Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
File:                     DC6B06B855BF97C397BDB8516944B4DB18663F92.mft (raw, json)
Hash identifier:          QbhSKRmdwNDF6X1xJ8EwCDoYjRbsrmWE6b2xEoGQZfE=
Subject key identifier:   CD:53:85:07:C3:00:CF:CA:A7:27:C5:9E:26:EF:A7:92:EE:4A:85:51
Authority key identifier: DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92
Certificate issuer:       /CN=dc6b06b855bf97c397bdb8516944b4db18663f92
Certificate serial:       4145882B71126F57B2442CB90BE2F4009339E90B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
Manifest number:          02ED
Signing time:             Fri 06 Jun 2025 09:26:50 +0000
Manifest this update:     Fri 06 Jun 2025 09:21:50 +0000
Manifest next update:     Sat 07 Jun 2025 10:26:50 +0000
Files and hashes:         1: DC6B06B855BF97C397BDB8516944B4DB18663F92.crl (hash: HH3++w6wiBPDZsOqKW8JsR0CONsxSjvvm7JoPyRUmz8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 10:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:45:88:2b:71:12:6f:57:b2:44:2c:b9:0b:e2:f4:00:93:39:e9:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6b06b855bf97c397bdb8516944b4db18663f92
        Validity
            Not Before: Jun  6 09:21:50 2025 GMT
            Not After : Jun  7 10:26:50 2025 GMT
        Subject: CN=CD538507C300CFCAA727C59E26EFA792EE4A8551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:70:28:d6:d2:ee:eb:65:a9:19:1e:d1:ac:
                    29:6b:33:53:7c:0a:65:fd:61:1f:43:eb:d8:13:de:
                    3c:12:61:b3:d7:ba:65:0d:05:63:92:a9:c8:e0:af:
                    1b:f3:a7:3f:b0:f1:ba:70:50:76:d1:8c:29:0d:fd:
                    de:10:eb:96:21:5c:fd:43:6d:63:db:2d:e4:7f:9d:
                    f0:0a:5b:ba:f1:fe:31:39:4f:7d:ce:12:b1:c5:5a:
                    4b:8d:08:ff:06:fe:46:4b:b3:39:59:37:8d:43:b4:
                    ee:c5:79:cd:40:b0:a0:aa:10:3a:65:00:15:e4:51:
                    55:ec:a5:37:81:cf:19:d5:0f:54:62:97:7b:39:33:
                    e4:9d:98:6c:80:7e:f8:09:a8:c1:41:7b:e3:b6:62:
                    77:84:6e:0e:c5:e0:0f:b0:e8:a2:c2:af:4a:c5:ef:
                    d9:c3:b2:1d:39:3c:30:db:a9:dd:c4:cc:c3:1c:0f:
                    f2:55:d7:f9:5c:82:52:54:53:fb:c3:5c:b0:fc:8d:
                    fc:84:04:6a:71:68:d1:36:1a:5c:df:15:b2:9f:78:
                    aa:16:5d:32:e1:3a:d7:44:02:a5:17:1f:7f:2a:15:
                    2e:ab:9d:28:39:df:ef:bc:2b:19:eb:44:22:9e:a3:
                    f3:76:f5:c5:cf:ec:9d:35:36:1b:d8:58:4d:79:f3:
                    4e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:53:85:07:C3:00:CF:CA:A7:27:C5:9E:26:EF:A7:92:EE:4A:85:51
            X509v3 Authority Key Identifier:
                keyid:DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e8:a1:c4:e8:70:e4:c4:24:3a:46:34:34:17:8b:30:e4:e2:
         17:62:be:f6:e5:42:08:b4:58:aa:03:db:56:01:ba:af:19:cd:
         71:7e:82:26:65:96:44:28:76:74:28:ae:f1:85:ac:52:46:63:
         25:f0:b5:f7:64:30:81:56:6c:ba:1f:f6:57:00:a2:c7:cf:e7:
         17:a9:1c:57:96:dd:ec:d0:98:c0:2d:6b:78:4e:9b:30:1c:e9:
         f5:b3:22:12:2c:03:a0:0d:71:86:b2:b8:4d:4d:0d:4d:1d:fc:
         9d:d6:71:16:cb:59:07:32:16:a1:4f:4a:f9:5e:66:27:10:3f:
         78:81:52:cd:65:7e:fd:81:d2:fc:50:c3:1d:ed:4a:19:04:d5:
         3d:da:ae:2d:2a:c8:50:22:fd:14:16:7d:e6:b5:4c:2d:97:8b:
         7c:bc:5e:e4:e7:a9:78:15:2a:bf:ca:03:8c:a7:68:ac:16:50:
         73:94:21:f8:9e:bf:c0:cb:b1:fe:eb:42:09:78:74:a1:14:b5:
         8d:4e:b1:a5:dd:1d:cd:4a:9c:6d:af:a1:69:ae:45:ab:7f:12:
         a7:fa:8d:ac:d0:ee:10:1c:06:f0:e7:04:5a:61:7e:fb:eb:71:
         93:e3:f1:b0:6d:80:87:46:2c:37:36:c3:84:af:75:2a:80:a8:
         a7:f4:32:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:18:52 2025 by rpki-client