Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
File:                     0dyvv2n_2nKwgna9sRGTVkrtj5c.mft (raw, json)
Hash identifier:          t6g8wWcJTttzTlsJpUEOE186PBYZCryXNvenW2gbf9k=
Subject key identifier:   4D:30:A6:F2:3A:0E:FD:C5:08:C0:F6:6A:0B:65:9C:0F:28:0D:44:E8
Authority key identifier: D1:DC:AF:BF:69:FF:DA:72:B0:82:76:BD:B1:11:93:56:4A:ED:8F:97
Certificate issuer:       /CN=d1dcafbf69ffda72b08276bdb11193564aed8f97
Certificate serial:       0197B6A15451B96F9778A2E388C3EEBDFC1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
Manifest number:          15B2
Signing time:             Sat 28 Jun 2025 13:01:55 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:55 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:55 +0000
Files and hashes:         1: 0dyvv2n_2nKwgna9sRGTVkrtj5c.crl (hash: 7ZWbuLINiLki66zHYocpRAYgPw8RbuGmIM+TKWVcU2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:54:51:b9:6f:97:78:a2:e3:88:c3:ee:bd:fc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1dcafbf69ffda72b08276bdb11193564aed8f97
        Validity
            Not Before: Jun 28 13:01:55 2025 GMT
            Not After : Jun 29 13:01:55 2025 GMT
        Subject: CN=4d30a6f23a0efdc508c0f66a0b659c0f280d44e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:f5:68:fa:a0:0c:50:2d:6c:f5:e2:b3:75:
                    94:ef:7a:a7:5e:c4:8d:74:0a:2a:fa:b0:f9:ba:6d:
                    bc:b8:04:d8:73:e5:07:79:d5:78:a8:1d:83:6c:6a:
                    1d:dd:2d:bb:47:6c:b9:cc:0c:53:9c:9a:a7:71:57:
                    a2:96:ad:94:7b:ee:2a:15:5f:2d:cc:1a:ed:17:99:
                    4a:83:b0:e6:3c:7c:45:97:b6:63:67:c2:3d:a5:36:
                    07:96:85:54:42:20:ad:4c:ce:4d:11:76:64:5b:d9:
                    0a:13:c7:92:7f:e2:f4:2f:4a:69:5a:80:b8:3b:47:
                    ca:f7:25:89:c5:f4:f2:c0:17:fb:8b:59:03:37:d5:
                    05:a1:15:8c:e8:bc:ae:92:55:93:75:6f:41:99:41:
                    5f:0a:b2:49:10:be:10:e1:e7:f8:57:2b:fd:7d:30:
                    06:87:1e:32:74:70:1b:3b:f4:f1:b9:ed:b0:fc:95:
                    f7:33:c6:e3:e5:62:00:22:d6:d9:7d:6e:4f:ed:0a:
                    ef:83:2b:cd:b8:d6:60:01:9b:2b:c6:4c:96:d6:70:
                    e3:81:a4:9a:05:72:a6:81:7c:79:fb:ef:00:62:80:
                    db:f2:08:ff:ad:ba:5d:77:7f:2a:d5:09:1c:3d:76:
                    db:9a:71:e7:16:84:b8:0b:aa:9e:79:27:e1:85:c4:
                    1c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:30:A6:F2:3A:0E:FD:C5:08:C0:F6:6A:0B:65:9C:0F:28:0D:44:E8
            X509v3 Authority Key Identifier:
                keyid:D1:DC:AF:BF:69:FF:DA:72:B0:82:76:BD:B1:11:93:56:4A:ED:8F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:34:42:9d:c1:b9:85:e9:4c:b9:c2:54:a3:df:a5:1b:88:b2:
         5d:27:8d:81:fd:cb:c1:25:0d:bc:66:38:b0:74:30:e9:10:56:
         51:4c:2b:a7:7d:9d:4c:20:b2:d9:55:25:6f:ca:1b:7e:f7:99:
         d0:eb:d1:4b:ab:4e:1a:92:6b:ee:45:2a:3d:50:80:e5:4e:f2:
         40:73:70:68:e1:af:54:91:f6:10:a6:b8:07:f0:e6:a9:70:59:
         8f:f2:ab:62:43:99:c0:a9:5a:a7:10:f4:7c:ef:47:53:04:ca:
         f6:1b:80:92:b1:96:c9:f4:47:cc:ab:81:41:5e:0f:d7:27:53:
         e0:2e:97:bb:db:b1:b6:9e:72:4c:17:44:b1:dc:90:c3:2e:4f:
         7d:4c:6f:5e:0f:9c:8f:8b:d4:20:34:26:92:59:28:f2:86:05:
         64:cf:ca:0f:8c:87:24:a5:cd:d8:d1:2d:f3:44:80:e6:18:fb:
         e6:a8:50:3d:77:7d:e0:03:66:a1:12:5e:41:b6:a6:04:1e:54:
         21:35:2c:64:09:15:48:9c:73:27:c7:56:f4:1c:f7:1d:c7:71:
         b7:b7:df:d1:dd:f7:41:75:bf:2b:d5:be:65:69:dd:83:99:7b:
         45:64:a2:e2:2e:ae:b8:31:34:72:d5:42:d7:47:79:9a:ec:a8:
         54:b0:6f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:57 2025 by rpki-client