Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
File:                     DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json)
Hash identifier:          s3XW6KNOti+OmT2P7LaOl00dYCzkq4T8G62c+2QF5Zw=
Subject key identifier:   22:25:C3:4E:96:2E:BF:00:39:9B:A8:4E:27:BE:57:4F:5E:C8:7E:AB
Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
Certificate issuer:       /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Certificate serial:       01974779CF609A5B8B6F7E40591266CB516B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
Manifest number:          04E5
Signing time:             Fri 06 Jun 2025 23:00:54 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:54 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:54 +0000
Files and hashes:         1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: EOerf7gIYT5Gox9iXBb4sfPfjuGKfQhYwbcHZIDDigk=)
                          2: tDD9B-lEcyqNvoNAET5cpeS9CP4.roa (hash: rKwo3X/3AKqFNwDQChvvjw66ToIOE4+PnSG73JsvhIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:cf:60:9a:5b:8b:6f:7e:40:59:12:66:cb:51:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
        Validity
            Not Before: Jun  6 23:00:54 2025 GMT
            Not After : Jun  7 23:00:54 2025 GMT
        Subject: CN=2225c34e962ebf00399ba84e27be574f5ec87eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:7c:0f:ac:79:20:5f:6d:a8:26:fd:4a:6a:
                    ef:eb:85:1d:d4:97:40:54:21:77:ce:35:66:1b:ee:
                    61:a1:e5:7d:59:68:8a:37:c4:8e:3b:85:31:7e:dc:
                    07:80:19:12:0d:e0:f4:3e:0a:48:aa:72:ba:42:cb:
                    9d:f4:a6:4a:59:1a:c8:e7:4b:bd:dc:b3:9a:04:33:
                    fd:80:68:ee:c9:2a:ca:c9:0a:21:e9:d0:d6:d6:ce:
                    1d:64:be:24:f8:30:4d:b5:2f:f2:b6:01:3e:10:a5:
                    aa:46:e9:c3:14:56:34:eb:75:1a:23:00:92:2b:45:
                    6d:0f:14:ae:8a:51:4a:8a:a5:53:6b:f8:d5:a1:64:
                    6c:69:8a:2c:ee:ea:ef:a1:0c:fe:f4:ff:11:37:28:
                    1d:13:88:29:1f:a9:e8:90:84:5e:2b:54:17:e4:ca:
                    3a:34:83:da:90:f3:b9:0b:97:9e:81:3b:8b:0a:83:
                    3e:34:ad:84:8a:d6:f6:96:b4:46:72:88:92:e7:04:
                    13:17:75:7c:7c:8a:b4:42:45:61:31:6e:17:df:d4:
                    1f:4b:d0:1a:77:e8:ed:7c:7c:25:08:e9:24:7a:d7:
                    ce:f0:03:de:22:57:3a:c9:3a:6b:cd:5e:f1:20:2f:
                    c6:b7:8d:78:75:9b:56:91:e0:30:18:71:8e:93:f4:
                    25:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:25:C3:4E:96:2E:BF:00:39:9B:A8:4E:27:BE:57:4F:5E:C8:7E:AB
            X509v3 Authority Key Identifier:
                keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a4:27:5d:e8:e0:7f:77:06:dd:2d:5d:38:1d:c0:65:a5:23:
         3e:91:29:04:e4:52:0b:3d:c4:91:99:4a:9b:9d:21:7a:d7:1c:
         5f:0d:3a:f9:a9:d8:3b:d0:90:ff:43:5e:3b:15:57:82:19:0f:
         e6:34:84:1e:a3:30:16:7b:bc:db:6c:0e:6f:b3:b3:d0:f7:3d:
         7a:cd:f1:cf:4d:6a:c6:6f:23:4f:a5:68:5b:88:e4:95:14:2d:
         65:ab:61:ea:90:49:25:35:52:62:3a:f5:ba:77:b0:4d:28:4a:
         8c:ed:2c:ce:97:d2:c7:f7:59:f0:ee:73:c5:be:8a:d0:b4:26:
         07:c9:4d:53:8d:4e:62:74:1c:b7:b8:3a:44:95:39:70:b5:54:
         b3:b9:3f:a3:f7:47:b7:fd:75:b3:84:f2:0b:eb:bc:10:38:a8:
         72:6b:76:70:a7:6f:60:e9:fc:5f:36:78:19:52:28:4e:b5:15:
         81:db:ad:89:f3:85:9b:ee:8b:9b:c5:08:ea:a8:c3:30:62:3d:
         c8:ed:57:dd:6f:62:3d:56:cf:ab:43:ed:01:38:92:e8:c0:f2:
         ea:64:4a:b7:50:25:0c:16:c0:2e:51:38:d8:df:7e:de:5e:d8:
         24:f6:62:7d:47:52:c6:96:ff:18:83:45:21:c0:a9:0c:7b:ab:
         ba:d0:d7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:37:33 2025 by rpki-client