Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
File:                     2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft (raw, json)
Hash identifier:          rU2xXQgqGqv3F9JPFS7yb2/GDzLuqFn6fxoD1esXShI=
Subject key identifier:   CE:6B:FE:1D:09:EA:77:3F:F1:2B:E0:6B:A1:C2:86:8E:72:08:6E:CA
Authority key identifier: D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1
Certificate issuer:       /CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1
Certificate serial:       019747B091ADF69613F21E1139E52021D1F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
Manifest number:          0C6E
Signing time:             Sat 07 Jun 2025 00:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 00:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 00:00:43 +0000
Files and hashes:         1: 2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl (hash: IkU/oWwTLXCSbc2EI/uvtUBYvbzdEIepGAjTpgUBoQI=)
                          2: wUSVu8lDNfoUWdaRO2jsDgRSmsg.roa (hash: A2CVwSparFGjp8/uMP7BcSnzpGUx0FpocYCZqqW30C8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b0:91:ad:f6:96:13:f2:1e:11:39:e5:20:21:d1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8320bd4ef858fd62bb2485d08b0a86920e911c1
        Validity
            Not Before: Jun  7 00:00:43 2025 GMT
            Not After : Jun  8 00:00:43 2025 GMT
        Subject: CN=ce6bfe1d09ea773ff12be06ba1c2868e72086eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:33:28:2e:32:a4:db:91:d4:e8:59:80:1f:fc:
                    a1:a8:72:bc:1c:56:ff:c2:c6:db:a3:ae:d6:7f:d0:
                    7e:54:b8:5f:76:d8:24:9a:34:50:8f:99:68:83:d1:
                    9c:fb:df:69:4c:77:05:d1:61:25:d9:3c:3e:87:49:
                    d5:14:c7:d4:e6:14:59:ca:bb:e1:a5:cb:be:15:a3:
                    34:49:f3:c2:64:22:40:c1:b5:25:5f:e3:a7:30:aa:
                    17:5c:b2:c3:e8:d1:11:d6:61:9e:01:1f:7c:c6:93:
                    aa:11:82:d8:20:61:9b:35:a1:94:f0:ca:bd:f6:0f:
                    28:84:af:d6:35:c8:11:b3:18:ee:9b:a1:90:c0:18:
                    8d:6e:64:3c:9b:5e:fd:c1:ef:bb:51:59:10:c5:9a:
                    b5:f4:5c:31:3d:9c:ce:9a:a5:05:ee:35:a3:3d:69:
                    f4:a4:86:11:74:ff:20:13:4b:fa:40:49:79:06:1c:
                    b7:73:53:97:bd:dd:ee:f9:c3:4e:89:e1:59:bd:5b:
                    7f:23:e0:c0:7c:d9:50:48:c5:7a:75:aa:4a:50:b6:
                    ad:b3:0e:51:6e:24:a6:33:2b:e8:63:e6:c2:31:18:
                    9d:16:08:b3:4f:2a:36:f4:59:ff:94:1a:5a:14:48:
                    a7:3f:ff:91:95:ac:43:6a:3b:b7:0a:a1:25:b9:89:
                    e4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6B:FE:1D:09:EA:77:3F:F1:2B:E0:6B:A1:C2:86:8E:72:08:6E:CA
            X509v3 Authority Key Identifier:
                keyid:D8:32:0B:D4:EF:85:8F:D6:2B:B2:48:5D:08:B0:A8:69:20:E9:11:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DIL1O-Fj9YrskhdCLCoaSDpEcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bd81e7-397e-4d5d-a5f1-3a0faa28b5ac/1/2DIL1O-Fj9YrskhdCLCoaSDpEcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:aa:d8:6f:1e:37:cf:a2:33:d6:e9:df:46:5c:e9:6e:60:61:
         2a:3d:1f:8f:9d:5a:a0:fe:a3:e9:a8:7f:c0:c5:d3:fa:a8:40:
         7c:41:75:3a:33:25:4b:a5:71:b4:6a:d2:e0:0e:75:c7:b4:91:
         77:93:03:dc:44:bc:ed:f9:e5:84:c2:2e:30:90:e4:60:c3:fe:
         e6:e2:bb:b3:93:b0:1e:d7:41:ab:08:58:69:69:ab:04:9a:04:
         fd:8d:15:65:aa:79:fa:e9:b1:fb:e2:ba:a5:f4:f0:63:3e:f1:
         2d:24:4a:c2:01:fa:33:20:b6:c6:d1:b2:9d:92:4b:c5:eb:0d:
         8a:f9:7e:d7:47:e8:02:f9:71:15:43:a5:43:ff:f1:08:d8:0d:
         4b:20:1d:5a:2a:1e:a8:a0:8f:96:98:dd:d4:bc:ec:ce:73:04:
         f7:b4:be:1b:55:01:28:25:93:94:68:d4:6d:00:fd:0b:56:4a:
         fd:5f:b6:23:7e:59:df:29:db:34:40:6e:8a:14:77:56:62:9f:
         5a:66:74:12:dd:3f:6d:58:0e:79:f2:cd:dc:89:70:d1:2e:f1:
         1f:f8:c4:e8:6a:c5:b5:53:23:b9:5b:68:eb:42:bb:6c:1c:d2:
         cd:97:80:6d:2e:94:14:74:7f:20:10:2b:8a:02:32:6e:b2:79:
         8d:64:da:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:06 2025 by rpki-client