Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
File:                     Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft (raw, json)
Hash identifier:          15qUFbnq3J845ozDTHSjyUgAv5ZHJjO9g2niZj1yICg=
Subject key identifier:   DD:8A:90:28:E1:13:73:ED:78:3D:97:57:51:76:88:02:F4:C1:FA:04
Authority key identifier: 0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
Certificate issuer:       /CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Certificate serial:       01975046A73761469533F75C73EB83411CCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
Manifest number:          13BD
Signing time:             Sun 08 Jun 2025 16:01:36 +0000
Manifest this update:     Sun 08 Jun 2025 16:01:36 +0000
Manifest next update:     Mon 09 Jun 2025 16:01:36 +0000
Files and hashes:         1: Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl (hash: +BRsaXf4LsmwOtj8tE8+sv7ivW/1QZ66TRfEi3qqH3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 16:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:46:a7:37:61:46:95:33:f7:5c:73:eb:83:41:1c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
        Validity
            Not Before: Jun  8 16:01:36 2025 GMT
            Not After : Jun  9 16:01:36 2025 GMT
        Subject: CN=dd8a9028e11373ed783d975751768802f4c1fa04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4c:58:f9:72:90:1c:3c:68:9d:e4:ad:ca:67:
                    32:cb:55:ca:dd:30:30:d4:1d:89:a8:09:b3:90:bf:
                    73:ce:4c:bd:bc:34:c6:75:aa:6f:4c:12:52:45:35:
                    3f:0e:56:07:27:ff:10:d5:ac:05:27:75:ea:da:2f:
                    c9:08:f4:d5:ef:83:96:e4:03:ed:d4:63:e5:6b:36:
                    4d:c6:3e:f4:e3:f9:a9:ae:71:db:eb:ee:7b:d8:6e:
                    a4:f0:74:f2:c2:97:c9:2b:46:ce:05:1b:7c:b7:d3:
                    c8:28:dc:84:ba:af:4c:0f:f0:31:45:43:2a:4f:ba:
                    3e:66:23:b8:86:24:e8:83:0b:ff:fe:08:1d:9f:d9:
                    f8:fc:4d:28:82:98:59:d6:5d:50:2e:14:c4:16:66:
                    0b:65:af:73:bc:35:10:c5:e1:6a:57:49:64:1b:e2:
                    ac:03:3a:c6:a1:db:60:f0:f6:b2:b8:57:d2:d4:cc:
                    03:b6:04:15:00:44:58:74:ff:5a:30:1f:82:4d:6f:
                    7f:fe:e3:6c:ec:18:13:32:f8:29:69:79:9e:db:c9:
                    4e:df:40:a1:fc:b9:e0:e3:8b:e5:1f:77:37:9a:1e:
                    f7:ba:7c:ce:59:60:ce:7c:98:e2:50:9c:82:b3:b5:
                    94:87:0b:16:57:dc:1b:29:07:46:01:38:13:40:e0:
                    b3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8A:90:28:E1:13:73:ED:78:3D:97:57:51:76:88:02:F4:C1:FA:04
            X509v3 Authority Key Identifier:
                keyid:0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:10:7c:53:f4:ef:cd:e9:e9:c9:0e:f6:80:04:9b:32:11:77:
         03:9e:b9:74:74:64:e0:da:7d:79:2a:c1:ab:62:c7:09:6b:20:
         78:77:e8:61:3d:e9:f0:ad:e1:23:b7:ed:ab:3f:dc:0a:a6:71:
         64:6a:d3:2f:1a:32:4c:30:63:61:da:5f:f0:c5:f7:48:04:54:
         a7:8e:46:06:cd:7f:54:1c:f7:8b:c5:ea:dc:3c:9d:05:45:7f:
         b4:da:e9:99:96:a0:6d:1a:25:dd:e5:92:4b:37:88:e7:8e:b2:
         40:d4:f0:6d:4c:56:99:94:34:d5:71:2d:5d:f4:43:ca:f0:11:
         44:4d:34:48:83:68:33:8f:e4:4b:58:4f:ed:3a:c4:f1:70:88:
         c2:e5:5c:29:99:35:d8:1f:09:c9:2e:cb:67:86:17:8a:ff:aa:
         11:b3:72:3b:24:8b:91:47:f8:83:82:c3:bc:dc:e7:22:58:49:
         42:95:1a:63:15:23:a9:37:f5:36:b3:94:71:d4:f1:8d:05:cd:
         57:a3:d1:c8:7e:76:96:6f:c7:f7:d8:02:ee:53:14:45:18:1f:
         17:d0:20:41:1e:82:58:5b:7f:5f:0a:08:00:26:b8:dc:97:a8:
         0d:b9:39:a4:18:e8:c7:bc:eb:b1:54:98:9c:38:53:44:46:a6:
         e7:76:58:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:11:41 2025 by rpki-client