Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
File:                     0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft (raw, json)
Hash identifier:          p68bE4tezZWzjVKYs0PW6sTLUlUxm3rAQXP9LOEejYM=
Subject key identifier:   A1:D1:3B:34:35:02:82:2F:C4:AA:7F:8B:4A:A2:CE:36:0F:B0:D0:98
Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA
Certificate issuer:       /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
Certificate serial:       019758DAC7BA90B96B0F8A2178E589C22550
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
Manifest number:          1581
Signing time:             Tue 10 Jun 2025 08:00:22 +0000
Manifest this update:     Tue 10 Jun 2025 08:00:22 +0000
Manifest next update:     Wed 11 Jun 2025 08:00:22 +0000
Files and hashes:         1: 0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl (hash: CmjiQPKxwltOpkqbN3BNZScwpsK7pqIvRokYewQLMIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 08:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:da:c7:ba:90:b9:6b:0f:8a:21:78:e5:89:c2:25:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca
        Validity
            Not Before: Jun 10 08:00:22 2025 GMT
            Not After : Jun 11 08:00:22 2025 GMT
        Subject: CN=a1d13b343502822fc4aa7f8b4aa2ce360fb0d098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:99:18:e1:09:be:36:ee:ee:97:2e:52:0a:
                    48:ff:2d:56:d4:75:d0:cc:bc:76:8f:eb:f3:80:e0:
                    c3:a6:fc:da:db:ff:06:f7:02:1c:2a:d3:f9:b1:83:
                    40:9a:23:cf:41:c2:21:ee:76:34:68:ec:69:08:61:
                    5d:5c:80:07:dd:ff:41:80:45:95:42:0b:b7:81:e9:
                    a3:96:96:b1:42:8c:71:cc:4b:f4:e0:03:00:c2:11:
                    b6:50:e0:f1:ed:5a:d1:ba:f9:bf:36:89:1c:e9:22:
                    cb:b4:6a:94:86:1f:43:da:a6:ff:d1:8c:69:95:61:
                    55:5e:63:69:af:b9:b7:09:52:49:4e:1a:16:11:be:
                    61:eb:df:4d:ca:06:39:f5:23:cb:af:9d:c3:c0:01:
                    6d:90:da:6d:ec:c3:4b:9b:53:7b:b2:1a:b3:99:3f:
                    d2:6d:a3:b4:19:c6:12:a2:63:3a:39:cd:21:61:2f:
                    c9:fb:19:e2:9a:0d:32:75:64:15:fc:23:39:50:1b:
                    44:4a:81:65:f5:35:5c:a0:7a:73:92:9c:81:6d:1f:
                    e9:09:76:e8:be:9c:cc:a5:1a:9b:f0:f0:f4:aa:2b:
                    1e:81:11:e9:63:cf:1b:31:de:dd:04:c2:08:cc:9a:
                    5e:8a:3d:fc:74:ec:f5:c8:5a:c1:f9:5e:3f:2f:fd:
                    09:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D1:3B:34:35:02:82:2F:C4:AA:7F:8B:4A:A2:CE:36:0F:B0:D0:98
            X509v3 Authority Key Identifier:
                keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:48:4c:09:cb:bc:9a:70:a5:30:27:28:66:e8:35:ef:49:78:
         3e:b1:64:80:f2:85:15:5e:24:4f:99:3b:f5:2d:d7:e3:ff:ac:
         f4:5c:9d:fc:8b:da:10:49:14:7c:3b:c6:ad:27:f5:1c:bd:0d:
         2a:8f:13:b9:af:d4:d2:f8:24:de:51:83:16:28:b7:bb:32:e9:
         57:d9:1b:e9:5c:72:89:50:1f:97:31:16:9f:81:0a:81:90:64:
         4e:55:90:69:b1:2d:20:fe:72:13:36:60:8a:f5:f2:db:6e:18:
         72:d1:82:32:24:24:6f:a3:5c:43:2d:2c:dd:07:2d:70:5b:e0:
         2d:eb:9c:68:d7:36:e4:62:e0:35:21:98:59:24:78:a1:04:78:
         9b:05:7d:0b:2f:c5:34:ac:32:99:6a:76:10:a8:92:2c:a7:cb:
         89:b1:82:52:3f:be:b5:8b:6a:25:09:68:51:dc:51:b0:fc:67:
         5f:7c:ca:72:9e:c5:0a:92:2a:22:ff:cb:37:63:38:79:be:c6:
         c7:ea:91:88:77:3e:b6:cf:48:f7:1e:ca:e6:02:3b:38:8a:7f:
         8e:e1:6f:98:6f:0f:83:08:07:96:1a:fc:40:60:27:42:ad:53:
         57:1f:ae:e0:f2:4f:79:16:f8:6f:36:93:b8:96:73:7f:54:e0:
         f2:7e:1c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:45:02 2025 by rpki-client