Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
File:                     dNYxjajSNXnE9zi26OVcxf8n5bE.mft (raw, json)
Hash identifier:          C0V0gqbdb4vW3DyIEep+Ri8++z/S1oxSe6QOSq0Uks8=
Subject key identifier:   FE:49:0D:7C:70:06:D1:CD:FC:84:15:5C:F3:9D:74:BC:10:E5:C0:27
Authority key identifier: 74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1
Certificate issuer:       /CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
Certificate serial:       0197586D733E7FBED010E35EC36D9656C65D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
Manifest number:          0B84
Signing time:             Tue 10 Jun 2025 06:00:57 +0000
Manifest this update:     Tue 10 Jun 2025 06:00:57 +0000
Manifest next update:     Wed 11 Jun 2025 06:00:57 +0000
Files and hashes:         1: dNYxjajSNXnE9zi26OVcxf8n5bE.crl (hash: WpgEelYB6uwUoI7MD/OVja9M/A1Vez/+o6Ad/2vjECY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:6d:73:3e:7f:be:d0:10:e3:5e:c3:6d:96:56:c6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d6318da8d23579c4f738b6e8e55cc5ff27e5b1
        Validity
            Not Before: Jun 10 06:00:57 2025 GMT
            Not After : Jun 11 06:00:57 2025 GMT
        Subject: CN=fe490d7c7006d1cdfc84155cf39d74bc10e5c027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c3:c8:04:4e:4c:bf:6d:9b:c1:c8:4b:c4:92:
                    e7:bc:33:b6:a8:28:18:f7:d5:20:fe:c0:3d:9c:b6:
                    01:cb:36:99:56:e5:56:b6:cc:96:bb:cd:4b:0a:64:
                    16:b2:16:e1:d6:79:a6:d3:06:14:57:83:83:92:02:
                    46:2b:3f:46:df:95:61:06:d7:bb:87:ec:88:d5:67:
                    dc:aa:06:1a:6c:72:c4:dc:3f:b8:ad:d7:6a:7f:54:
                    67:91:03:37:cb:8a:6f:55:1d:2d:33:51:1e:78:9e:
                    fb:f9:c6:1f:f6:ac:59:94:a0:d0:8a:61:a9:9b:c1:
                    38:0c:61:eb:15:22:af:db:87:d8:90:52:e4:ef:a6:
                    7f:42:da:b6:84:52:3d:66:b1:8e:26:01:f5:89:cb:
                    a1:f1:9e:30:2e:f1:cf:28:29:d8:d7:7b:60:7f:57:
                    ad:e9:df:5f:50:44:cf:17:eb:69:0a:09:5e:fc:a3:
                    e2:7f:e8:8d:47:b4:76:a6:ac:04:d1:c4:c0:df:3b:
                    9d:c7:d4:e2:f1:42:d2:71:00:8e:d5:af:55:88:bc:
                    51:e0:3d:25:44:7b:5a:23:f5:07:a3:fb:85:d7:64:
                    ac:e6:9b:c4:41:25:1c:2c:2e:c8:3a:a0:cd:08:a6:
                    16:2c:e0:2b:22:de:8f:71:68:da:c0:2f:73:a5:68:
                    91:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:49:0D:7C:70:06:D1:CD:FC:84:15:5C:F3:9D:74:BC:10:E5:C0:27
            X509v3 Authority Key Identifier:
