Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
File:                     dtAtj564761YOO-TGIVJb8-vHGE.mft (raw, json)
Hash identifier:          vFnDf9SiAa/dWTubfVUYDMxwt0J+lBUJblWlf9wtA/A=
Subject key identifier:   45:CC:A0:81:FA:0D:DE:8C:8E:9D:2F:54:BC:DF:2B:73:15:A3:E2:C4
Authority key identifier: 76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61
Certificate issuer:       /CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
Certificate serial:       01976D3E5DF0E96973195BB9238286AE988F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
Manifest number:          158D
Signing time:             Sat 14 Jun 2025 07:01:33 +0000
Manifest this update:     Sat 14 Jun 2025 07:01:33 +0000
Manifest next update:     Sun 15 Jun 2025 07:01:33 +0000
Files and hashes:         1: dtAtj564761YOO-TGIVJb8-vHGE.crl (hash: Na9jIkIhO//elFhXReY4X1SZlwnccUTdvt3TetXJu9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:3e:5d:f0:e9:69:73:19:5b:b9:23:82:86:ae:98:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76d02d8f9eb8efad5838ef931885496fcfaf1c61
        Validity
            Not Before: Jun 14 07:01:33 2025 GMT
            Not After : Jun 15 07:01:33 2025 GMT
        Subject: CN=45cca081fa0dde8c8e9d2f54bcdf2b7315a3e2c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:4c:20:ce:32:14:e0:0e:a5:d1:35:9e:58:
                    fc:92:d1:02:66:5b:3c:0c:68:ca:0c:6a:b4:d9:d9:
                    31:f7:b5:46:32:0c:0e:0e:73:58:3d:0e:92:4d:01:
                    79:88:ca:d7:af:5d:b4:6a:e4:5b:28:d9:c9:bb:b9:
                    55:49:35:a7:cf:d9:b1:2f:bf:18:28:bf:28:68:ec:
                    48:67:46:c1:3c:84:82:35:6f:bc:ae:cb:5e:02:76:
                    5c:3b:c5:5b:16:7f:3f:d2:7b:2f:22:82:c4:3e:bf:
                    3b:18:9d:18:d9:72:b8:4c:0e:89:51:0e:d0:13:d4:
                    2a:2a:e3:af:98:32:8c:1e:6b:f6:22:28:2d:1a:7a:
                    c2:4f:b1:f8:b0:1c:e6:a0:47:80:52:6d:65:79:f1:
                    d1:ad:34:ff:a4:3e:5b:6b:19:1b:31:03:4b:da:a6:
                    a7:a0:1f:8c:c0:03:da:80:94:0f:54:ab:db:1c:c2:
                    d8:f0:7c:42:ec:dd:45:60:b0:8a:7d:0a:05:a4:10:
                    90:9c:30:de:b5:b1:b2:7e:e1:7c:7c:10:74:ba:94:
                    ff:18:6b:59:4e:af:42:00:7d:0a:76:d7:99:0e:23:
                    e2:b9:67:c1:4b:9e:03:c8:78:dd:20:88:8a:26:3b:
                    88:89:97:5b:e6:d5:72:45:5d:9e:f6:72:e8:33:91:
                    41:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CC:A0:81:FA:0D:DE:8C:8E:9D:2F:54:BC:DF:2B:73:15:A3:E2:C4
            X509v3 Authority Key Identifier:
                keyid:76:D0:2D:8F:9E:B8:EF:AD:58:38:EF:93:18:85:49:6F:CF:AF:1C:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtAtj564761YOO-TGIVJb8-vHGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/232763-26f8-441b-96b8-05161ff71d80/1/dtAtj564761YOO-TGIVJb8-vHGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:16:33:82:cb:65:a1:bc:2d:47:a5:6a:35:7a:14:84:61:1c:
         9f:f9:8f:13:bb:d2:44:78:24:f5:01:30:56:ad:13:7b:bc:de:
         b9:2a:23:33:de:0b:27:df:f8:7c:7f:ee:40:85:f1:08:a8:61:
         6f:a9:59:1c:29:11:fd:bf:36:f9:44:43:75:57:92:2c:ca:25:
         ed:17:a2:47:a8:52:9e:07:54:46:21:03:f5:91:3a:70:ee:33:
         ae:c5:39:65:b6:7f:fd:87:61:69:17:58:fe:ae:8c:f2:7d:c7:
         60:8b:c1:68:80:45:46:99:4f:73:22:fd:0f:0d:95:fd:9c:11:
         97:fa:99:c4:cc:37:af:cd:3a:3b:7a:ac:66:12:71:a3:1d:55:
         06:12:7b:10:7a:28:97:ef:9e:7c:13:29:76:83:fb:20:7b:7d:
         27:fc:16:bd:57:66:24:8c:1f:9a:2a:3a:13:2c:d9:25:bc:dd:
         3d:5e:cd:81:84:a1:70:4e:67:07:39:c1:e9:ab:0b:be:d7:af:
         a9:10:f8:b7:07:55:4b:f4:b9:0f:c2:ab:fe:59:c2:19:d9:06:
         a6:89:b3:02:c1:72:c1:0e:eb:1a:95:0e:d6:4b:1a:c7:1d:9b:
         37:29:c5:6d:3b:98:24:8b:2b:10:3b:d7:8b:b3:06:32:8b:97:
         3f:0d:ad:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:18:35 2025 by rpki-client