Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
File:                     DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft (raw, json)
Hash identifier:          gciw3QgRExoIaG67FPE/eetWyoPirdy/CaV+LvJgxH8=
Subject key identifier:   DF:BA:EC:85:CE:C3:25:3C:A5:8C:DD:04:6C:DD:C0:3B:E2:99:C7:5B
Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
Certificate issuer:       /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Certificate serial:       0198D5F15B291759D2F35FB6BEADC421F9B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 08:00:21 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:21 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:21 +0000
Files and hashes:         1: 3PndXA_D3bqqZU_dt1ni4TJe5dE.roa (hash: 8PMPMDfbPsDxl+/GYrluB6AWIrxvnE1yub5S0xoxeqw=)
                          2: DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl (hash: Nl+x7HZp6chINERSYCF3xiOv4MjCGPyMnpipvt026uk=)
                          3: Rx93K2Anpt2piWgsyT2tCcyOdyU.roa (hash: eSyBVCSKa61zR4IGZNVtQpHulzu9iroOreAyMMq9AtQ=)
                          4: V6bHtTcWc0Weg0ExHPfZ-jF_UOg.roa (hash: zjPqUL5Ps4cQOvmd2x7l8voc2WY0ZgzjWtjc6s/1ibs=)
                          5: cgZ6WBJvxmkAMdxkhP2wkgGEdL0.roa (hash: Ll3C8wRu25Vic+LtIEvKcAwf1QS+GIVy+0ziubvLeB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:5b:29:17:59:d2:f3:5f:b6:be:ad:c4:21:f9:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
        Validity
            Not Before: Aug 23 08:00:21 2025 GMT
            Not After : Aug 24 08:00:21 2025 GMT
        Subject: CN=dfbaec85cec3253ca58cdd046cddc03be299c75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:74:65:5e:08:19:b2:cf:41:27:4f:d6:7f:
                    aa:39:da:a0:89:d9:29:46:27:ea:80:07:ba:22:de:
                    c0:63:32:a1:58:13:f3:32:13:76:16:a1:8d:70:1f:
                    d2:49:06:8c:b8:15:13:fd:59:8f:e7:6d:f6:f1:16:
                    bb:79:c6:09:5a:a4:e2:ce:89:11:74:21:4c:e7:fc:
                    fe:ca:02:70:28:0d:d9:e7:e4:a5:4a:ed:9e:23:28:
                    4f:a0:0a:4f:fa:09:d3:ac:30:84:2b:8f:71:b5:98:
                    b9:06:07:97:d8:39:e5:51:f6:57:9b:f1:b6:93:90:
                    97:ad:b6:e6:6d:4d:cd:41:e5:ef:66:a1:9b:e8:05:
                    61:72:e8:ff:91:4a:0d:8d:96:09:6c:28:1b:a3:39:
                    d3:3b:de:ec:e0:dd:32:f8:72:52:ea:8e:a9:93:ca:
                    93:9f:ce:a9:52:1d:07:cd:ba:c9:8e:3f:1c:8d:46:
                    6e:ed:3e:64:4f:e1:e6:32:08:50:a3:ee:83:e7:71:
                    ec:5c:68:07:db:c7:94:5b:8e:22:b2:c2:f1:22:28:
                    87:42:83:d1:5f:4b:be:74:b7:0c:4e:ef:4c:6f:b7:
                    1c:93:c0:66:a4:52:1a:2f:e1:20:6d:f1:87:4a:09:
                    af:e9:c8:bc:e2:69:f0:e2:06:db:6e:28:4a:cc:c6:
                    a9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BA:EC:85:CE:C3:25:3C:A5:8C:DD:04:6C:DD:C0:3B:E2:99:C7:5B
            X509v3 Authority Key Identifier:
                keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:76:55:9c:41:8e:54:09:9b:58:44:3d:4b:b6:89:71:1b:a1:
         6e:37:ce:b3:19:b1:2d:1f:d3:29:9c:99:3a:3d:bb:65:d6:38:
         40:ff:ce:64:e0:15:e5:15:63:e5:65:21:ae:fa:31:32:28:30:
         20:09:3f:43:2f:14:8b:a5:9d:ff:e1:16:05:a5:31:8d:a9:bb:
         b7:4e:f9:dc:db:87:5c:c7:3b:3f:fa:fb:89:a4:16:e3:5e:e6:
         83:d6:4e:58:81:2c:74:86:2d:b6:5c:9e:56:60:78:e2:27:90:
         04:26:6f:51:67:a9:10:20:c8:87:e9:bf:b0:7d:77:18:ea:24:
         89:38:7e:75:6e:35:ac:ee:f5:f0:ec:45:00:11:68:0a:8e:0f:
         9d:da:13:fd:5a:39:2f:56:b4:bb:e0:49:a6:09:47:e2:7c:55:
         c5:43:29:49:3d:8d:2a:00:a5:b3:22:75:f7:ac:ff:c8:dd:e6:
         7e:1e:c2:de:3a:f5:06:c3:53:c6:d1:e6:44:25:a4:58:87:36:
         48:c6:ba:34:9a:f7:09:23:9c:91:4e:33:ac:e5:ec:34:79:39:
         32:4b:c9:dd:61:ae:c1:e7:79:6f:56:1f:14:cf:34:bd:e2:2e:
         8f:2c:31:02:9f:5d:a6:7a:e5:10:ca:55:87:d2:a1:fc:9f:58:
         d7:50:18:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:35 2025 by rpki-client