Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
File:                     MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft (raw, json)
Hash identifier:          DAIHTyVUH8pV5fzsVmU0eNCLc4adnkVtCxp+vskb4u8=
Subject key identifier:   1B:68:7F:E5:B2:B3:A2:C1:3C:E5:71:76:54:ED:FA:EC:55:80:F6:EA
Authority key identifier: 33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
Certificate issuer:       /CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Certificate serial:       019750B42E4ABAB566C342DB4FAAFBE20BAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
Manifest number:          08DC
Signing time:             Sun 08 Jun 2025 18:01:14 +0000
Manifest this update:     Sun 08 Jun 2025 18:01:14 +0000
Manifest next update:     Mon 09 Jun 2025 18:01:14 +0000
Files and hashes:         1: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl (hash: 8pG8arguHyIPQgx8ZxZVlK0U4tkhmGdl8LM905fo0mQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:b4:2e:4a:ba:b5:66:c3:42:db:4f:aa:fb:e2:0b:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33229bd682fe0a3410698bdd4c262dc99cc02797
        Validity
            Not Before: Jun  8 18:01:14 2025 GMT
            Not After : Jun  9 18:01:14 2025 GMT
        Subject: CN=1b687fe5b2b3a2c13ce5717654edfaec5580f6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:4e:13:8e:21:00:78:35:ad:9c:8a:f3:6a:
                    7a:fd:75:39:09:57:5e:29:8e:be:15:78:99:37:7e:
                    5f:86:13:87:75:ed:32:cb:e5:fa:07:c3:d4:14:df:
                    f5:ac:b4:f2:d9:32:3c:e7:63:55:9c:cf:55:44:02:
                    96:49:f5:37:92:b4:23:59:dc:49:3b:5a:d6:62:99:
                    93:bb:ab:db:e8:f7:ce:11:7d:15:29:32:47:fe:e5:
                    59:f6:64:dd:b1:3d:19:df:d9:e5:7e:11:bd:f1:e4:
                    2d:d4:b8:18:e9:c3:e8:32:16:14:39:08:7f:35:fd:
                    c3:2e:e3:df:eb:ff:11:03:b3:7b:d9:07:59:e7:46:
                    ff:aa:88:34:a3:24:57:f5:2a:42:97:36:f8:d5:4f:
                    19:ec:ee:98:c2:b9:82:89:48:89:d7:6c:9d:ee:09:
                    19:30:89:e0:54:8f:68:88:f7:9f:79:aa:f2:af:2c:
                    6d:7e:18:eb:93:75:d3:d5:04:05:be:12:e2:17:3b:
                    94:cf:14:df:45:45:09:bc:ff:bf:00:e9:43:f1:70:
                    9b:62:61:ad:c9:2e:aa:14:15:35:f6:87:27:6f:d4:
                    a3:b3:4b:26:7e:f0:c1:76:ae:86:60:fa:da:a7:96:
                    93:76:e4:2c:a6:ed:af:c8:bf:3e:e5:25:b6:15:0c:
                    2c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:68:7F:E5:B2:B3:A2:C1:3C:E5:71:76:54:ED:FA:EC:55:80:F6:EA
            X509v3 Authority Key Identifier:
                keyid:33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4a:84:40:b2:ed:1d:9d:43:34:71:ae:18:e8:85:0d:b2:92:
         16:1d:2a:88:6a:7b:08:b1:e2:6e:ea:ff:8d:e4:65:95:73:72:
         d3:95:a0:63:fa:7e:20:52:7b:99:cc:1c:ab:5f:27:d7:c2:b7:
         1d:6d:bc:7f:ae:bf:0d:19:4a:8e:ca:01:29:1f:13:d5:c3:da:
         15:4f:38:b8:81:4d:15:e0:52:d1:ba:da:d2:7e:5d:14:f9:1f:
         85:df:10:8c:c1:64:33:82:f3:ee:14:87:1e:a2:c3:11:86:8a:
         85:c4:4d:0d:59:c0:9d:a5:50:97:6a:55:8f:38:b2:99:33:f1:
         b4:bf:20:83:77:94:3b:83:a1:48:ae:1c:b7:80:94:00:83:eb:
         d6:b5:68:48:c1:b7:da:1d:3a:e5:f5:a6:69:75:b3:96:31:1e:
         bd:88:ae:10:08:7a:6a:45:63:82:47:65:08:e7:af:a2:a3:c0:
         8b:f9:96:59:f6:cd:f6:a5:c0:2c:83:79:3d:9e:8e:3b:d1:19:
         08:d3:5d:ec:cf:cf:75:cb:46:3d:1b:05:9c:05:20:dd:2e:c3:
         6f:2c:a2:a2:56:93:a7:05:bf:00:e4:db:3f:97:ff:13:36:1b:
         46:1d:16:41:f6:c7:b6:e7:a1:ac:bb:23:f5:64:21:1e:24:af:
         bf:2a:ee:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:26:52 2025 by rpki-client