Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
File:                     dPYRYnGtLREZYKLZYaqcFi-VgKY.mft (raw, json)
Hash identifier:          ceKoz+0lmlfLvnGOkiKf80F+qmDf80cFT4d02MkoZdU=
Subject key identifier:   12:47:26:4D:7E:D1:8C:AC:30:2E:77:CB:98:44:51:D3:2D:FB:09:0A
Authority key identifier: 74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6
Certificate issuer:       /CN=74f6116271ad2d111960a2d961aa9c162f9580a6
Certificate serial:       0197488C366E95B5001152254C64C7498D9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
Manifest number:          0F74
Signing time:             Sat 07 Jun 2025 04:00:37 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:37 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:37 +0000
Files and hashes:         1: dPYRYnGtLREZYKLZYaqcFi-VgKY.crl (hash: 4KcJ9VatCjsWkqJ3Ry2q1/kAU99WA0hTU6CwLJdmD3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:36:6e:95:b5:00:11:52:25:4c:64:c7:49:8d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f6116271ad2d111960a2d961aa9c162f9580a6
        Validity
            Not Before: Jun  7 04:00:37 2025 GMT
            Not After : Jun  8 04:00:37 2025 GMT
        Subject: CN=1247264d7ed18cac302e77cb984451d32dfb090a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:83:47:13:3b:ca:a4:de:f4:ae:f6:f4:04:fe:
                    9d:52:d9:62:4b:e3:d9:34:0a:9c:77:47:a3:95:18:
                    c6:14:dc:43:fa:5d:89:9e:89:6f:b4:eb:cf:e6:b8:
                    8d:70:92:1e:c4:7a:97:ab:04:20:0f:18:2d:b4:59:
                    9d:ca:8a:8b:d5:84:58:d3:80:55:b2:3f:1b:14:47:
                    84:38:c9:77:3b:85:0c:f3:a8:ff:1d:23:7c:f3:25:
                    70:06:18:ce:04:85:71:0f:fa:f3:ca:7c:1c:e3:48:
                    db:00:08:d9:cf:2b:89:27:00:61:98:43:84:74:37:
                    ff:20:96:df:5b:6c:f4:b4:f5:cd:3d:fe:2b:7c:27:
                    c6:39:25:b5:8b:26:2e:d7:cf:02:fb:b4:c9:b6:36:
                    79:62:75:e0:16:2f:8b:c7:ed:33:ef:18:1f:8c:2e:
                    e5:53:d8:64:2c:79:c5:c9:3d:ca:d5:21:d3:5f:73:
                    a5:42:5c:16:f1:a9:d0:5e:c3:20:d5:0a:fe:1e:03:
                    10:9c:f8:3d:14:86:78:f0:50:56:a5:1d:08:97:5f:
                    23:7e:ee:30:79:4a:73:b4:c0:07:d3:d4:77:ac:1f:
                    01:4b:63:72:50:8d:bd:e0:51:b3:39:5a:6f:8c:e5:
                    26:be:2a:ac:ec:c4:bd:b0:cd:94:24:96:ee:8f:6a:
                    a3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:47:26:4D:7E:D1:8C:AC:30:2E:77:CB:98:44:51:D3:2D:FB:09:0A
            X509v3 Authority Key Identifier:
                keyid:74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a1:b4:18:45:20:45:61:30:d4:9c:9b:84:63:06:f3:5a:7b:
         98:83:36:9f:d1:d2:62:b9:f9:84:1f:6f:7f:40:8a:e9:30:2b:
         ed:c9:20:4a:d6:b5:63:1e:64:4a:87:ab:5a:0b:d5:16:77:83:
         d2:1d:44:13:0f:36:a9:e2:5b:be:94:eb:af:51:f7:82:3f:4f:
         0b:94:49:28:e2:2f:b7:d1:ec:25:a0:2a:42:47:c4:38:4a:9b:
         35:f0:a6:a4:a0:1e:f9:01:4d:b0:7a:bf:59:bc:cd:2c:9b:19:
         f6:37:2d:6f:0c:17:89:3c:f3:f7:d0:67:1f:e2:f8:6d:d2:2f:
         ce:3d:49:27:2b:ca:95:ad:a9:cc:08:20:78:c5:64:e9:8f:b0:
         f2:42:d3:08:bb:9f:f7:69:a9:1d:ad:65:6c:15:d7:48:59:cc:
         5c:58:16:ce:25:b1:9e:25:67:2f:ca:af:9c:47:95:36:eb:be:
         6b:09:ba:3c:90:7d:8b:4b:e3:62:ae:d7:ef:bc:82:b4:0c:87:
         a2:d5:f4:26:79:9d:df:08:c9:1e:7d:90:d3:2f:6d:f0:26:34:
         1d:6d:6d:99:80:c5:65:53:3d:c0:9e:c7:7f:c6:31:d0:b2:92:
         8f:ad:c6:7b:f4:b6:33:47:cd:8c:a2:1f:00:9e:dc:2b:31:7b:
         d7:fb:19:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:29:29 2025 by rpki-client