Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
File:                     DC6B06B855BF97C397BDB8516944B4DB18663F92.mft (raw, json)
Hash identifier:          YhTH15tUBMEwW0WSb2kLbxQpKuLR+w09Zc+XkzOpXbQ=
Subject key identifier:   23:DE:E9:F4:57:3D:B3:E2:E3:87:35:82:6E:30:3C:B1:59:BC:04:6E
Authority key identifier: DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92
Certificate issuer:       /CN=dc6b06b855bf97c397bdb8516944b4db18663f92
Certificate serial:       457988D4E0D0B724230E8478D59861E24C28ECA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
Manifest number:          0355
Signing time:             Sat 23 Aug 2025 01:27:57 +0000
Manifest this update:     Sat 23 Aug 2025 01:22:57 +0000
Manifest next update:     Sun 24 Aug 2025 04:38:57 +0000
Files and hashes:         1: DC6B06B855BF97C397BDB8516944B4DB18663F92.crl (hash: C95RteZGPMFFruCbPZ/eRdzowEu/wzC3cbAI+psVsqw=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:79:88:d4:e0:d0:b7:24:23:0e:84:78:d5:98:61:e2:4c:28:ec:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6b06b855bf97c397bdb8516944b4db18663f92
        Validity
            Not Before: Aug 23 01:22:57 2025 GMT
            Not After : Aug 24 04:38:57 2025 GMT
        Subject: CN=23DEE9F4573DB3E2E38735826E303CB159BC046E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:cb:82:91:0c:d3:e1:ac:dd:3f:a6:f2:a3:
                    b8:78:84:b0:f5:7b:f1:6d:03:9a:23:96:b6:02:ed:
                    c2:db:12:6d:4e:58:53:d5:bc:e6:6c:b6:95:a6:7f:
                    de:17:b8:bb:df:3c:5d:48:15:c5:37:0e:a0:3f:ab:
                    64:29:c3:e8:6d:a9:7a:c9:e3:f8:73:be:5d:95:d3:
                    e9:09:33:3c:63:e7:be:4c:8e:7d:94:84:a4:35:1c:
                    d2:88:8f:c2:9a:ba:4c:d7:25:ed:7c:d4:fc:99:2e:
                    c1:62:7c:40:42:40:97:6d:68:33:01:8f:6d:6b:01:
                    b6:6f:42:99:90:6d:24:47:b3:19:e6:1f:54:8d:48:
                    47:ad:d5:e7:76:0a:ab:2b:c5:4e:94:c8:31:f5:64:
                    f7:49:3d:2f:d4:4b:c6:ff:e7:e2:93:66:b1:9e:d3:
                    54:5b:e8:aa:bd:ce:56:85:cf:9d:9f:98:23:b0:8d:
                    bf:48:2f:83:8f:dd:41:8d:44:b4:44:7e:45:fc:35:
                    fa:91:1f:7d:09:4d:64:e7:d9:3c:82:7f:3e:30:5e:
                    40:33:65:f9:10:d0:1c:87:5b:87:f4:0b:61:37:71:
                    1e:6e:f8:f4:d6:63:23:ed:8d:07:74:39:ae:d8:9f:
                    2d:a6:53:d7:31:d1:4a:4b:84:ea:77:20:6d:2e:96:
                    4d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:DE:E9:F4:57:3D:B3:E2:E3:87:35:82:6E:30:3C:B1:59:BC:04:6E
            X509v3 Authority Key Identifier:
                keyid:DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:aa:6e:bd:5b:28:33:3c:86:a9:78:e0:ed:6d:2b:0b:bb:84:
         ce:67:cb:71:4e:45:e6:34:6e:0e:6c:75:52:8c:60:29:6d:b5:
         06:e3:6b:6b:25:ce:1e:cc:a5:3a:a6:8c:a7:89:0b:1f:53:64:
         a1:2d:51:73:da:11:31:04:ab:51:b7:62:3c:17:7d:40:4f:01:
         36:99:8b:f5:34:b9:27:20:3a:10:11:d5:f3:80:70:11:58:7f:
         c8:11:05:d2:1c:4d:dd:9e:0f:82:f2:2b:1d:f5:73:4b:78:3d:
         07:50:4b:32:b5:be:ba:34:69:a5:b0:b9:39:19:e3:18:60:c1:
         43:d0:00:c4:1b:50:12:32:2f:aa:89:52:a5:fe:f0:cc:05:dd:
         25:af:fa:63:85:a9:1e:cf:b8:4a:1c:a4:b4:4b:69:5e:d0:76:
         1f:d7:df:ce:c1:91:da:cf:d3:69:f4:0a:69:cd:ac:da:aa:e8:
         11:8d:55:2b:e1:7a:f7:83:02:29:43:7a:41:39:4c:27:7f:db:
         7d:bf:7c:8f:12:be:e5:2c:b2:f8:6f:4e:8d:79:f3:d5:27:60:
         99:da:1c:1b:99:f9:b1:b3:a6:08:63:74:e8:4a:2d:c3:92:31:
         d8:2f:b7:dd:75:47:c8:19:74:96:2f:11:a6:98:a2:b2:1b:b7:
         ce:9b:a3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:41:41 2025 by rpki-client