Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
File:                     DC6B06B855BF97C397BDB8516944B4DB18663F92.mft (raw, json)
Hash identifier:          S+SkawmuFrAkF0leRPKIQsXIMTNAlgWIox0nIMKp/98=
Subject key identifier:   97:3B:50:3F:92:86:26:20:6C:D2:8B:4B:3F:3D:15:C6:DE:B3:85:5B
Authority key identifier: DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92
Certificate issuer:       /CN=dc6b06b855bf97c397bdb8516944b4db18663f92
Certificate serial:       1D83AC1B245A987209BF359A9FC439255DD88699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
Manifest number:          030B
Signing time:             Sat 28 Jun 2025 17:48:51 +0000
Manifest this update:     Sat 28 Jun 2025 17:43:51 +0000
Manifest next update:     Sun 29 Jun 2025 20:11:51 +0000
Files and hashes:         1: DC6B06B855BF97C397BDB8516944B4DB18663F92.crl (hash: Rd07ikuI9i8+OfvP/VlwMPW8KDvlogvcLP3wKGl+aNI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:83:ac:1b:24:5a:98:72:09:bf:35:9a:9f:c4:39:25:5d:d8:86:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6b06b855bf97c397bdb8516944b4db18663f92
        Validity
            Not Before: Jun 28 17:43:51 2025 GMT
            Not After : Jun 29 20:11:51 2025 GMT
        Subject: CN=973B503F928626206CD28B4B3F3D15C6DEB3855B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:79:dc:95:0b:5c:2a:08:1b:ea:0e:7a:3f:
                    50:72:57:6d:dc:9e:c4:15:83:a5:7c:d5:cb:f6:fe:
                    03:ee:99:5a:0b:fe:67:78:02:b0:38:49:84:f2:90:
                    6c:f2:c7:99:4a:99:4d:9a:4e:37:9e:2f:1a:b2:59:
                    19:20:8c:5d:c0:b6:2e:e9:72:34:33:12:af:61:17:
                    2d:5b:ac:03:1c:93:bd:52:14:d9:39:b3:62:38:3e:
                    5d:b8:89:4d:a6:a8:aa:d5:04:9c:d7:c2:f6:7f:9b:
                    30:4d:43:ff:30:11:dd:5c:19:a7:e7:8b:b8:78:1b:
                    89:5f:2e:98:16:01:a5:8f:eb:b3:ca:26:d8:47:a7:
                    76:20:4f:d1:9b:96:15:76:68:06:63:f5:db:ae:80:
                    94:29:3c:c1:29:e5:c2:51:09:9e:8b:62:39:89:91:
                    61:aa:76:e7:bc:cc:ec:7b:e6:68:dd:d8:16:f3:be:
                    3e:95:f2:70:04:fe:29:8b:e4:be:ad:91:73:e3:a0:
                    23:9e:81:d6:70:d7:db:a2:e0:40:0e:de:46:80:1d:
                    c1:30:dd:64:7e:d6:01:df:f0:86:d9:51:ab:b7:29:
                    46:12:23:c7:4a:de:62:20:07:88:e8:b8:81:25:7a:
                    2c:87:00:1a:60:ec:51:99:fc:5c:1f:57:8f:91:6f:
                    c6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3B:50:3F:92:86:26:20:6C:D2:8B:4B:3F:3D:15:C6:DE:B3:85:5B
            X509v3 Authority Key Identifier:
                keyid:DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c0:22:28:52:fd:0c:ca:a2:8f:a2:da:ab:b9:4a:25:0a:38:
         51:b0:16:98:a4:b4:a0:a9:ec:d0:53:77:4d:c2:d3:1c:29:0f:
         fd:08:5c:1b:cb:bd:af:d9:75:4d:66:59:08:d5:d6:06:06:89:
         b6:fe:2e:fa:2a:6d:87:1a:77:59:3a:33:0c:fb:1d:fc:7d:da:
         78:75:55:c6:23:30:36:5d:b9:8d:11:e6:2f:89:0a:bd:d9:8e:
         30:58:cc:64:87:0f:90:65:be:37:c0:42:b8:dc:2c:4b:f4:c9:
         75:f9:c0:2f:fd:0c:e2:c7:11:f1:cf:ad:bf:63:3a:13:c6:12:
         b9:fa:3f:9b:0a:ec:5b:cb:31:11:47:d2:5a:2c:6b:bc:c9:2a:
         11:87:f4:76:1f:ab:84:d4:6a:3f:7d:bf:d9:77:ea:d6:22:23:
         24:42:52:ba:57:fc:a3:43:e5:43:c8:d7:9a:0e:e9:0f:f0:ac:
         04:40:67:24:95:f1:e0:9e:5a:a6:19:c1:6b:6d:a6:98:73:0b:
         d7:bf:58:7c:f5:40:fd:18:b3:7c:63:d6:c0:2d:49:eb:79:c7:
         00:74:b1:ca:05:10:08:22:06:4f:ba:c6:40:02:55:18:10:51:
         ba:79:d0:1c:50:ab:9a:1c:20:01:cf:97:ef:15:44:88:26:25:
         8e:7a:c7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:04 2025 by rpki-client