Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
File:                     dy-5SkWdO3XOi_uPErTPcZgsY0M.mft (raw, json)
Hash identifier:          020f3BeG2okXvmJ7FHKuLMR7M/qmELJljIQK9VCuHsk=
Subject key identifier:   79:8D:0D:5A:41:1F:58:41:78:B1:6E:44:B7:1C:CB:06:38:B6:87:BC
Authority key identifier: 77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
Certificate issuer:       /CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Certificate serial:       0197832074E64FDF66E720169A58969832A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
Manifest number:          011E
Signing time:             Wed 18 Jun 2025 13:00:31 +0000
Manifest this update:     Wed 18 Jun 2025 13:00:31 +0000
Manifest next update:     Thu 19 Jun 2025 13:00:31 +0000
Files and hashes:         1: IRnn9ORtzivUx2TGUOWiZn2YmA8.roa (hash: Xk0n7E/wui7qwpm2gqzzeQ3XkyXcylQYY0mSQoyL7gs=)
                          2: dy-5SkWdO3XOi_uPErTPcZgsY0M.crl (hash: FL46tZ88hl4FylPm64HONymi0cLSbbNm9Vx0Ceub8Fw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:83:20:74:e6:4f:df:66:e7:20:16:9a:58:96:98:32:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
        Validity
            Not Before: Jun 18 13:00:31 2025 GMT
            Not After : Jun 19 13:00:31 2025 GMT
        Subject: CN=798d0d5a411f584178b16e44b71ccb0638b687bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:23:86:2c:0f:c0:20:c0:84:c4:d4:db:fa:
                    6f:64:75:94:c1:0a:49:94:69:eb:41:e8:9d:ce:71:
                    21:b0:60:cc:34:41:5e:70:48:73:92:a4:35:b6:1b:
                    b4:1d:38:fc:45:ca:20:73:5e:ca:8f:da:92:27:a1:
                    09:88:a8:8c:6a:58:d6:4e:ae:9b:2c:32:ee:d2:3e:
                    a0:a1:64:fd:a5:6f:63:6c:30:3c:9b:d2:2f:1f:d5:
                    88:30:49:b1:06:2e:45:1b:c8:8e:4d:b7:48:fc:a0:
                    23:5a:aa:8c:83:bb:9b:d0:a8:41:65:91:18:7a:b4:
                    3b:b2:37:99:26:c1:41:44:9b:25:4a:84:9b:2d:7e:
                    0b:77:99:1e:20:d0:a3:a7:f5:ba:18:67:ce:38:c2:
                    b7:57:7d:11:93:71:9d:22:3d:94:49:63:88:fb:b0:
                    d7:28:87:ff:a4:d4:f9:74:1f:cb:c8:ef:9e:55:18:
                    59:a8:89:1d:f3:18:12:93:34:a4:b9:50:34:9a:96:
                    36:02:e2:ed:5b:78:d6:8b:43:61:3e:48:6a:e9:06:
                    65:69:b8:d6:68:28:15:07:23:a0:04:b4:a5:1d:43:
                    6e:92:dc:fe:1e:a5:8f:da:0a:76:e3:bb:fd:33:e0:
                    e7:70:a4:4f:39:4f:8d:69:5a:1e:9a:5c:0c:10:25:
                    6d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8D:0D:5A:41:1F:58:41:78:B1:6E:44:B7:1C:CB:06:38:B6:87:BC
            X509v3 Authority Key Identifier:
                keyid:77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:bd:7f:2d:79:1c:97:8c:fe:16:07:2a:bf:38:9d:f2:0c:23:
         cf:b4:21:3c:e1:29:07:f1:c8:8a:b1:f1:9c:16:7a:ba:72:21:
         83:4b:6d:82:6b:c9:cf:e5:a9:09:49:ed:08:25:92:fd:39:25:
         3c:c8:17:88:78:c0:cd:db:22:b1:47:a5:be:e3:8d:d7:85:84:
         46:5c:9b:d2:2c:92:d5:7e:b8:67:12:e6:e1:5a:44:db:b2:b5:
         7e:9e:e4:56:6c:35:80:fe:7c:06:72:fd:db:53:4e:75:75:b8:
         8d:86:88:6f:a6:53:59:18:e1:e7:16:23:cf:27:2c:f0:f3:99:
         31:c1:99:dd:08:19:2d:78:13:d0:c9:fe:af:20:a5:98:a1:b5:
         81:19:3d:70:11:5e:ad:98:10:22:ce:d0:66:97:cb:be:e6:56:
         2a:16:4d:cf:a5:04:e1:70:f8:05:ee:9c:e6:2d:8c:dd:b0:85:
         c8:e8:5e:4b:cb:f9:0f:5d:f4:6b:20:98:9f:26:2e:24:55:52:
         cc:04:17:d5:07:dd:0b:61:a7:c6:57:c2:6a:be:20:5c:eb:18:
         62:49:13:cd:30:77:88:d0:d9:9c:1e:42:86:a1:cb:0b:d2:16:
         54:38:63:b2:e6:2b:a3:6c:e9:3f:25:6c:e1:a8:18:08:bb:5b:
         6f:6d:43:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:11:51 2025 by rpki-client