Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
File:                     CYYD8NRKkgRDOKLK3xiegQHDv18.mft (raw, json)
Hash identifier:          BX3L8lYdDmqfJJQFkvzU6NaDVts67cd1Ngaim+R4328=
Subject key identifier:   D9:E1:58:7F:B4:A2:F3:5E:E5:19:78:AC:B9:48:58:04:A7:D2:4D:E6
Authority key identifier: 09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F
Certificate issuer:       /CN=098603f0d44a92044338a2cadf189e8101c3bf5f
Certificate serial:       0197469DE9D48154954B86AFCD140CDA886C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
Manifest number:          0C46
Signing time:             Fri 06 Jun 2025 19:00:43 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:43 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:43 +0000
Files and hashes:         1: CYYD8NRKkgRDOKLK3xiegQHDv18.crl (hash: LJoKNzjKRtOrDgDesElbjyi7jiqbZY+CYwPeSZnwwEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:e9:d4:81:54:95:4b:86:af:cd:14:0c:da:88:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098603f0d44a92044338a2cadf189e8101c3bf5f
        Validity
            Not Before: Jun  6 19:00:43 2025 GMT
            Not After : Jun  7 19:00:43 2025 GMT
        Subject: CN=d9e1587fb4a2f35ee51978acb9485804a7d24de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f1:f7:6f:4b:dc:33:44:91:bb:39:48:c0:45:
                    11:41:4b:32:b2:02:5f:98:d4:9a:50:31:2e:3a:49:
                    98:13:e0:59:b0:b8:9e:16:e2:b3:57:4d:19:45:a8:
                    07:21:9f:f1:1c:72:1c:60:70:4e:5b:64:40:d7:d5:
                    17:29:62:9f:a4:15:c4:79:d8:6a:9a:c3:8f:21:72:
                    27:68:5c:3e:94:ca:ae:81:88:4b:ae:82:af:03:73:
                    eb:9e:7a:00:c5:98:bf:4c:3b:c2:7d:54:cd:d8:65:
                    6d:c3:ff:4e:98:1d:e3:52:7c:3a:81:ec:80:89:43:
                    4a:19:13:c5:fc:2f:ec:85:06:56:80:7c:a7:e5:a7:
                    5e:66:67:cf:ac:df:a6:a2:e7:b4:86:b3:b7:67:eb:
                    7b:86:e0:24:39:95:ca:b0:25:52:2b:7a:0a:81:62:
                    2c:1c:f3:e4:cb:b7:0e:cd:e6:9a:20:ec:2e:97:55:
                    26:71:7b:c6:1d:44:50:8c:30:88:04:73:12:1b:69:
                    68:a4:4b:aa:84:25:ad:db:6a:61:d5:78:60:46:d0:
                    88:e1:34:6a:27:8a:36:08:a2:50:fe:64:2b:40:22:
                    ce:a3:d6:75:08:37:0b:05:24:e2:cf:83:d6:43:b5:
                    8c:e4:6f:fe:f5:db:2a:4b:63:84:58:86:14:cc:0c:
                    d2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E1:58:7F:B4:A2:F3:5E:E5:19:78:AC:B9:48:58:04:A7:D2:4D:E6
            X509v3 Authority Key Identifier:
                keyid:09:86:03:F0:D4:4A:92:04:43:38:A2:CA:DF:18:9E:81:01:C3:BF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYYD8NRKkgRDOKLK3xiegQHDv18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/68b353-cc2b-42e0-80af-b73686427942/1/CYYD8NRKkgRDOKLK3xiegQHDv18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:21:e7:2a:c7:a3:7a:f4:6f:f8:3a:2a:56:38:99:61:d7:ca:
         b7:32:60:ca:63:de:52:ab:12:6d:c2:df:0b:68:9f:3d:b9:09:
         43:b2:ea:46:ae:08:7a:96:92:80:79:f8:40:25:44:f8:d1:2f:
         5f:03:35:8c:d7:95:bc:74:79:88:26:2a:c3:97:ff:8e:98:f3:
         dd:36:11:c3:ab:a9:05:5d:8b:da:db:45:06:91:ea:e5:2a:5b:
         e3:08:41:33:6a:0b:fc:cc:62:84:44:37:8d:0c:33:05:05:43:
         62:63:a8:57:b8:0d:20:f9:20:b2:47:cf:86:54:44:9c:97:55:
         0b:92:3d:3a:eb:c1:ef:5d:7a:04:06:4e:b5:63:21:d4:f7:56:
         28:7c:00:05:58:a5:20:1b:74:a1:ab:ee:96:29:d9:80:8a:46:
         8c:58:2a:77:8c:f1:4b:08:47:f8:d4:9f:30:63:d3:cf:8a:62:
         ab:5f:1d:f2:17:d4:44:5e:4d:11:77:1b:37:75:98:7a:2b:d4:
         d3:37:ec:cd:2f:3d:b8:98:ed:b9:41:64:1e:97:12:e9:f6:69:
         a4:b8:d4:74:8b:db:1b:34:bd:b1:f5:d7:78:af:cd:68:73:84:
         bc:0c:d2:8f:98:e7:2e:38:f8:04:68:08:a4:6f:63:5a:d8:3e:
         c0:86:f8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:52:01 2025 by rpki-client