Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
File:                     DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json)
Hash identifier:          UXF3hLIlqA45R5AvPuBGI3pQu7iRSLPkOB74NCBOHfI=
Subject key identifier:   5B:C6:49:6D:BC:1F:B9:13:25:0D:F8:8E:19:AB:1F:7F:A4:8A:77:6A
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Certificate issuer:       /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial:       01976BF461EABD59AA6A83D846D157683D2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
Manifest number:          66
Signing time:             Sat 14 Jun 2025 01:01:07 +0000
Manifest this update:     Sat 14 Jun 2025 01:01:07 +0000
Manifest next update:     Sun 15 Jun 2025 01:01:07 +0000
Files and hashes:         1: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: xhBEWjWMyY0VvkfZW9BQmnWyX/az0D5gZId7S3DKCoQ=)
                          2: ibG8s-uNg8iW3EcdenBVN0a0GOA.roa (hash: cMNTG3zKGDqXo0eIkSYjSVFaWoXZgu+y014lNkKw6CE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:61:ea:bd:59:aa:6a:83:d8:46:d1:57:68:3d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
        Validity
            Not Before: Jun 14 01:01:07 2025 GMT
            Not After : Jun 15 01:01:07 2025 GMT
        Subject: CN=5bc6496dbc1fb913250df88e19ab1f7fa48a776a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fa:e0:04:48:9f:72:50:f7:42:a7:87:35:29:
                    0c:d3:78:ec:9a:1d:12:39:64:8a:8b:2a:4a:fe:63:
                    ef:59:4f:c2:18:59:3e:bb:7a:c7:23:2c:e0:8e:24:
                    db:c5:1b:89:69:4e:20:1e:05:ee:73:97:cb:25:9c:
                    a1:48:78:ae:76:92:ab:05:92:4b:2d:83:f8:05:48:
                    5a:9a:ad:5d:19:e9:fd:e2:4d:a0:14:05:dd:7a:4a:
                    e6:ed:84:bc:3b:e5:01:42:af:de:64:83:ad:28:9f:
                    3d:cf:cd:92:68:66:d2:93:79:85:14:b4:f0:90:60:
                    e8:c9:d6:8d:a3:3c:49:61:e0:85:3b:b1:75:a5:2d:
                    82:cf:f5:cc:71:88:a5:e6:70:4d:00:ee:d6:bc:85:
                    12:f4:5c:28:5a:61:46:e6:e4:31:7e:05:a4:a2:92:
                    5b:60:db:68:5b:d0:09:57:0a:ec:5a:af:5e:3d:e8:
                    f4:77:b9:21:11:33:bc:af:21:d9:0a:a0:93:74:9e:
                    11:8a:83:c4:47:32:7c:65:a8:d9:4f:a6:19:eb:95:
                    2a:3c:39:a9:7f:9d:6d:e5:10:97:ab:55:21:41:f7:
                    09:ba:0c:1f:bb:4a:a5:c4:3a:9d:61:c4:fe:e1:67:
                    6f:b3:f8:d1:c6:12:96:94:4b:66:d4:ca:d0:05:a9:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C6:49:6D:BC:1F:B9:13:25:0D:F8:8E:19:AB:1F:7F:A4:8A:77:6A
            X509v3 Authority Key Identifier:
                keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:62:e1:d6:43:78:7b:06:9c:b0:0b:70:fb:ef:2c:e3:58:35:
         35:e7:fe:50:79:56:bc:e8:58:d3:c6:16:24:a6:4d:c6:79:f7:
         aa:56:3d:14:ac:21:e4:e5:cf:31:83:f2:61:d4:3e:ce:d6:f0:
         9f:26:34:64:34:1e:4f:14:17:c0:ce:08:e7:f2:4e:d6:30:a7:
         db:67:77:07:20:d7:a6:d1:2b:81:de:36:db:e1:87:2d:92:03:
         d1:5e:13:09:b3:41:3f:f8:4d:7e:a6:c1:c3:b3:2d:db:8c:7c:
         0a:52:9d:65:2d:37:c1:73:b7:e2:4b:88:8e:9d:0f:e9:a6:d4:
         84:0f:87:0f:5b:1d:c2:46:4e:26:0a:32:46:dc:85:15:fc:2f:
         ef:e9:d2:ef:8c:8d:47:d6:55:66:39:75:e1:25:b8:0d:08:3b:
         b4:18:cc:1d:b1:fb:16:26:83:97:9f:9c:3f:fd:8f:00:c8:31:
         aa:65:24:17:18:b8:95:d8:b7:55:36:7d:9d:d9:d9:61:5a:15:
         81:3b:35:45:d2:ef:a7:fc:3b:cd:1a:59:cf:d1:90:d3:88:8e:
         85:2f:e8:73:be:30:5f:32:66:b2:6c:5b:07:5a:d4:91:ef:c8:
         92:8d:37:5f:fc:5e:7e:dd:fb:36:7b:96:92:1a:56:dc:95:e0:
         5d:85:9b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:35:35 2025 by rpki-client