Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
File:                     DycDq41ZdUqyeopRaFRZG_sPLbc.mft (raw, json)
Hash identifier:          RJU6y1Ek4LSnIc461PhR7A3V2oj98wq78/CxA0dzET4=
Subject key identifier:   92:D0:60:92:43:EC:65:87:EE:30:DB:64:B8:2A:6C:F0:CA:84:8F:EA
Authority key identifier: 0F:27:03:AB:8D:59:75:4A:B2:7A:8A:51:68:54:59:1B:FB:0F:2D:B7
Certificate issuer:       /CN=0f2703ab8d59754ab27a8a516854591bfb0f2db7
Certificate serial:       0198D4DFF6AFFCE7A936D5357E5FB338B1CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
Manifest number:          59
Signing time:             Sat 23 Aug 2025 03:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:44 +0000
Files and hashes:         1: DycDq41ZdUqyeopRaFRZG_sPLbc.crl (hash: N/gn7d3pS+IjnJKLh5jkkSL2tIu/SbWr3W1DesARats=)
                          2: EvvE5cYylw_MjstUmUy-jk4YLrA.roa (hash: gBE8rDGiUuVhCkWL45jKVIjPxTgyeFG4wEdX18IeEVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:f6:af:fc:e7:a9:36:d5:35:7e:5f:b3:38:b1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f2703ab8d59754ab27a8a516854591bfb0f2db7
        Validity
            Not Before: Aug 23 03:01:44 2025 GMT
            Not After : Aug 24 03:01:44 2025 GMT
        Subject: CN=92d0609243ec6587ee30db64b82a6cf0ca848fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:66:cc:92:11:a1:df:7f:53:94:5f:8d:9f:9f:
                    ef:13:7c:60:58:b1:53:5c:65:fb:42:7f:e5:49:d5:
                    3a:24:5c:d7:ff:39:f4:02:66:49:91:e6:b9:ca:56:
                    47:42:ec:8c:13:1f:b9:af:2d:44:0d:f8:72:42:21:
                    47:20:57:11:cb:16:b7:b6:43:43:1e:61:95:ea:8f:
                    61:3a:ac:ab:49:ed:e3:a2:40:d8:52:14:03:63:aa:
                    a2:ea:dd:bb:b7:c9:97:73:96:d7:6c:16:7e:ff:4a:
                    91:40:3b:e1:61:8b:8e:e2:41:6e:c2:9b:78:e7:22:
                    d7:e7:25:70:db:9c:3c:9b:19:f0:96:77:c7:fa:7e:
                    76:e3:bf:92:5b:da:17:26:5c:a5:95:07:01:c0:40:
                    47:44:28:24:9c:1c:4b:5a:8f:0e:e2:aa:96:e8:6f:
                    0b:70:4d:5e:1b:ad:d7:8c:f3:67:ee:15:4f:2b:30:
                    d2:c0:79:55:b6:c6:d4:54:7e:de:ac:ea:14:2b:d6:
                    bd:8a:83:ee:b9:70:79:e4:23:bb:0c:ba:d2:4d:54:
                    97:4c:d5:05:83:41:d7:83:35:fe:66:0d:eb:9d:51:
                    9b:93:a3:e9:f5:71:5d:48:23:93:72:0d:ea:40:b3:
                    4c:40:a7:d1:9f:c9:3c:87:ea:0b:e8:bd:b1:c1:29:
                    14:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D0:60:92:43:EC:65:87:EE:30:DB:64:B8:2A:6C:F0:CA:84:8F:EA
            X509v3 Authority Key Identifier:
                keyid:0F:27:03:AB:8D:59:75:4A:B2:7A:8A:51:68:54:59:1B:FB:0F:2D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:b1:0e:07:a7:c6:ea:22:42:4e:25:b8:4f:29:2a:f7:c4:45:
         6f:5a:69:92:68:20:85:f8:79:26:2d:56:a5:7e:b3:47:22:06:
         d4:4b:c7:a2:96:3e:19:63:62:6b:f7:ef:ee:a4:a5:7a:64:3a:
         0e:f4:bb:a7:9b:74:74:38:bd:a2:ef:83:d6:f0:88:f2:e8:1f:
         0f:ba:0e:dd:d7:d4:a3:d0:78:af:9e:dd:5e:7e:77:e1:f1:10:
         58:bc:2d:b9:2b:6e:ab:61:7b:9f:d7:33:37:b0:fa:05:c9:8d:
         79:94:7f:83:e9:c2:58:0e:60:14:d7:c9:5a:4e:8f:dc:3f:9b:
         23:d8:c8:40:d8:ae:8e:cd:c0:ad:7d:5e:b3:6b:d2:a9:92:30:
         a6:bb:37:b2:9a:0c:d4:d6:ab:7e:ef:7c:ce:05:30:09:f6:f1:
         3f:01:1d:f9:4e:78:06:c5:4f:a1:b3:dc:53:92:67:87:58:9d:
         40:63:88:b2:e3:fd:99:a6:53:66:09:b0:c7:d9:75:4c:e8:ad:
         23:80:f8:1e:9b:b2:6b:d7:5e:41:db:0a:19:12:ca:d8:50:59:
         f8:a5:e3:0c:dd:c1:13:2a:27:3e:df:e3:cd:d3:7b:b7:f1:f6:
         35:57:2a:16:9c:b9:e4:c5:c1:df:e1:17:fe:f0:6c:63:d0:9f:
         2b:d3:45:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:42 2025 by rpki-client