Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
File:                     0YIiY6hwfHbz2ztr5xIiacgnrlU.mft (raw, json)
Hash identifier:          M9jYwv7V0BP2y98Ciznpko9M1XKGia8LyI1NYKxUz/c=
Subject key identifier:   FC:84:B3:D9:CA:CE:63:3D:C6:50:5C:5A:0D:5F:97:11:17:4B:68:90
Authority key identifier: D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55
Certificate issuer:       /CN=d1822263a8707c76f3db3b6be7122269c827ae55
Certificate serial:       01976D3DD65BC0354973C845F2D974C17F06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
Manifest number:          0B13
Signing time:             Sat 14 Jun 2025 07:00:58 +0000
Manifest this update:     Sat 14 Jun 2025 07:00:58 +0000
Manifest next update:     Sun 15 Jun 2025 07:00:58 +0000
Files and hashes:         1: 0YIiY6hwfHbz2ztr5xIiacgnrlU.crl (hash: wfN6CAzKjk4x77f5WZx0juFCLlqTukB5Z+9O0CRlApc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3d:d6:5b:c0:35:49:73:c8:45:f2:d9:74:c1:7f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1822263a8707c76f3db3b6be7122269c827ae55
        Validity
            Not Before: Jun 14 07:00:58 2025 GMT
            Not After : Jun 15 07:00:58 2025 GMT
        Subject: CN=fc84b3d9cace633dc6505c5a0d5f9711174b6890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:97:ea:ee:55:88:c2:b8:2f:d0:12:00:9b:
                    0c:83:95:90:1b:de:a7:5d:05:27:5f:61:0e:0c:e0:
                    0f:2b:5e:99:8b:3a:08:11:d3:ba:58:91:51:b8:1c:
                    f7:db:fb:10:19:d9:a7:45:48:90:63:27:4d:97:00:
                    ce:8e:9f:a4:bf:9c:13:46:ed:07:95:fd:23:52:23:
                    58:7e:46:b5:c1:86:90:e6:fd:7d:27:54:e2:8d:ee:
                    95:b3:31:fc:ef:fa:18:7a:d0:9d:9f:9c:4e:ac:30:
                    f4:3b:cb:e2:29:32:ff:53:8f:c0:f4:1d:b2:53:7b:
                    6a:8e:97:8b:bb:e7:4d:b9:50:f4:1a:53:b4:7f:b1:
                    7c:2f:6d:ab:ae:5b:fd:69:84:ff:4a:d0:94:38:d8:
                    07:86:13:1e:bf:40:f5:c4:93:eb:53:e4:6c:3a:bc:
                    37:92:96:ab:b1:d9:51:6b:f9:83:49:38:11:68:8f:
                    a1:8e:38:42:11:37:cc:45:f3:6d:f2:6b:3a:d3:f6:
                    8d:67:56:63:e1:f5:73:54:fe:21:ad:ef:fd:32:be:
                    76:5c:fe:aa:ee:c4:5e:ba:82:e4:9c:f2:d7:42:11:
                    31:e6:a9:dc:c8:dd:9e:9e:a6:02:c7:1d:f5:03:e4:
                    6b:3f:fd:e9:93:62:05:71:02:17:27:fc:33:b1:29:
                    33:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:84:B3:D9:CA:CE:63:3D:C6:50:5C:5A:0D:5F:97:11:17:4B:68:90
            X509v3 Authority Key Identifier:
                keyid:D1:82:22:63:A8:70:7C:76:F3:DB:3B:6B:E7:12:22:69:C8:27:AE:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YIiY6hwfHbz2ztr5xIiacgnrlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/15f247-826b-43a8-a422-4a7904106e3b/1/0YIiY6hwfHbz2ztr5xIiacgnrlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f7:16:b2:5f:17:f5:4f:ef:42:99:1d:8f:20:30:8c:67:08:
         c3:5f:6e:b4:63:fd:4f:c9:a1:78:4e:e6:f9:d3:2d:61:e8:03:
         23:e4:b7:91:0e:b3:d3:3f:53:a8:93:68:8a:40:dd:ec:09:4a:
         51:fd:d2:60:37:a0:34:bc:31:f8:66:aa:24:ae:7f:ce:93:43:
         7d:1e:81:73:cd:60:f7:2f:31:76:de:df:4f:8d:7c:4d:6e:fd:
         86:41:db:09:bb:ef:c9:d1:fb:6c:e4:fb:2a:aa:7d:a5:8b:7b:
         d7:24:d7:37:07:14:95:3a:2f:1c:c3:6c:ee:1b:bb:a6:78:5c:
         e9:f6:08:4a:c0:4c:bf:86:b9:d9:51:93:31:86:23:2b:9c:3a:
         2c:1d:50:7a:e1:bb:ff:7c:bd:02:b8:54:86:47:5e:af:33:fe:
         6e:14:8b:32:07:96:42:fd:91:6f:d0:4f:70:09:b9:f8:c1:19:
         e5:16:1a:bd:5e:05:c8:ea:11:b4:87:a8:44:e1:f7:69:60:44:
         3a:aa:d5:4f:cc:e8:0d:49:5b:ae:df:bd:6a:78:e2:c0:70:a8:
         73:c3:13:c7:39:1f:bd:76:d4:97:cd:ba:53:19:98:5c:b2:5e:
         d7:90:76:be:40:01:cc:8d:11:50:b9:f5:31:ee:51:41:1f:e2:
         33:fb:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:15 2025 by rpki-client