Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
File:                     CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json)
Hash identifier:          dn5MHp0ViZzaKu4jj/41AdpblEgbTq0LMtMxHoUgCi0=
Subject key identifier:   5A:0A:80:6D:CD:D9:6F:70:18:E1:77:86:88:71:74:9A:C3:F5:AB:10
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Certificate issuer:       /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial:       01976DABCD36BE8287D7B2AA55D04D0B7CDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 09:01:05 +0000
Manifest this update:     Sat 14 Jun 2025 09:01:05 +0000
Manifest next update:     Sun 15 Jun 2025 09:01:05 +0000
Files and hashes:         1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: Jl4l303/GR/2qDg6mzCwqkS0Me5jhCNepVobUt+OR2U=)
                          2: ZnV_8X8pYoAVKjZWPYlTDet39Po.roa (hash: AQ2CtHZNHtcjULxTw0rAIotVl7Ai3G/vKLwZOUyWiLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:cd:36:be:82:87:d7:b2:aa:55:d0:4d:0b:7c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
        Validity
            Not Before: Jun 14 09:01:05 2025 GMT
            Not After : Jun 15 09:01:05 2025 GMT
        Subject: CN=5a0a806dcdd96f7018e177868871749ac3f5ab10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e1:b0:28:79:bf:61:8f:1f:34:d9:08:b5:c6:
                    48:54:09:0d:d3:a2:3a:d8:6d:12:7a:e1:cb:c5:8b:
                    df:9c:56:91:95:2a:3b:e0:ac:af:d8:48:83:3e:b4:
                    79:f9:03:9f:9c:92:36:69:c9:80:99:14:d8:1f:f8:
                    37:50:1c:0b:69:3a:a2:1a:42:af:b7:0e:52:97:1b:
                    9e:fa:65:19:b0:d6:2b:fe:da:ef:51:66:a6:61:84:
                    72:c8:94:ad:4f:d7:05:01:fe:55:53:c5:a8:86:45:
                    cf:50:d1:07:99:4e:77:45:07:4a:b3:d3:1f:37:16:
                    8d:86:db:6a:48:50:a0:57:91:60:06:5e:3e:96:ea:
                    ba:a0:62:e3:de:e0:c4:0b:ac:06:71:90:ce:12:58:
                    d3:fb:59:c2:ae:a9:1e:41:2a:10:40:40:a9:e2:f8:
                    21:8c:bb:44:d5:d8:1f:4d:a5:b3:42:8a:2a:ff:30:
                    1e:13:00:bf:3a:35:66:c0:d9:28:a2:12:92:f5:39:
                    4e:3b:01:2c:d6:22:44:a1:ce:24:18:34:04:4e:c3:
                    19:c7:39:75:df:63:74:78:50:9e:a3:20:8c:ae:98:
                    f2:19:47:18:5f:95:7f:3f:32:95:ae:d7:e7:41:9d:
                    a9:4f:3d:76:3f:a6:34:fa:9b:b6:c1:32:69:34:bd:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0A:80:6D:CD:D9:6F:70:18:E1:77:86:88:71:74:9A:C3:F5:AB:10
            X509v3 Authority Key Identifier:
                keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:df:43:60:0c:92:06:64:a5:ae:46:fa:24:fe:72:39:98:91:
         6d:3b:73:5c:b0:eb:d7:0d:6b:b1:b5:a8:ac:ae:6a:c7:92:27:
         f0:1f:7e:5c:8b:ea:7c:b4:1c:f0:c0:ae:b2:ce:65:4f:92:87:
         0b:ec:60:b2:ec:90:45:84:cf:44:2d:d7:d3:eb:71:5c:98:2c:
         2b:76:75:34:51:39:1e:6b:ea:b8:9e:eb:1d:93:99:f4:bd:7f:
         dc:b9:21:b1:68:e9:d8:df:3f:f3:ea:be:fb:6d:39:49:fd:14:
         46:fd:a6:77:30:10:03:31:39:18:bc:2d:27:e1:21:9c:f8:cf:
         aa:7b:29:60:07:ea:eb:6d:5a:25:2a:72:03:3e:1c:a1:ee:bc:
         e4:7b:9d:8b:8e:2a:bf:6f:9b:5b:93:f0:32:d9:db:39:a2:7c:
         f8:27:01:fd:2d:10:3e:50:82:e5:8d:ae:cf:87:7e:da:36:f0:
         f2:d8:fb:de:c5:60:f7:f1:95:93:9e:85:66:50:7f:e0:80:9a:
         60:9c:f8:e7:8f:01:89:18:c3:74:67:70:c1:a9:de:1a:67:24:
         82:60:05:c6:58:68:de:2e:bf:54:71:64:d0:15:1e:7e:bf:fa:
         57:a9:2f:9f:d2:ea:9a:60:21:9e:25:d1:cd:b9:7d:22:db:40:
         38:33:08:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:50:58 2025 by rpki-client