Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
File:                     dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft (raw, json)
Hash identifier:          EYuEAVGmfIZAWBUas8PBmXVEX3FwS7/BZRYKjGdzMJc=
Subject key identifier:   B0:19:C3:72:44:2B:BE:F9:54:5E:C5:92:0D:D4:56:84:D8:64:F9:F3
Authority key identifier: 74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C
Certificate issuer:       /CN=74f675a1679816793d5b30ad2f253f56c8e2445c
Certificate serial:       0197610272DC17BBDB09D7C3BF519FBA00EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
Manifest number:          1584
Signing time:             Wed 11 Jun 2025 22:00:39 +0000
Manifest this update:     Wed 11 Jun 2025 22:00:39 +0000
Manifest next update:     Thu 12 Jun 2025 22:00:39 +0000
Files and hashes:         1: dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl (hash: rh3HeHY8YVDOrgYktnaF6XHEWho/jbNIFM+bm+nZgpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:61:02:72:dc:17:bb:db:09:d7:c3:bf:51:9f:ba:00:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f675a1679816793d5b30ad2f253f56c8e2445c
        Validity
            Not Before: Jun 11 22:00:39 2025 GMT
            Not After : Jun 12 22:00:39 2025 GMT
        Subject: CN=b019c372442bbef9545ec5920dd45684d864f9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a1:c7:60:59:f7:0d:48:0d:ce:bb:a5:db:f8:
                    20:21:b8:e6:54:fe:53:b6:08:99:1e:a9:5c:e2:02:
                    0b:cb:ec:3e:0a:86:34:68:05:82:66:88:94:64:1b:
                    1f:68:d2:16:87:e5:c0:1d:b9:15:44:b2:8d:c1:cb:
                    2d:45:da:20:f5:0a:49:09:80:0a:d6:63:ba:1d:d8:
                    78:59:03:bd:a8:9b:e6:a1:35:e2:b4:d3:2d:7f:67:
                    35:18:29:00:5e:70:a9:9f:cd:8b:38:89:fc:0a:67:
                    a3:1b:e9:99:04:67:f0:c9:f3:54:6b:d5:c6:30:b2:
                    c4:9a:f3:06:23:74:b8:c5:6c:e1:cc:4a:c5:2f:4a:
                    f3:99:20:68:4b:32:e5:f7:43:3a:02:13:dc:be:63:
                    a3:2d:af:f5:0f:1a:bd:89:9a:84:b4:a9:0c:ff:c4:
                    f9:ba:d1:e2:70:c9:0c:de:bf:49:3a:2e:3a:ab:b1:
                    ae:fb:19:7b:00:e2:f2:9c:2b:a6:b4:15:5e:35:72:
                    ef:4d:7f:0c:ae:fd:95:8b:20:f3:6b:dd:25:d9:ba:
                    df:6f:f0:81:2d:70:fc:f4:82:7a:68:8b:eb:b8:1d:
                    5a:bb:e3:d5:60:48:0f:a9:04:d1:81:ff:76:15:8b:
                    0b:b1:de:96:78:72:f2:6b:5e:5f:75:70:e1:40:b8:
                    f4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:19:C3:72:44:2B:BE:F9:54:5E:C5:92:0D:D4:56:84:D8:64:F9:F3
            X509v3 Authority Key Identifier:
                keyid:74:F6:75:A1:67:98:16:79:3D:5B:30:AD:2F:25:3F:56:C8:E2:44:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8978cb-1a27-4f24-b552-336293734507/1/dPZ1oWeYFnk9WzCtLyU_VsjiRFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:1f:ce:1e:02:3a:e2:95:ce:c3:cb:4e:89:4a:8b:d7:e6:54:
         1a:9b:10:b5:1e:75:57:ea:08:6b:28:36:5a:7c:c5:ba:10:c6:
         1d:b5:0a:77:c6:4e:75:0f:25:54:9c:33:08:5f:47:d1:5d:a0:
         21:03:94:8f:a4:12:0d:c9:31:80:32:5b:08:f2:54:49:c9:f6:
         a5:68:ae:71:90:a4:4b:11:f0:6b:6b:b6:ae:95:5c:97:0d:20:
         04:f9:47:21:5d:14:ce:e0:68:cc:5b:14:e0:86:c7:16:bc:e2:
         a5:b6:95:31:2f:55:01:30:7e:0b:d9:42:95:7e:a9:38:49:27:
         dc:4e:bf:1f:77:9f:06:3f:95:0b:e9:a8:e1:f7:0f:00:fc:5e:
         47:07:fa:06:64:87:36:7b:0a:a5:92:b8:4b:f5:41:63:a9:5c:
         e2:0e:bb:30:37:dd:f6:bc:06:ea:9c:4c:d7:48:78:b9:29:2b:
         b1:80:05:6a:25:27:bb:03:dd:04:b9:a8:ce:77:0b:38:b2:18:
         b4:c5:4b:8b:cc:db:02:65:c4:54:d5:91:5f:c2:5d:6f:dc:b6:
         54:1c:54:d8:b2:9f:f2:43:bd:24:2d:be:dd:39:d5:1e:04:1d:
         37:70:cb:99:8b:c0:ce:08:5f:1e:c0:f5:bc:80:65:07:ee:24:
         29:bf:3b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:01:35 2025 by rpki-client