                keyid:74:D6:31:8D:A8:D2:35:79:C4:F7:38:B6:E8:E5:5C:C5:FF:27:E5:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNYxjajSNXnE9zi26OVcxf8n5bE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ef54db-a565-4354-899a-083aa18a7629/1/dNYxjajSNXnE9zi26OVcxf8n5bE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:94:a8:b3:4f:04:77:64:cd:76:de:35:59:61:0b:51:2e:09:
         53:ff:19:69:01:6a:d7:ae:bb:c6:ac:bc:cc:47:65:e8:37:b7:
         b9:b0:bc:7e:bc:5d:a7:b8:64:92:70:ae:5c:c4:ca:55:ec:5a:
         18:95:91:8f:b7:a6:23:9e:eb:34:f1:d4:70:30:fe:09:3f:ce:
         bd:99:97:61:16:8a:04:36:db:55:63:22:a3:41:e6:fe:d3:24:
         42:ce:b5:27:a6:b6:f9:7f:30:b1:ee:5e:6d:69:10:5c:43:33:
         79:2c:ec:db:a4:67:6c:c3:fe:f5:96:50:da:a4:47:55:00:c6:
         7c:72:1d:c0:f6:20:01:c0:99:df:5b:0a:ed:9c:dc:d7:f4:da:
         b5:85:a0:3c:bf:e3:c0:e3:9a:7d:1d:a7:f4:2f:03:05:f4:6f:
         6f:61:43:4e:c4:31:af:1a:84:f0:6b:6a:9b:18:e0:57:c6:18:
         a3:f7:de:63:bc:ee:0b:75:0b:a4:65:f2:f6:03:36:b8:c0:74:
         8a:a4:88:b2:f0:8d:f5:83:e1:35:e9:23:e1:ae:23:1b:9c:bf:
         60:21:f8:b3:23:a0:52:ad:e0:c6:46:b5:22:d7:4c:a7:67:e0:
         e5:1b:48:ab:bd:85:48:4f:33:14:77:ee:cc:a1:24:83:6c:f4:
         f9:8b:29:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdYbXM+f77QEONew22WVsZdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZDYzMThkYThkMjM1NzljNGY3MzhiNmU4ZTU1Y2M1ZmYy
N2U1YjEwHhcNMjUwNjEwMDYwMDU3WhcNMjUwNjExMDYwMDU3WjAzMTEwLwYDVQQD
EyhmZTQ5MGQ3YzcwMDZkMWNkZmM4NDE1NWNmMzlkNzRiYzEwZTVjMDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocPIBE5Mv22bwchLxJLnvDO2qCgY
99Ug/sA9nLYByzaZVuVWtsyWu81LCmQWshbh1nmm0wYUV4ODkgJGKz9G35VhBte7
h+yI1WfcqgYabHLE3D+4rddqf1RnkQM3y4pvVR0tM1EeeJ77+cYf9qxZlKDQimGp
m8E4DGHrFSKv24fYkFLk76Z/Qtq2hFI9ZrGOJgH1icuh8Z4wLvHPKCnY13tgf1et
6d9fUETPF+tpCgle/KPif+iNR7R2pqwE0cTA3zudx9Ti8ULScQCO1a9ViLxR4D0l
RHtaI/UHo/uF12Ss5pvEQSUcLC7IOqDNCKYWLOArIt6PcWjawC9zpWiRMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5JDXxwBtHN/IQVXPOddLwQ5cAnMB8GA1UdIwQY
MBaAFHTWMY2o0jV5xPc4tujlXMX/J+WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE5ZeGphalNOWG5FOXppMjZPVmN4ZjhuNWJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZjU0ZGItYTU2NS00MzU0LTg5OWEt
MDgzYWExOGE3NjI5LzEvZE5ZeGphalNOWG5FOXppMjZPVmN4ZjhuNWJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lZjU0ZGItYTU2NS00MzU0LTg5OWEtMDgzYWExOGE3NjI5
LzEvZE5ZeGphalNOWG5FOXppMjZPVmN4ZjhuNWJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq5Sos08E
d2TNdt41WWELUS4JU/8ZaQFq1667xqy8zEdl6De3ubC8frxdp7hkknCuXMTKVexa
GJWRj7emI57rNPHUcDD+CT/OvZmXYRaKBDbbVWMio0Hm/tMkQs61J6a2+X8wse5e
bWkQXEMzeSzs26RnbMP+9ZZQ2qRHVQDGfHIdwPYgAcCZ31sK7Zzc1/TatYWgPL/j
wOOafR2n9C8DBfRvb2FDTsQxrxqE8GtqmxjgV8YYo/feY7zuC3ULpGXy9gM2uMB0
iqSIsvCN9YPhNekj4a4jG5y/YCH4syOgUq3gxka1ItdMp2fg5RtIq72FSE8zFHfu
zKEkg2z0+Ysp8Q==
-----END CERTIFICATE-----
Generated at Tue Jun 10 16:42:23 2025 by rpki-client