Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
File:                     dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft (raw, json)
Hash identifier:          qGaGYdkbfp9daZc7rn71Nxic/MJUQlVco0UeaKkDCi4=
Subject key identifier:   11:A7:06:1A:CB:41:B3:BC:27:43:AB:D8:A3:EB:29:78:39:0B:3F:19
Authority key identifier: 77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
Certificate issuer:       /CN=772f8e257843732ec5ed0f61a13acabee6090a96
Certificate serial:       0197470C409E018CA6FF16B48624E78B2D7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
Manifest number:          1578
Signing time:             Fri 06 Jun 2025 21:01:14 +0000
Manifest this update:     Fri 06 Jun 2025 21:01:14 +0000
Manifest next update:     Sat 07 Jun 2025 21:01:14 +0000
Files and hashes:         1: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl (hash: OkJG3RG79eMmGvFJSjHBlvxND5CpcZyXgVxEewsVp98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 21:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0c:40:9e:01:8c:a6:ff:16:b4:86:24:e7:8b:2d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772f8e257843732ec5ed0f61a13acabee6090a96
        Validity
            Not Before: Jun  6 21:01:14 2025 GMT
            Not After : Jun  7 21:01:14 2025 GMT
        Subject: CN=11a7061acb41b3bc2743abd8a3eb2978390b3f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bb:39:90:70:89:f5:cd:0a:73:e9:8e:f0:b1:
                    0d:8b:3f:53:62:3b:28:e0:a3:bd:04:ff:4e:1a:77:
                    eb:ae:f9:bb:35:a0:20:2c:7e:df:71:69:02:07:0b:
                    ca:aa:f4:41:c0:90:5e:83:52:3c:d6:4b:53:2b:4e:
                    97:68:51:f1:c0:15:06:9d:d2:f6:bd:1d:0b:c4:2d:
                    6d:8d:6f:c3:2f:ba:1f:e1:25:07:d2:ac:54:df:14:
                    67:ca:2c:0a:7e:fb:55:fe:7b:fa:ef:a0:76:1c:e3:
                    28:16:1c:fb:be:8b:05:89:97:5b:94:14:9c:c6:11:
                    3f:1f:59:6c:a9:fe:30:2b:dc:e4:b0:66:48:40:f4:
                    88:04:f4:3d:50:65:9b:9d:ed:3e:45:85:bd:5f:73:
                    0a:36:5c:1e:82:4c:69:28:ae:4c:be:7c:e4:94:51:
                    fb:6a:d1:ac:7d:63:7a:af:b7:b2:0d:ce:4b:2b:93:
                    b7:2b:3e:da:bf:90:90:a4:29:91:da:fa:af:2d:9a:
                    e8:04:ec:29:e2:39:a9:3d:64:d3:08:0b:80:0f:41:
                    00:a2:3b:51:1a:53:18:91:f5:ee:e6:38:38:db:7d:
                    ba:ee:8b:18:ea:91:bc:97:14:df:db:90:66:34:66:
                    32:7e:a9:e4:94:aa:20:2b:e2:c9:43:64:86:42:5c:
                    0b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A7:06:1A:CB:41:B3:BC:27:43:AB:D8:A3:EB:29:78:39:0B:3F:19
            X509v3 Authority Key Identifier:
                keyid:77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:69:79:0d:1d:a5:eb:60:5f:6e:29:33:b2:36:d6:e7:5d:00:
         67:e8:fd:c5:ab:3d:d5:a0:81:b9:f2:af:55:05:df:3e:f7:a6:
         1f:68:93:04:f8:45:50:4d:b7:71:81:d0:ab:c3:5f:3a:ef:84:
         9b:a5:86:0f:84:d4:c0:5e:c3:50:fd:63:ec:e1:90:44:a3:a1:
         9d:7d:06:99:8b:bf:ff:7f:2b:f1:5f:c6:f4:0f:8d:42:12:bc:
         04:a8:1e:29:47:76:c2:0f:5a:0b:c8:66:39:fc:75:cf:50:57:
         a3:ef:20:5d:a5:d8:bc:42:76:73:20:8f:d3:65:3b:cc:05:b8:
         0e:0c:3c:4e:fe:d3:17:a9:dc:cb:d9:72:c2:0b:09:28:d6:4b:
         35:c6:89:46:04:ee:ff:7e:74:23:dd:34:7e:53:2d:bb:9b:78:
         bd:7e:71:e5:87:2a:a1:60:e9:f3:fe:9c:9e:63:a7:85:42:2b:
         5c:f6:f7:26:da:49:bc:ea:37:c5:f3:35:d4:35:d7:ef:c1:a3:
         d4:0d:f9:2a:d9:78:c6:d8:c2:c8:b5:26:7a:6e:0c:b6:b8:09:
         4a:2a:01:75:c8:d8:c3:5c:03:89:53:2e:0d:2a:ba:4e:ac:7d:
         32:0b:6c:7d:b4:1f:6d:ff:74:9f:72:3b:02:02:27:27:79:d6:
         60:e5:64:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:04:55 2025 by rpki-client