Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft
File:                     DvD-irs27bvvRGptVK24YsSrO6E.mft (raw, json)
Hash identifier:          fflZx402E6sODlyKjNgIx2Ws1yy1ToTti55hLgl826E=
Subject key identifier:   93:93:7D:F6:B6:A2:52:7C:67:E4:D6:FF:18:02:B0:55:27:D1:23:75
Authority key identifier: 0E:F0:FE:8A:BB:36:ED:BB:EF:44:6A:6D:54:AD:B8:62:C4:AB:3B:A1
Certificate issuer:       /CN=0ef0fe8abb36edbbef446a6d54adb862c4ab3ba1
Certificate serial:       01975234FC233965AFE3566AE4485DD02E14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvD-irs27bvvRGptVK24YsSrO6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft
Manifest number:          0CB6
Signing time:             Mon 09 Jun 2025 01:01:33 +0000
Manifest this update:     Mon 09 Jun 2025 01:01:33 +0000
Manifest next update:     Tue 10 Jun 2025 01:01:33 +0000
Files and hashes:         1: DvD-irs27bvvRGptVK24YsSrO6E.crl (hash: 3fOVIZ3KymXx5Du5PM11qTpGJLXSyCvu2FfXvw1lXxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvD-irs27bvvRGptVK24YsSrO6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:34:fc:23:39:65:af:e3:56:6a:e4:48:5d:d0:2e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef0fe8abb36edbbef446a6d54adb862c4ab3ba1
        Validity
            Not Before: Jun  9 01:01:33 2025 GMT
            Not After : Jun 10 01:01:33 2025 GMT
        Subject: CN=93937df6b6a2527c67e4d6ff1802b05527d12375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9b:d3:5b:72:71:83:43:ed:a8:08:29:9a:75:
                    f4:e5:a7:c4:72:94:75:2c:aa:9d:bc:27:0e:e7:18:
                    87:23:d8:95:96:8d:95:6a:6c:18:e5:9e:36:84:09:
                    a8:48:2a:c1:c0:ce:0d:ba:7f:7c:a1:9b:f0:d3:e4:
                    a8:81:97:f0:2d:d2:31:fe:03:62:a5:d8:89:3a:1e:
                    a5:17:3b:41:39:2d:c7:cc:45:2e:18:d3:37:61:6c:
                    19:28:18:13:be:89:9a:ee:7c:35:62:f9:c3:38:b4:
                    85:85:46:f3:02:f1:77:8b:7a:67:c1:14:b6:84:fa:
                    58:33:3d:ad:6e:e6:d5:83:72:cd:68:d9:35:49:8a:
                    be:9d:af:da:78:31:ba:a3:da:85:6b:42:71:48:3f:
                    fd:00:c9:28:c4:75:3b:c6:d5:b1:78:51:de:40:aa:
                    1f:45:0f:af:8e:7f:1d:fb:e0:d9:63:8d:0b:69:96:
                    87:76:2e:9a:ad:a9:e5:b3:f7:3f:be:b1:73:76:c1:
                    10:79:cd:44:54:11:06:e3:a6:f1:42:64:a8:ed:10:
                    6e:9e:9e:a2:21:61:ac:2c:8e:c9:7b:22:07:ff:33:
                    2c:58:51:9a:f7:12:cf:87:8a:81:d6:a6:74:45:31:
                    1e:dd:1d:fb:eb:9d:7d:26:c7:e9:91:c9:00:0d:d5:
                    d7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:93:7D:F6:B6:A2:52:7C:67:E4:D6:FF:18:02:B0:55:27:D1:23:75
            X509v3 Authority Key Identifier:
                keyid:0E:F0:FE:8A:BB:36:ED:BB:EF:44:6A:6D:54:AD:B8:62:C4:AB:3B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvD-irs27bvvRGptVK24YsSrO6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:be:8f:15:9d:d6:af:18:7c:a9:c7:50:db:4e:07:53:ed:6f:
         5c:f6:58:12:ae:6a:5f:aa:34:3b:ae:f6:a5:db:ca:d6:c2:a6:
         72:85:30:33:7f:97:fb:9f:31:a2:8f:f2:f6:b2:bc:8f:91:76:
         e6:ac:7c:21:80:c7:26:ab:63:1b:94:5a:27:fd:26:40:1f:78:
         f4:43:de:36:3e:ce:cb:63:74:88:ca:4d:9f:71:95:45:f7:5b:
         c8:19:56:d8:cf:73:3c:25:99:d3:df:d2:6e:50:97:f8:7e:63:
         d3:1d:4b:37:22:c6:3c:88:98:e1:a3:1a:2f:72:13:d4:68:35:
         fb:db:ad:44:f4:7e:52:b1:83:9f:72:d0:b0:b5:8a:b2:af:5d:
         9b:c3:f6:58:23:a7:ea:42:09:9c:09:fe:3a:bb:f0:1d:89:bd:
         78:f2:30:f9:a3:3d:dd:7b:2b:0c:20:19:57:db:b5:1b:f3:70:
         0f:8a:e5:4f:86:ac:fe:f2:65:c0:76:53:ae:a5:61:58:d2:d5:
         21:aa:e8:e5:d2:b1:24:7c:39:65:d6:b0:73:48:6f:47:1b:4d:
         0a:14:1a:10:9e:e2:c8:7f:bc:94:03:02:a7:6a:4c:97:38:af:
         d8:b8:5f:df:19:6f:e7:91:ab:7e:ce:a3:0a:d6:80:b8:a6:94:
         e0:8a:de:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:52:49 2025 by rpki-client