Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File:                     33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier:          6GKoAQvuna6tfumclxTt2T0hDj0igSve6irG9HzZaH4=
Subject key identifier:   6F:6B:E0:76:64:25:22:D3:FA:22:9D:C5:5E:16:5B:8A:3B:9E:D7:55
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer:       /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial:       01974B562874EA631971ED5C5DDA058E2C9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number:          13D4
Signing time:             Sat 07 Jun 2025 17:00:26 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:26 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:26 +0000
Files and hashes:         1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: YNhr9zhRSeGDDtR//2tcVwA/nZV7aORx7txs6GkDEIU=)
                          2: qHrO8lQhK3GafyUc6jw1PxQPaXs.roa (hash: tPnDIOggIIc+29booONquHAPxQns3cD0Gn6JnfE+V54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:28:74:ea:63:19:71:ed:5c:5d:da:05:8e:2c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
        Validity
            Not Before: Jun  7 17:00:26 2025 GMT
            Not After : Jun  8 17:00:26 2025 GMT
        Subject: CN=6f6be076642522d3fa229dc55e165b8a3b9ed755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:e3:4e:d1:75:48:e0:50:05:6e:fb:c1:2e:
                    81:d7:58:17:03:f4:03:44:a7:90:97:10:d5:d5:47:
                    ce:76:07:08:11:d9:ec:5e:7c:3a:4c:d0:f0:ba:48:
                    5e:36:e9:66:02:8e:28:ee:1e:72:29:a1:9d:6b:26:
                    c2:e6:d5:52:2c:01:48:c2:e5:7b:88:03:65:3c:8d:
                    86:bc:ee:da:d4:85:ea:61:84:d3:f3:7e:81:af:77:
                    2b:c6:fe:81:ce:14:36:df:4d:be:66:f2:48:86:d6:
                    13:fa:e0:d1:2f:bf:91:12:41:d6:4a:01:0e:3b:c6:
                    e8:96:47:c5:3a:f5:2f:23:b9:5e:c3:a1:67:76:69:
                    ef:12:59:fc:8d:4b:6f:a1:11:4e:be:22:3e:71:b2:
                    89:20:5b:98:a1:d2:e9:1f:20:1d:75:d2:61:14:10:
                    1f:7b:2b:6b:59:30:a4:a7:c5:d9:c3:35:ff:cd:7a:
                    f6:8d:9d:a0:8f:67:37:b6:e7:0f:b5:5b:fc:df:92:
                    4d:a5:09:31:b5:39:f5:71:c6:30:34:b7:d7:a6:8d:
                    79:db:f0:70:2e:79:f0:a8:73:84:f5:05:ab:b5:c9:
                    0c:f5:c6:89:95:c8:6c:e1:3c:c4:c7:b1:ad:d9:99:
                    64:86:04:4a:a8:cd:51:cb:9e:91:d8:cd:b1:bb:6b:
                    88:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6B:E0:76:64:25:22:D3:FA:22:9D:C5:5E:16:5B:8A:3B:9E:D7:55
            X509v3 Authority Key Identifier:
                keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:dd:d6:97:1f:db:6b:f5:73:8b:13:da:ad:6c:2b:45:01:aa:
         4f:a8:05:67:b3:d4:e2:38:f7:09:4e:2e:8f:1b:62:a4:48:fa:
         e2:b9:8e:24:5d:64:5b:1c:d2:8e:8a:4e:ce:bc:d3:96:92:eb:
         1b:e5:35:6d:01:8f:41:e8:0b:b9:db:25:a6:61:25:34:72:1b:
         d9:03:f4:b3:b6:93:df:c7:9a:d3:10:0a:e3:b6:aa:f7:e3:ed:
         f1:7f:b1:3b:7a:fc:1e:ff:71:a6:d5:05:3b:53:c5:ad:29:3a:
         11:4e:70:ff:75:c3:a2:5e:38:4c:9f:7d:5d:ce:fa:2f:24:74:
         5e:d7:bb:a0:f3:89:ce:7a:98:3d:8e:09:35:33:e1:22:dd:a6:
         34:a2:c0:55:35:d1:44:1a:c3:ab:5a:22:ee:f7:ee:42:14:33:
         67:87:6a:db:44:6e:8c:f1:66:64:60:82:53:90:61:3c:60:51:
         95:50:94:f7:67:1a:14:44:eb:8f:cd:76:59:62:41:d3:4a:b9:
         92:26:91:77:4a:75:0e:75:6e:27:42:59:44:7d:e6:12:7d:cc:
         5b:9d:bd:71:6c:e1:17:f9:2c:1d:a4:e4:7f:2a:14:d4:59:12:
         57:02:f8:e7:2b:98:33:0f:9e:49:ed:ed:48:80:50:ba:1d:4e:
         3f:8a:84:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:06:33 2025 by rpki-client