Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
File:                     DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json)
Hash identifier:          cWD//ygA93zr54q7mFCG85PxaqjuL5Fgrf3tju/BhBw=
Subject key identifier:   99:76:B1:0A:4F:13:57:2B:43:FC:D7:A9:0E:41:FA:2C:F0:4C:28:95
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Certificate issuer:       /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial:       01974FD797C6FAD2E3510572DE9589EBD943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
Manifest number:          1580
Signing time:             Sun 08 Jun 2025 14:00:18 +0000
Manifest this update:     Sun 08 Jun 2025 14:00:18 +0000
Manifest next update:     Mon 09 Jun 2025 14:00:18 +0000
Files and hashes:         1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: PEu8dfO02oAMtQ0EiliG7bucQduE2IkSiZ2Zw1geXkA=)
                          2: V9zLJ_snXWssBPY1Rmgu3ZTD-rU.roa (hash: hUff0lfnMQTwyppmA7CbM6Vyj9Moq1TvnfUvdLLp36w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:d7:97:c6:fa:d2:e3:51:05:72:de:95:89:eb:d9:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
        Validity
            Not Before: Jun  8 14:00:18 2025 GMT
            Not After : Jun  9 14:00:18 2025 GMT
        Subject: CN=9976b10a4f13572b43fcd7a90e41fa2cf04c2895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:e2:0b:14:a5:38:7d:b7:d8:33:7e:39:f6:
                    12:c3:1a:74:e7:f7:1a:e5:35:09:b0:6a:7d:a9:34:
                    7b:10:e7:2f:e3:69:3a:36:19:98:21:0c:c8:82:ab:
                    d0:8e:28:86:33:1a:d7:0f:87:c8:34:14:90:59:b8:
                    2e:83:03:66:d7:1d:8d:9a:85:32:0b:9f:99:f5:58:
                    86:4b:3f:f7:b4:00:6f:dd:8d:86:10:c4:3e:95:f9:
                    eb:de:e1:18:98:ea:41:47:5d:3b:d8:f8:d4:25:6a:
                    6d:33:9a:fc:c2:25:c6:be:9c:23:87:cf:bd:a3:ee:
                    db:74:0f:31:1e:15:05:e1:7f:b7:bd:08:bf:e3:ed:
                    11:91:50:47:5e:40:43:84:d0:ca:93:8f:f6:39:1a:
                    87:1d:54:50:3e:a7:af:8e:3d:b9:ce:9f:54:77:12:
                    9b:85:61:26:d4:6b:68:3d:c4:6c:ca:2d:c1:01:a0:
                    ab:c6:32:f1:d5:ca:10:5b:11:dc:ef:69:48:e7:79:
                    14:db:98:2a:27:24:bc:d7:0c:52:0d:74:2d:27:71:
                    0a:56:9b:c7:03:57:85:59:b0:77:8f:5b:f1:67:6f:
                    63:b2:a9:e6:3c:d0:2a:e8:de:9d:9f:38:2b:1e:1e:
                    25:19:59:3d:a9:c7:58:a7:2c:84:1a:ce:b3:31:2e:
                    11:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:76:B1:0A:4F:13:57:2B:43:FC:D7:A9:0E:41:FA:2C:F0:4C:28:95
            X509v3 Authority Key Identifier:
                keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4d:a8:a8:5d:2c:65:1c:c6:fd:d0:ab:70:96:88:ac:10:30:
         3d:ee:73:02:8e:51:07:70:6d:56:ba:b7:d6:84:03:91:da:ba:
         7b:6e:a4:a3:e8:9d:72:f2:8e:c7:9e:67:17:40:7e:9a:e5:c2:
         66:e7:36:ff:7b:5e:cd:77:11:eb:53:4e:d6:14:5c:8e:0e:12:
         c6:4f:5f:01:21:ac:31:1f:d0:a5:0e:4d:53:90:f9:2e:ff:79:
         f3:9e:bb:d8:b7:80:17:a4:1e:83:28:f9:b7:97:19:6a:c5:e3:
         47:99:f1:e4:4d:31:f0:79:8e:a4:9e:dc:64:7e:4d:a4:1a:90:
         7d:3f:62:04:ed:9d:87:e1:40:12:cd:ff:5e:1f:b5:d8:41:67:
         eb:e2:f3:4a:be:14:4b:3e:dc:24:be:ab:ef:89:7c:46:3a:96:
         a9:9f:f0:62:aa:00:de:26:2c:42:af:cb:18:fb:0d:c8:b4:95:
         93:fd:cf:30:5d:cf:d9:70:8c:b2:aa:27:2b:54:91:9c:ab:96:
         d7:e7:7f:1d:ae:3d:bb:82:36:65:1c:ae:c0:b6:89:3f:f8:40:
         eb:2f:cc:c1:b4:dc:75:02:28:e0:f3:36:fc:42:4e:d4:37:ac:
         ce:34:58:3e:a6:3b:c4:81:9a:47:fd:66:b8:3f:c9:2e:05:da:
         dd:47:6c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:39:08 2025 by rpki-client