Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File:                     0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier:          8P911zZPEV/OeOtP7pfPhbrM9vNkNTrj+7CTU9L1Nfg=
Subject key identifier:   6A:EA:DD:5D:F3:8C:AC:60:33:87:64:D2:29:4C:C4:20:6F:B3:0D:04
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer:       /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial:       01976094D1CFC39029FC3D380554E27A3E1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number:          1585
Signing time:             Wed 11 Jun 2025 20:00:55 +0000
Manifest this update:     Wed 11 Jun 2025 20:00:55 +0000
Manifest next update:     Thu 12 Jun 2025 20:00:55 +0000
Files and hashes:         1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: aWBFmcVXPUei1Yh+2YlT47eEYStovizBVuREg8CTEJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:94:d1:cf:c3:90:29:fc:3d:38:05:54:e2:7a:3e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
        Validity
            Not Before: Jun 11 20:00:55 2025 GMT
            Not After : Jun 12 20:00:55 2025 GMT
        Subject: CN=6aeadd5df38cac60338764d2294cc4206fb30d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:d2:46:6d:9c:39:e9:5f:c0:97:cf:55:fd:
                    4a:04:df:9f:bb:79:81:43:7f:d9:a9:0f:6e:9b:4b:
                    b5:da:88:22:a8:f0:aa:b1:9a:2e:75:e1:d6:d4:b9:
                    02:54:f4:17:a3:43:22:18:33:df:ab:4c:57:f7:54:
                    b3:f9:20:e8:87:35:16:c1:a0:82:b9:6e:c9:23:ca:
                    8c:e5:ba:51:21:5c:78:71:03:d4:12:de:cf:b1:2e:
                    11:a8:56:4c:d7:c7:a3:e4:48:82:07:b0:c8:dc:f2:
                    bc:f2:34:f9:86:76:2d:1d:67:db:38:40:c7:c1:e3:
                    43:5f:bb:dc:c4:f1:2d:df:ed:3a:9b:31:0b:38:36:
                    d5:ea:ca:9c:1c:bd:0b:5b:a1:36:e9:d0:da:65:89:
                    65:59:3d:18:ae:16:d4:40:9c:18:b9:30:75:2a:7f:
                    f4:5f:82:f1:34:37:75:37:cc:4c:ef:73:5b:9d:f3:
                    44:63:de:70:d0:73:57:1b:15:b6:a7:ce:38:fa:ee:
                    c4:ac:4a:70:9b:de:d1:96:94:0b:22:8e:0a:1a:aa:
                    84:e2:69:6b:b7:12:07:db:89:53:c9:10:d7:41:fb:
                    bb:cd:4b:d9:d2:2d:ac:12:2d:c7:7e:35:66:e9:a5:
                    e1:58:3a:91:cd:45:fa:93:27:2b:7e:98:7c:72:43:
                    ed:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EA:DD:5D:F3:8C:AC:60:33:87:64:D2:29:4C:C4:20:6F:B3:0D:04
            X509v3 Authority Key Identifier:
                keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:88:89:64:a3:18:24:74:cc:b7:c3:cd:08:b8:8e:64:8c:7f:
         fe:70:1e:eb:34:db:5d:88:d6:67:f8:7a:c2:0e:ac:e2:9d:07:
         a4:c8:f5:41:22:73:3d:2b:4f:71:f3:5c:2e:e5:1c:b5:e3:4c:
         ac:34:0b:d3:2f:b5:fb:5c:6b:07:83:c6:7c:44:82:01:98:21:
         4c:6b:15:61:41:36:4c:90:66:45:73:c1:fe:ef:92:35:39:1a:
         fa:84:ff:a2:2f:a8:8d:6f:52:74:cb:a3:ca:f8:ed:37:1c:34:
         b3:15:1d:21:8a:66:23:58:5b:47:fd:06:c4:6a:35:82:da:8e:
         02:7c:a0:7e:8e:df:64:e0:84:d8:3b:2c:a4:88:76:b8:81:93:
         11:1d:00:bb:ed:01:56:71:8f:b1:09:2a:b5:e3:09:9a:6f:6c:
         bb:a0:19:0c:64:44:9a:20:93:ef:31:bb:94:3a:ab:51:47:3e:
         8d:46:1d:3e:c3:77:25:58:f8:a4:37:41:ca:95:0d:df:ef:68:
         c4:f6:e5:2b:65:07:a6:ca:b0:67:2f:6b:c0:1c:23:19:fb:6d:
         9c:59:df:ba:80:0d:84:51:9d:d2:b4:40:b5:e4:92:fd:22:35:
         cd:98:4f:9e:b9:d0:9b:1a:b1:f8:4c:73:43:c1:14:9e:a5:48:
         13:1f:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 23:49:14 2025 by rpki-client