d6:94:b7:da:
         7d:1e:15:79:ae:8d:71:f0:d7:9a:c7:66:8d:49:70:ff:81:9d:
         42:40:67:7f:33:6d:28:9b:9d:2e:52:77:7f:34:d7:16:51:ad:
         99:37:eb:b1:61:55:8a:ad:94:4a:9b:86:97:3e:6a:b0:d9:81:
         7a:0c:81:ab:2e:77:cb:04:45:14:fd:cd:55:bf:9e:eb:82:51:
         f8:47:62:f8:a1:52:4f:4c:d6:42:a4:84:d1:4f:a3:50:3f:fa:
         15:88:65:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:00 2025 by rpki-client