Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
File:                     0dyvv2n_2nKwgna9sRGTVkrtj5c.mft (raw, json)
Hash identifier:          9jDivaTN6n3eu+N6UQ5LfQKfpySQ9xFPBfj/Yzgx5rk=
Subject key identifier:   8D:57:18:D3:44:47:F4:B6:E9:3D:E3:B9:41:B3:A0:F3:5F:0D:C6:19
Authority key identifier: D1:DC:AF:BF:69:FF:DA:72:B0:82:76:BD:B1:11:93:56:4A:ED:8F:97
Certificate issuer:       /CN=d1dcafbf69ffda72b08276bdb11193564aed8f97
Certificate serial:       0199FBEBBED85D0E2F0B64D182EBB1C65E1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
Manifest number:          16DF
Signing time:             Sun 19 Oct 2025 10:02:35 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:35 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:35 +0000
Files and hashes:         1: 0dyvv2n_2nKwgna9sRGTVkrtj5c.crl (hash: ksOJwzQvXCrd0FZH+ErIGeIqhDvU/Ctrt/8DehBFVTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:be:d8:5d:0e:2f:0b:64:d1:82:eb:b1:c6:5e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1dcafbf69ffda72b08276bdb11193564aed8f97
        Validity
            Not Before: Oct 19 10:02:35 2025 GMT
            Not After : Oct 20 10:02:35 2025 GMT
        Subject: CN=8d5718d34447f4b6e93de3b941b3a0f35f0dc619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3b:2c:8e:00:71:86:4f:2a:00:9c:0b:49:b0:
                    3f:15:79:f9:9d:da:25:ef:79:8c:78:fb:31:f7:80:
                    a9:6e:eb:66:fa:79:53:87:3c:b5:ee:65:e0:f9:2f:
                    ad:48:31:4b:04:f6:19:01:00:47:3d:d7:a8:7c:2d:
                    1a:62:29:e9:7a:6c:3f:29:3f:4e:a7:48:32:64:ec:
                    9c:83:1f:fc:e2:5b:44:d7:47:2d:f7:df:2c:1a:71:
                    3e:86:37:3e:fb:6b:73:44:3f:46:ce:07:24:f2:34:
                    d3:40:9d:55:9a:80:5d:6b:74:58:53:63:a4:1f:d3:
                    41:91:6f:10:c0:a1:85:4e:66:80:e1:68:cb:62:10:
                    f9:af:49:0b:80:39:5a:42:7c:41:d9:92:4d:d1:d9:
                    2e:7b:51:18:83:84:53:b8:4f:68:de:6f:e3:53:25:
                    ff:18:c2:4f:66:d5:2d:2c:55:d6:5c:7d:da:bd:ac:
                    2b:4e:17:f9:86:31:25:67:26:e1:46:ca:92:79:00:
                    8d:dc:c4:1a:2d:ec:51:d5:79:6e:a8:48:20:75:63:
                    69:78:26:a7:a1:5e:e9:bf:40:b2:8f:22:2a:ea:14:
                    e3:fb:dc:ba:8c:7b:f4:91:da:bf:a2:6b:42:88:3d:
                    49:22:ff:99:d7:85:54:a0:06:90:dc:f4:88:00:21:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:57:18:D3:44:47:F4:B6:E9:3D:E3:B9:41:B3:A0:F3:5F:0D:C6:19
            X509v3 Authority Key Identifier:
                keyid:D1:DC:AF:BF:69:FF:DA:72:B0:82:76:BD:B1:11:93:56:4A:ED:8F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:16:fb:ef:97:2f:0a:a2:7d:5b:7f:ca:fa:cc:9b:f9:f5:85:
         55:27:15:c7:e3:c3:69:ad:72:5d:d7:24:45:97:29:fa:40:1f:
         41:98:48:58:c7:16:15:39:ec:1f:b8:98:41:d1:85:37:eb:99:
         da:b6:1b:4d:1f:2b:07:59:d3:19:09:f3:7c:b9:4d:da:21:03:
         c7:d2:50:d5:ca:48:ae:19:2e:ea:22:12:38:37:e8:7e:c6:e7:
         f8:a7:fe:6f:ec:71:13:38:0a:18:65:1f:52:60:ee:88:ca:66:
         09:ce:58:03:ae:13:63:4b:57:58:a8:13:2e:52:e9:e2:b2:78:
         c0:5c:fe:b5:c1:39:b6:67:b3:dc:2f:c6:f4:61:14:e1:7e:5d:
         09:ea:c8:ed:34:39:b5:b8:7a:f7:6e:64:c5:2c:a0:2f:4f:cd:
         25:10:db:4d:dd:42:8c:b5:f0:a4:1c:94:03:f5:5c:47:ad:92:
         69:ea:d6:ce:d7:a9:36:1e:49:d1:98:27:a0:dd:4d:ea:9b:7d:
         7a:ab:04:e9:d2:f1:7b:0e:a9:74:92:bb:14:56:80:b0:28:70:
         78:ce:2c:bc:1a:50:1d:18:ed:00:12:43:f6:76:7d:37:36:69:
         a7:0d:86:ca:70:d5:47:89:e2:5f:33:eb:67:d6:28:ff:b2:f1:
         35:81:68:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:04 2025 by rpki-client