Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
File:                     DYYRtReZGJkx4wrhvpWs2oHj4cw.mft (raw, json)
Hash identifier:          hsig6FT63tNKy3MJWpDU6gHkNq9M8+emQvBZc0NNT98=
Subject key identifier:   37:36:56:1D:86:7D:1A:B3:1B:F7:52:9D:6C:FF:4E:52:7D:C6:08:D1
Authority key identifier: 0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC
Certificate issuer:       /CN=0d8611b51799189931e30ae1be95acda81e3e1cc
Certificate serial:       01963BE5E344AE3EB800D5ED538BF03E7AB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
Manifest number:          0EEB
Signing time:             Wed 16 Apr 2025 00:00:43 +0000
Manifest this update:     Wed 16 Apr 2025 00:00:43 +0000
Manifest next update:     Thu 17 Apr 2025 00:00:43 +0000
Files and hashes:         1: DYYRtReZGJkx4wrhvpWs2oHj4cw.crl (hash: EtP6hRd9cP9Kq7DeLi141frpm3ZOrSKzrKHi/trzJ4k=)
                          2: wD2g-VtZvqp7IY0550_PgDhJeD0.roa (hash: lT0qtpgd/Q3svueonVDRMVNhaFwZxKOMYzAHt0tWC5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3b:e5:e3:44:ae:3e:b8:00:d5:ed:53:8b:f0:3e:7a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8611b51799189931e30ae1be95acda81e3e1cc
        Validity
            Not Before: Apr 16 00:00:43 2025 GMT
            Not After : Apr 17 00:00:43 2025 GMT
        Subject: CN=3736561d867d1ab31bf7529d6cff4e527dc608d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d8:fa:59:a7:37:e7:d4:c1:71:e4:15:1d:3e:
                    ad:91:f9:aa:46:4d:fc:3e:7e:c2:6e:93:48:ea:91:
                    3b:a6:7d:02:e0:06:73:b3:e8:a1:38:18:3b:2c:87:
                    67:97:6c:b4:1c:15:31:1f:1d:f6:fe:b2:22:9e:3f:
                    6d:15:8f:31:06:db:a9:f3:c8:ff:07:dd:41:8f:b5:
                    d3:e9:76:ac:a2:cd:00:44:98:eb:66:a6:00:c3:b2:
                    dc:49:e6:55:2e:94:1b:75:5e:a6:6e:90:be:5a:7d:
                    5b:bd:74:d5:7b:5c:a2:bc:b0:c0:4a:5c:94:06:5f:
                    69:9e:28:b5:01:93:c2:7a:1d:bc:84:3e:54:d6:48:
                    21:92:3f:fb:71:9f:bb:7f:45:5a:25:2d:1f:97:50:
                    41:5a:b2:75:ec:77:0a:b0:92:33:1f:66:20:f9:87:
                    39:78:dd:52:50:36:f5:86:bb:84:0c:75:08:b0:84:
                    e2:df:7d:3d:88:23:44:ac:48:8b:2b:4b:cd:42:0a:
                    04:dd:ff:e2:ce:41:37:9e:d6:00:98:93:9d:f8:cb:
                    48:ec:92:7e:37:f7:22:81:18:22:13:98:f1:8e:53:
                    77:09:01:0b:a9:10:db:14:8f:99:d1:d0:36:1e:e3:
                    9e:8e:3a:c7:2d:24:65:20:0d:45:b8:e0:1e:5b:9a:
                    13:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:36:56:1D:86:7D:1A:B3:1B:F7:52:9D:6C:FF:4E:52:7D:C6:08:D1
            X509v3 Authority Key Identifier:
                keyid:0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e9:8b:78:8c:79:de:21:9f:21:3a:7a:36:71:7d:8c:ee:55:
         8d:3d:3f:49:40:19:4d:35:11:6b:7f:63:b7:1d:dd:fc:00:a2:
         22:f0:87:94:4b:ea:65:d4:d8:4f:52:5c:8a:65:8d:e6:fa:0b:
         23:c0:8f:7d:74:ff:48:ab:79:fa:38:7f:fe:63:91:1a:f0:22:
         14:bf:33:cf:9a:cb:9b:81:cd:8c:e4:cc:b1:9c:8e:fd:1e:a8:
         22:eb:d9:4a:5a:c8:b9:4f:1c:7e:a4:f3:88:72:cb:6c:db:40:
         fe:ae:a5:a2:d9:d8:6a:12:bc:e0:a9:c7:59:ba:00:c0:ae:3f:
         02:14:54:cd:a7:e0:e7:00:b5:e7:f7:29:91:f2:41:e5:02:bc:
         a2:fe:86:28:6f:65:ca:ba:66:fd:05:5f:b7:29:9e:92:a2:a3:
         e7:ad:18:e9:ad:10:6f:bb:d7:2f:52:08:cd:ee:58:bd:17:22:
         b8:56:17:7a:a8:62:ec:ff:f5:e9:58:00:95:0f:81:49:45:eb:
         22:92:2e:04:12:1f:96:a1:3d:bd:9c:58:e2:ee:90:d6:d3:5a:
         15:85:7a:cc:6b:51:fa:7f:77:f0:3f:79:95:20:d6:f2:c9:c4:
         92:3c:c0:ac:c4:23:87:5e:52:70:cf:44:25:2e:bd:37:c4:d5:
         22:c5:8a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:40:56 2025 by rpki-client