Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
File:                     DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft (raw, json)
Hash identifier:          ACRsOGUxddETVMOl+gjSEukQ8gT7W9qtiJygOwa4DmA=
Subject key identifier:   DF:E2:7F:5D:88:AD:D7:91:8F:3F:54:3E:37:53:B2:B5:84:F5:3F:2F
Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
Certificate issuer:       /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Certificate serial:       0199FB7CB61F19D2B426AFD2AE66F36BD835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 08:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:18 +0000
Files and hashes:         1: 3PndXA_D3bqqZU_dt1ni4TJe5dE.roa (hash: 8PMPMDfbPsDxl+/GYrluB6AWIrxvnE1yub5S0xoxeqw=)
                          2: DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl (hash: XBOmApvrtmwNRTNuUqfL/SOY3H5Rq5CbiSqX06M0IaM=)
                          3: Rx93K2Anpt2piWgsyT2tCcyOdyU.roa (hash: eSyBVCSKa61zR4IGZNVtQpHulzu9iroOreAyMMq9AtQ=)
                          4: V6bHtTcWc0Weg0ExHPfZ-jF_UOg.roa (hash: zjPqUL5Ps4cQOvmd2x7l8voc2WY0ZgzjWtjc6s/1ibs=)
                          5: cgZ6WBJvxmkAMdxkhP2wkgGEdL0.roa (hash: Ll3C8wRu25Vic+LtIEvKcAwf1QS+GIVy+0ziubvLeB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:b6:1f:19:d2:b4:26:af:d2:ae:66:f3:6b:d8:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
        Validity
            Not Before: Oct 19 08:01:18 2025 GMT
            Not After : Oct 20 08:01:18 2025 GMT
        Subject: CN=dfe27f5d88add7918f3f543e3753b2b584f53f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e1:fd:ad:ae:eb:42:25:39:d1:81:58:cf:d1:
                    bb:63:06:89:fa:c4:bb:ef:76:e7:1c:ee:bf:25:88:
                    75:2f:ed:fb:18:31:9e:46:ec:bb:24:28:11:8c:1a:
                    8f:a9:69:46:1c:5f:95:d7:86:31:9e:d6:7c:00:61:
                    41:2d:b0:6e:a0:90:de:91:13:72:0f:cc:f8:5d:25:
                    dc:76:20:ca:cc:44:3d:d4:fb:c5:2a:34:54:bb:2c:
                    3d:1a:85:e5:0e:fe:47:2d:41:cb:d9:4e:b4:05:a7:
                    94:a9:7c:e3:40:bc:3e:a8:32:47:a1:5d:90:0a:20:
                    e4:92:82:24:01:93:87:0c:60:61:bc:38:f1:ca:16:
                    44:10:50:24:2d:b6:31:7e:19:af:7d:16:81:a7:e7:
                    24:a3:87:d6:a3:30:38:70:53:50:a6:df:4b:2c:1b:
                    5d:76:e1:da:83:d9:13:40:f1:1f:e1:06:82:6f:fb:
                    de:d8:07:76:40:75:8b:4a:b2:d5:40:b4:04:22:88:
                    c2:d1:09:81:51:26:6c:2b:b4:46:c3:e5:7c:d4:92:
                    7e:89:13:43:d5:33:f8:38:58:f5:08:9d:6b:8e:5e:
                    d7:d1:13:9f:e2:8f:61:66:83:60:e9:81:55:4e:eb:
                    a1:53:95:cb:db:ff:a5:06:ef:95:17:43:43:58:a8:
                    ce:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E2:7F:5D:88:AD:D7:91:8F:3F:54:3E:37:53:B2:B5:84:F5:3F:2F
            X509v3 Authority Key Identifier:
                keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c5:09:d5:c3:31:89:b3:77:af:d5:1f:1c:b1:78:a0:eb:44:
         7e:e4:54:46:f6:d7:26:49:aa:4c:6d:3f:57:3a:ca:aa:6a:1c:
         92:63:85:6d:b9:1d:64:09:ca:ee:e0:c6:71:3f:8d:77:07:83:
         10:00:60:de:54:a9:49:ec:5d:0f:6c:b6:a9:7d:96:48:42:e4:
         5b:d9:c1:52:a8:95:45:b5:ca:e6:a6:53:cd:db:77:3d:fb:39:
         1a:50:ed:fb:ba:c6:11:1e:54:81:b1:9c:c1:46:6d:62:2b:91:
         05:90:b9:6f:22:75:66:02:9f:58:64:0d:89:4c:0f:48:f1:91:
         d2:00:b8:59:f1:65:59:25:4a:88:f3:86:4e:cb:db:88:6d:63:
         d7:a8:3a:0b:0b:09:90:c9:2c:4d:11:69:fb:91:4d:72:c4:db:
         e0:c2:30:25:e5:77:03:89:ae:69:eb:7f:9e:0b:3c:98:17:b7:
         76:b5:75:50:fc:6f:00:77:b7:3f:0a:01:49:79:00:82:eb:7c:
         7a:a2:09:2a:3b:85:ff:29:d3:c2:46:63:bd:02:e8:b2:db:f2:
         f5:22:9b:63:d3:10:5a:02:47:d8:eb:08:69:99:d3:ca:86:e0:
         4e:f7:0c:ed:09:d1:6a:f9:aa:1d:56:1f:13:ef:6e:ff:87:89:
         b0:21:ad:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:19 2025 by rpki-client