Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
File:                     DC6B06B855BF97C397BDB8516944B4DB18663F92.mft (raw, json)
Hash identifier:          mE+apHInFM3V+vowgE7pKBaXX7mBiBtMzzd2XW+Gd3A=
Subject key identifier:   E1:B5:CF:BE:02:10:88:79:B9:96:80:D2:3E:72:F5:DD:83:02:65:1B
Authority key identifier: DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92
Certificate issuer:       /CN=dc6b06b855bf97c397bdb8516944b4db18663f92
Certificate serial:       591A035C94AEB0AAD51BA4FFC57A7B48A15D9922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
Manifest number:          0366
Signing time:             Thu 04 Sep 2025 20:19:13 +0000
Manifest this update:     Thu 04 Sep 2025 20:14:13 +0000
Manifest next update:     Fri 05 Sep 2025 23:12:13 +0000
Files and hashes:         1: DC6B06B855BF97C397BDB8516944B4DB18663F92.crl (hash: ZEgKvy+1Sx56W79zGzpkp3RLKg/lq/hQRf+UbooiDSY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 23:12:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1a:03:5c:94:ae:b0:aa:d5:1b:a4:ff:c5:7a:7b:48:a1:5d:99:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6b06b855bf97c397bdb8516944b4db18663f92
        Validity
            Not Before: Sep  4 20:14:13 2025 GMT
            Not After : Sep  5 23:12:13 2025 GMT
        Subject: CN=E1B5CFBE02108879B99680D23E72F5DD8302651B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:36:7b:64:48:15:20:e0:ba:f9:fd:1d:82:12:
                    cf:d4:59:2b:8e:6b:f8:2b:de:22:94:88:83:41:5e:
                    d0:7a:3d:b3:a4:6e:c3:7c:24:ef:f6:5f:5b:f2:f0:
                    1a:d2:3d:88:72:42:b0:68:ce:64:27:89:2f:a5:7b:
                    78:a9:6e:24:5b:0f:b1:3e:d4:b8:21:9c:8f:05:2c:
                    09:2b:d5:f5:9d:3d:a7:86:72:3a:f1:bb:54:88:f9:
                    3b:b8:f9:48:b2:0b:1a:b5:00:7e:5e:0c:ec:ba:9a:
                    1a:ab:36:c1:81:6b:8b:ab:49:e9:87:94:d8:ab:8d:
                    c6:e5:84:b0:ef:f0:ba:a2:2a:26:8b:4e:fe:b6:88:
                    23:d7:15:52:48:70:2f:55:47:56:70:83:5f:b6:99:
                    de:5c:3d:a6:66:8e:95:44:e4:ba:f4:71:dc:18:7a:
                    8b:b2:eb:7b:66:8e:50:9b:44:52:22:3f:c8:d3:47:
                    40:6f:c3:66:e0:e2:95:f5:e2:34:39:36:ac:98:25:
                    e1:b0:2c:8f:a1:fd:b2:ce:d8:f9:62:59:4e:45:4f:
                    96:f6:0f:15:13:e4:44:ff:d6:7f:aa:3e:f2:96:07:
                    b9:be:81:7e:bf:60:43:2b:ae:2e:66:7a:6d:61:06:
                    79:c6:e0:f0:f8:27:95:fb:22:b7:57:d9:28:61:f0:
                    f7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B5:CF:BE:02:10:88:79:B9:96:80:D2:3E:72:F5:DD:83:02:65:1B
            X509v3 Authority Key Identifier:
                keyid:DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ea:b8:d4:ca:b5:c2:df:d0:2d:95:c1:57:b2:ef:2d:74:72:
         d0:49:26:f3:1f:b2:86:49:f2:be:4d:fd:ff:48:13:6a:52:a3:
         60:6b:bc:d7:22:bc:42:35:e9:89:41:68:4f:60:58:6f:dc:c6:
         f1:34:8c:ee:71:41:ca:a8:0f:e9:71:ec:5c:1c:10:59:55:63:
         40:84:b3:11:cf:3f:a5:47:46:a8:fd:81:51:4c:42:cc:62:b5:
         40:74:d8:30:e1:21:c2:0f:13:10:c3:05:ee:fe:3a:e9:e8:79:
         42:35:b7:e5:81:4b:7b:8e:08:a9:66:1b:40:50:34:5b:cd:51:
         59:f0:12:ca:cd:e3:3f:e1:e5:ad:43:5d:82:db:d0:90:01:b7:
         e2:a6:08:17:7b:8e:22:08:70:22:37:01:d1:57:07:85:d4:70:
         ef:eb:f8:79:33:de:48:66:a8:37:8b:d9:f0:77:1f:4f:4c:da:
         1e:65:e3:61:ea:13:f6:f6:6f:4c:6f:31:6e:c3:4f:1b:ba:5f:
         a6:8d:43:66:7e:78:9a:1a:a0:7d:17:35:f0:5d:ee:e9:0b:b5:
         27:c1:eb:ef:dc:5a:39:e1:a9:07:75:f2:b0:e8:ec:0c:97:91:
         8b:1f:68:70:f5:68:ff:01:2d:c5:40:c1:0c:e5:ac:91:26:ad:
         ee:42:f7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:22 2025 by rpki-client