Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
File:                     Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json)
Hash identifier:          HpJHthNurhWNNcmdt3/kkGqj5FuPMe2LQUATeJ2OGZ0=
Subject key identifier:   0D:6B:7B:55:91:66:5A:CE:FE:01:66:4B:B3:CF:06:48:58:4C:EF:4C
Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C
Certificate issuer:       /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
Certificate serial:       01975BDBC2B3113A0A049363864F8E600CAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
Manifest number:          1585
Signing time:             Tue 10 Jun 2025 22:00:18 +0000
Manifest this update:     Tue 10 Jun 2025 22:00:18 +0000
Manifest next update:     Wed 11 Jun 2025 22:00:18 +0000
Files and hashes:         1: 8GPy1nq-d8qyd5DzcEoD7_wmnRk.roa (hash: VU25KKsH1DHg8pytMPBtSMEdGMuo9BZsAecAtygfZnk=)
                          2: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: PRYKXiWTjQa7gqL6G4vZckeGxCsJW2yR1qRTnp1RGQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:db:c2:b3:11:3a:0a:04:93:63:86:4f:8e:60:0c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c
        Validity
            Not Before: Jun 10 22:00:18 2025 GMT
            Not After : Jun 11 22:00:18 2025 GMT
        Subject: CN=0d6b7b5591665acefe01664bb3cf0648584cef4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:48:44:dd:be:2e:9c:34:8c:1f:25:eb:1b:4c:
                    d3:7c:c2:13:74:c2:9d:c0:37:61:2f:cf:c3:a1:ba:
                    8b:22:dc:35:a7:75:2a:8f:d4:55:07:d6:55:b5:1e:
                    f0:d0:7e:80:c5:bf:0f:ab:0b:2f:88:9a:34:a6:c6:
                    83:d2:75:cd:08:b9:9f:76:19:56:f8:ff:8e:6e:96:
                    8c:74:76:de:93:67:3c:a7:92:2a:a6:9e:a1:26:fc:
                    3e:55:c8:80:32:70:d7:7f:bc:8e:c2:e8:bc:1d:0c:
                    5d:2c:84:b7:ca:9e:01:2d:fb:41:31:b8:02:41:96:
                    fa:7c:da:39:ca:51:13:83:a5:a2:0b:27:a8:ff:70:
                    d2:16:b4:ef:12:98:40:28:f0:7b:43:0b:8f:8f:37:
                    a8:59:15:2e:ee:5a:0b:34:9b:e6:57:b0:ca:98:7b:
                    30:23:9e:0f:1a:9d:2c:7f:8c:05:68:5f:34:76:11:
                    34:a5:3f:3b:e4:04:e0:1c:ab:e5:f5:53:10:1b:5f:
                    8e:71:6f:1d:e6:6f:6e:59:2c:7d:0c:de:40:4b:31:
                    a6:af:1b:0c:ef:11:d9:ae:ec:58:9c:e2:40:de:90:
                    45:a0:e2:c1:6e:f7:ff:12:74:b7:e0:3e:90:4b:e8:
                    cb:a1:1b:fe:6d:24:f4:bb:31:e4:67:bf:1c:4c:2d:
                    fc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6B:7B:55:91:66:5A:CE:FE:01:66:4B:B3:CF:06:48:58:4C:EF:4C
            X509v3 Authority Key Identifier:
                keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8f:dd:85:eb:b6:f5:3e:15:f8:06:cc:b1:76:af:ed:8b:07:
         a7:93:e5:66:f0:d8:4c:af:ba:af:c1:4c:0e:13:cd:85:2d:f1:
         f5:8b:3f:59:57:80:96:85:a2:32:3f:dd:5c:8c:b3:e0:a7:2e:
         07:e6:62:4e:06:f0:96:b1:d2:50:05:87:b9:86:9d:f7:ac:93:
         2a:78:06:fa:af:34:50:98:b2:2b:b6:fd:9c:5e:84:7e:39:34:
         12:21:b8:0b:23:04:bb:2f:1e:cb:f7:ac:b0:d3:b3:6b:19:68:
         7d:05:bc:f7:31:1b:0b:6b:51:39:7f:86:44:5d:94:c5:9d:78:
         4c:a2:6a:ea:5c:48:2a:c2:2e:5d:6b:ac:5e:87:16:b7:32:c9:
         83:56:56:a6:51:24:71:9a:7c:0f:76:32:94:a6:d7:71:f9:c6:
         e3:a1:83:14:8f:17:40:8c:f0:cb:56:49:62:71:fb:a0:54:c0:
         93:2b:fe:73:57:79:87:92:ce:7d:83:a6:57:4f:ca:c6:ab:bf:
         0f:4e:39:55:af:33:a4:47:97:86:44:dc:2c:1e:6e:32:36:f3:
         71:7a:bb:ed:eb:02:0f:82:11:02:36:11:e5:18:7b:0b:06:fa:
         a7:ee:26:6a:2d:63:ce:d1:a3:8a:87:9b:32:43:c0:79:66:2e:
         d9:5b:5a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:33:30 2025 by rpki-client