Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
File:                     dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft (raw, json)
Hash identifier:          0f9TK5tIwiA06jzfKoih/HhwgCkm0FXJXXuKWM5ARRM=
Subject key identifier:   5F:90:13:2C:EE:08:24:39:06:EE:F4:4F:D3:B7:4C:DA:5E:3B:6C:22
Authority key identifier: 76:96:23:B8:B3:7F:C8:C5:74:5D:57:5C:09:EF:C4:CE:A8:B6:DA:09
Certificate issuer:       /CN=769623b8b37fc8c5745d575c09efc4cea8b6da09
Certificate serial:       019795CC0030DB4A5F02668C061E0CC6905F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
Manifest number:          0CDB
Signing time:             Sun 22 Jun 2025 04:01:03 +0000
Manifest this update:     Sun 22 Jun 2025 04:01:03 +0000
Manifest next update:     Mon 23 Jun 2025 04:01:03 +0000
Files and hashes:         1: dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl (hash: 9eqWoQVcCOZZZ4Nix0CN27NtMyzGfmyLH6enbeJmM7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Jun 2025 01:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:95:cc:00:30:db:4a:5f:02:66:8c:06:1e:0c:c6:90:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769623b8b37fc8c5745d575c09efc4cea8b6da09
        Validity
            Not Before: Jun 22 04:01:03 2025 GMT
            Not After : Jun 23 04:01:03 2025 GMT
        Subject: CN=5f90132cee08243906eef44fd3b74cda5e3b6c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:b4:fb:fa:7c:10:38:cf:a8:56:38:0f:f0:
                    fe:af:66:65:8e:46:5d:9a:70:a5:b8:23:35:39:6e:
                    8f:a3:df:74:9e:60:d9:19:db:9f:19:68:bc:05:a4:
                    43:e9:5b:5c:7f:c2:5e:06:8c:cb:52:c3:eb:7b:17:
                    45:81:cf:75:d3:4b:5d:3a:02:fb:74:97:1e:c8:0b:
                    5a:79:a0:83:b3:2f:e4:cc:c4:4b:d1:2b:b0:71:31:
                    25:7d:3d:f2:b5:1a:31:a8:bf:84:b1:ca:5f:fe:8c:
                    30:55:25:b9:44:a8:55:1f:1d:3f:74:7e:08:ed:03:
                    37:96:f6:bf:4e:26:65:02:b4:8b:82:44:3b:be:1c:
                    86:ab:9d:62:6c:30:75:22:37:80:57:2e:b6:84:25:
                    e2:65:ce:de:07:71:d8:4b:3c:ff:30:6d:88:97:6e:
                    72:fd:de:7d:df:7e:fa:d9:b8:fa:28:5b:c9:52:2b:
                    38:cb:d5:97:07:bb:9f:2f:cf:9b:d9:38:fb:6f:07:
                    18:a4:4f:25:a2:07:50:7f:80:23:a0:dc:5d:df:f3:
                    72:51:5e:87:dc:31:00:66:ea:11:fb:e6:b4:86:4b:
                    b7:c1:d2:36:a0:60:7b:b8:d9:c3:6c:bc:48:fe:1a:
                    7f:ce:d9:ed:25:3f:36:c5:51:f0:95:1e:b1:39:45:
                    0b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:90:13:2C:EE:08:24:39:06:EE:F4:4F:D3:B7:4C:DA:5E:3B:6C:22
            X509v3 Authority Key Identifier:
                keyid:76:96:23:B8:B3:7F:C8:C5:74:5D:57:5C:09:EF:C4:CE:A8:B6:DA:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:27:0a:1c:84:66:29:2c:69:12:cd:75:29:01:8c:09:7b:f5:
         ea:bf:fc:5b:7a:0e:df:6b:33:60:2c:ca:d4:db:fb:c0:75:a8:
         3c:21:ea:95:42:93:4a:f3:31:8d:02:e2:d8:56:e4:e3:cf:b9:
         89:52:94:66:b5:2c:c4:ea:26:41:95:46:d2:d5:7e:e9:65:d1:
         de:c5:15:c9:b3:ba:0b:ad:b6:7c:18:92:ed:12:8b:af:90:e2:
         ce:2d:41:de:ff:29:49:4e:d5:48:81:eb:9f:a0:24:9a:60:de:
         14:2d:18:4f:f9:f2:c2:a0:ee:91:9e:cf:55:ca:d8:28:8f:a7:
         d5:de:3c:5e:68:00:12:a0:4a:c9:e4:32:1b:c7:ed:ba:3b:1a:
         ed:8d:1f:97:d5:9e:19:01:e7:70:55:67:c1:9a:f0:2d:39:5f:
         67:6d:fe:20:ff:c0:a7:27:71:46:0b:95:51:28:17:44:2f:43:
         99:3e:05:df:ff:fd:21:31:5f:4a:91:57:ff:37:1d:a8:2f:98:
         ee:71:e7:9a:69:80:b6:b4:f8:53:84:86:8e:c1:ef:47:ac:4d:
         99:a4:9e:59:22:bd:9f:a2:c9:de:40:e7:dc:da:d1:4f:82:e0:
         12:a6:69:ab:c5:6d:5a:1b:33:fd:4d:3b:32:d5:34:a3:d5:1d:
         c7:0a:f2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 11:40:13 2025 by rpki-client