Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
File:                     D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft (raw, json)
Hash identifier:          14E91ixgv7S0zxY1DQhjEpJK0txZASH56VQagAIzsZg=
Subject key identifier:   01:4A:97:84:13:39:37:FF:24:7A:0E:42:D2:A5:4E:ED:29:36:2C:0E
Authority key identifier: 0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3
Certificate issuer:       /CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
Certificate serial:       01974779F43028477751F69B173DF197B040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
Manifest number:          06D6
Signing time:             Fri 06 Jun 2025 23:01:04 +0000
Manifest this update:     Fri 06 Jun 2025 23:01:04 +0000
Manifest next update:     Sat 07 Jun 2025 23:01:04 +0000
Files and hashes:         1: D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl (hash: FeaAJyYTC9lf3Djit/sVlVhpQfY6SGvWWqRiGHe7rtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:f4:30:28:47:77:51:f6:9b:17:3d:f1:97:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
        Validity
            Not Before: Jun  6 23:01:04 2025 GMT
            Not After : Jun  7 23:01:04 2025 GMT
        Subject: CN=014a9784133937ff247a0e42d2a54eed29362c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:19:8b:94:5b:da:64:cb:24:31:ff:e1:75:7e:
                    c7:7e:d7:de:51:cc:19:53:dc:3d:bf:ee:d8:a9:5d:
                    44:9b:6a:82:6c:ff:d2:f1:8b:c4:7f:da:40:1f:d9:
                    ed:9c:8e:d2:b8:02:7e:4d:08:1a:0c:6b:89:81:87:
                    c0:b5:4e:5f:27:d2:af:85:18:36:95:79:2c:d1:48:
                    de:28:35:93:8f:eb:c5:a7:72:2d:95:d7:16:99:80:
                    88:2e:73:1f:c9:25:e0:3c:62:a9:89:f5:65:bf:f1:
                    47:88:dd:a7:5a:0c:88:8d:77:f5:73:00:46:e7:4e:
                    83:7b:72:24:45:f0:75:61:e8:14:a0:14:9e:ae:d4:
                    a5:3f:5a:41:7c:f5:8a:45:d2:20:45:b8:11:73:80:
                    15:82:ed:35:fe:72:a5:f4:aa:27:2f:74:c5:fd:9d:
                    4d:3a:3c:c1:3a:70:4d:98:bc:24:45:20:ca:4c:37:
                    0c:54:0c:16:72:14:ee:9a:4b:05:a2:a7:c2:1f:34:
                    5a:04:3e:6c:43:ae:c6:10:1b:18:53:35:ad:a1:e2:
                    7c:1f:1c:77:18:ae:e2:8d:aa:74:6c:3f:68:a6:b0:
                    12:d7:8f:29:67:fe:31:2a:d2:0b:24:2b:7c:06:8e:
                    ab:56:0f:ad:fa:f3:f7:a5:a9:a7:66:f7:ee:08:eb:
                    ff:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4A:97:84:13:39:37:FF:24:7A:0E:42:D2:A5:4E:ED:29:36:2C:0E
            X509v3 Authority Key Identifier:
                keyid:0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ed:1a:f2:bd:7d:4f:96:3e:87:5b:61:d2:f7:c7:a9:9b:b5:
         97:74:2b:b0:7f:38:a3:03:af:cc:0b:52:fd:2f:2d:d1:10:81:
         4a:44:61:25:f1:40:7a:99:3c:db:e8:c7:14:d1:73:bf:1a:7f:
         04:22:60:e8:56:80:96:a1:9d:18:7b:81:64:0c:f9:2c:1d:54:
         9b:ad:95:7c:2e:dd:41:72:94:8b:ab:d5:8b:f1:26:70:6b:20:
         c3:cb:e0:13:d6:13:1d:21:cc:f8:45:88:d2:c6:44:e6:a6:ff:
         76:04:74:4b:a8:28:bb:10:1a:d4:e3:7d:0f:ad:63:91:f1:b4:
         47:4c:a7:35:e8:15:e8:45:b8:66:3a:b4:3c:85:ff:d1:a1:6c:
         7b:90:47:b2:82:63:ca:7c:d4:70:f6:9d:f0:97:ce:31:3a:05:
         87:6a:52:93:f9:d1:96:ca:12:a9:b2:8b:20:fd:99:08:7d:20:
         9a:f7:d8:96:dc:9f:ae:11:8b:37:77:43:a5:51:95:aa:79:e9:
         62:b6:3a:c5:d9:93:28:25:55:e7:87:b6:1c:3b:1d:5d:f7:2b:
         dd:2f:bc:d4:73:b5:59:2e:2f:f6:a2:78:be:5d:91:52:9c:3f:
         2e:e9:a0:4a:e0:7c:33:f4:53:09:11:9c:df:cb:ce:b2:89:18:
         72:99:c1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:24:59 2025 by rpki-client