Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft
File:                     DvD-irs27bvvRGptVK24YsSrO6E.mft (raw, json)
Hash identifier:          3LmOecuVmvnqgc7c0ljXGPgU9ExoK7yVo4DOhosMku4=
Subject key identifier:   31:17:D8:E4:A4:09:35:8C:82:78:1D:1E:A9:7D:2F:6A:A7:C4:9F:07
Authority key identifier: 0E:F0:FE:8A:BB:36:ED:BB:EF:44:6A:6D:54:AD:B8:62:C4:AB:3B:A1
Certificate issuer:       /CN=0ef0fe8abb36edbbef446a6d54adb862c4ab3ba1
Certificate serial:       0198D65F3F1B33969E521773837979385DFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvD-irs27bvvRGptVK24YsSrO6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft
Manifest number:          0D7F
Signing time:             Sat 23 Aug 2025 10:00:22 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:22 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:22 +0000
Files and hashes:         1: DvD-irs27bvvRGptVK24YsSrO6E.crl (hash: 1kJCdUm+Ee6hGCvsp8ZR0YeZbalbwJjZVzOF+LGMe3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvD-irs27bvvRGptVK24YsSrO6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:3f:1b:33:96:9e:52:17:73:83:79:79:38:5d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef0fe8abb36edbbef446a6d54adb862c4ab3ba1
        Validity
            Not Before: Aug 23 10:00:22 2025 GMT
            Not After : Aug 24 10:00:22 2025 GMT
        Subject: CN=3117d8e4a409358c82781d1ea97d2f6aa7c49f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7d:d8:58:82:8b:62:3c:e0:12:fa:6f:39:58:
                    c3:5d:28:2a:55:6d:a8:b1:81:a3:74:bd:19:7c:af:
                    14:89:38:63:c2:16:38:92:10:7d:67:48:e6:e8:40:
                    d0:9c:3f:36:c0:87:39:a6:04:75:20:7e:f8:fd:85:
                    54:60:82:54:e3:32:ff:38:2d:91:25:83:4e:12:52:
                    68:e7:7e:be:a4:17:da:cc:32:4a:67:21:0d:7c:a2:
                    1b:3d:e0:f8:ad:8f:91:1b:b3:ed:69:ca:bd:99:99:
                    07:f4:f4:3d:36:a3:78:9e:98:33:68:15:09:a7:b2:
                    7d:b4:20:1f:b0:67:f2:58:4e:af:86:dd:c4:d9:f9:
                    fd:e4:39:41:97:23:30:74:3e:44:2d:cd:0d:a4:05:
                    4a:2f:a0:ce:16:ae:6b:50:0a:11:a0:51:10:73:73:
                    4f:a6:e0:d6:1e:f9:53:c6:85:6e:d0:e2:fb:0b:f3:
                    c5:a8:35:ed:ae:aa:62:47:57:c7:e3:f1:bd:31:c3:
                    99:f6:4b:be:de:b4:4a:15:f3:ed:7c:35:8e:25:37:
                    fe:77:d5:90:95:ee:29:e7:0c:1c:73:44:ad:b3:b5:
                    2a:6d:72:8c:73:b4:22:e3:75:1b:30:38:9b:58:f7:
                    4d:cf:4d:df:89:57:f5:a1:db:f3:b8:8b:c3:f9:a5:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:17:D8:E4:A4:09:35:8C:82:78:1D:1E:A9:7D:2F:6A:A7:C4:9F:07
            X509v3 Authority Key Identifier:
                keyid:0E:F0:FE:8A:BB:36:ED:BB:EF:44:6A:6D:54:AD:B8:62:C4:AB:3B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvD-irs27bvvRGptVK24YsSrO6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/831ecb-ab1f-4427-8d60-f746652444da/1/DvD-irs27bvvRGptVK24YsSrO6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:da:3a:41:b1:a0:e0:23:2c:7d:9f:e2:a4:bd:d3:42:93:c0:
         c8:82:c2:b0:6b:cc:5d:63:88:d8:7e:48:3b:d4:c3:60:92:eb:
         76:a8:30:75:d4:ab:93:69:d8:23:43:0d:c9:cd:de:90:07:bf:
         41:01:39:0f:ae:94:4d:d1:f3:15:f7:5c:da:2d:3f:13:bf:82:
         c3:30:6c:90:5d:96:8b:3c:06:34:42:4c:d7:2a:8a:34:24:d7:
         a6:59:54:f0:06:ed:ee:ce:a5:f3:89:63:4f:62:ec:4e:e1:0c:
         d0:d5:5e:97:c7:cd:aa:43:c3:dc:34:7c:aa:d8:94:1c:32:db:
         de:d9:d2:1d:89:3a:ac:af:5c:b7:84:6f:45:c1:fc:70:94:04:
         54:9f:29:7e:d0:7f:57:a5:e2:e9:06:0d:4b:e6:cc:d7:e0:1d:
         6b:dd:0c:e8:3c:99:03:42:b2:a2:26:28:3b:8b:39:9f:71:28:
         40:13:d0:27:f1:fb:66:3d:a8:10:6e:a0:7c:22:10:fd:50:34:
         a2:e6:d4:85:77:3f:87:dd:35:80:07:8b:21:03:c1:4d:7e:d8:
         85:31:f4:b3:de:ea:46:84:0b:63:10:6f:f6:ea:f8:4f:12:02:
         26:26:87:ec:62:42:c4:c9:43:35:4a:9f:2b:7d:b4:f4:d4:8d:
         1e:6c:5d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:47 2025 by rpki-client