Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File:                     DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier:          uutJZtalQnUqx8inArv3TF2RFLRDbFGIqAznjhuYDtA=
Subject key identifier:   B1:6C:8F:6B:9C:96:FB:0E:42:EE:84:7E:05:9A:6A:69:EF:78:D0:64
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer:       /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial:       0198D4A80C67478E3F86D9AF681264BD4003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number:          0E22
Signing time:             Sat 23 Aug 2025 02:00:39 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:39 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:39 +0000
Files and hashes:         1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: JF7jyjBXiHMDHwiyigdUVe5TzopNIUEgxK1sXGJ+yQI=)
                          2: WLSJNsKtp7tRpU1OJgVstTs_lJ8.roa (hash: HTWALMbF2cmOkLXiJznP+o3iPW0wZUQzmHPHS3MTUp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:0c:67:47:8e:3f:86:d9:af:68:12:64:bd:40:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
        Validity
            Not Before: Aug 23 02:00:39 2025 GMT
            Not After : Aug 24 02:00:39 2025 GMT
        Subject: CN=b16c8f6b9c96fb0e42ee847e059a6a69ef78d064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:61:3e:59:bb:6a:c3:9d:51:71:26:c3:8a:
                    f2:ee:89:64:5d:dd:e1:85:3c:c4:63:5a:a1:6e:99:
                    9f:38:9c:ee:03:14:a1:e2:63:c7:22:1e:2f:a8:e5:
                    fd:36:ac:61:ed:78:88:b3:e2:9f:9b:a9:c3:a8:15:
                    e7:33:29:2f:0b:84:e4:ad:8b:32:07:ee:58:55:79:
                    5a:67:04:fe:0c:70:e6:db:10:16:4e:69:5f:cf:63:
                    86:df:bd:9b:47:f6:50:17:11:c7:11:5b:80:ea:51:
                    06:14:80:34:1f:a2:49:1b:43:cd:46:de:b6:ae:d4:
                    ef:0a:a0:38:19:ae:93:d9:28:68:52:9f:84:7c:02:
                    b6:d8:eb:16:0f:df:27:5a:7a:55:d9:e0:ea:97:2d:
                    d8:fb:ff:3e:7e:5f:0c:9f:1d:5f:1b:48:09:0f:c9:
                    c3:e6:97:99:f9:26:9e:9c:5a:b4:22:cd:4c:a6:01:
                    3d:fc:51:35:3b:c7:59:1b:03:f7:ff:fd:5e:7f:c6:
                    51:e0:87:4a:36:5d:0d:5d:62:7e:82:2b:be:6b:1d:
                    62:8f:54:6d:48:72:dd:e4:0f:80:3e:ec:0e:ad:15:
                    c1:f0:02:bd:22:fe:19:97:e4:0e:74:46:22:3b:f7:
                    3d:71:a4:d1:93:e8:14:91:42:15:86:98:83:c6:ff:
                    c4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6C:8F:6B:9C:96:FB:0E:42:EE:84:7E:05:9A:6A:69:EF:78:D0:64
            X509v3 Authority Key Identifier:
                keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d5:d9:06:e4:28:f6:64:c3:21:ce:36:46:d9:22:10:a5:fb:
         25:96:21:af:79:83:58:04:ee:1f:a3:b3:03:13:17:a0:10:9d:
         0d:57:02:7d:9a:0c:ce:5a:5a:11:57:59:e8:bb:aa:13:9a:d7:
         5c:20:40:35:85:6a:47:53:70:07:fd:1d:f6:03:0f:4f:bd:ae:
         6d:52:55:27:ac:6c:73:07:52:57:cb:c0:73:cd:f2:c9:e7:a0:
         69:46:1e:ba:1a:03:a7:61:75:8e:46:6f:53:29:b5:4b:00:4f:
         72:9f:d3:4f:b3:48:6e:fd:48:fc:e6:e5:c2:7f:15:17:a5:b8:
         d7:8c:48:bf:85:46:da:43:fd:9e:87:5f:67:1f:32:c7:8f:a3:
         d5:29:9a:15:de:ca:a9:92:0c:2e:cf:f8:4f:f2:57:c5:26:c4:
         e3:37:a5:ef:5a:57:86:62:d0:de:43:ff:f5:4b:81:da:06:8d:
         fa:f1:97:be:6d:46:dd:b1:25:80:aa:e5:9f:d1:db:98:f2:60:
         cf:d6:0d:45:af:da:52:06:1d:a5:ae:14:eb:a0:c2:19:77:7f:
         65:3b:d7:ee:2d:9e:ce:45:41:c5:53:5a:2d:3e:10:7a:52:e5:
         1b:b3:f9:1c:ae:f6:dc:c9:bc:a9:35:d3:18:b1:49:e0:fe:95:
         77:a4:44:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqAxnR44/htmvaBJkvUADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGZjOGRmODRmYmYyYWI0MDQxMmU2ZDRhZGZmN2MxYjg0
YTViMmYwHhcNMjUwODIzMDIwMDM5WhcNMjUwODI0MDIwMDM5WjAzMTEwLwYDVQQD
EyhiMTZjOGY2YjljOTZmYjBlNDJlZTg0N2UwNTlhNmE2OWVmNzhkMDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM1hPlm7asOdUXEmw4ry7olkXd3h
hTzEY1qhbpmfOJzuAxSh4mPHIh4vqOX9Nqxh7XiIs+Kfm6nDqBXnMykvC4TkrYsy
B+5YVXlaZwT+DHDm2xAWTmlfz2OG372bR/ZQFxHHEVuA6lEGFIA0H6JJG0PNRt62
rtTvCqA4Ga6T2ShoUp+EfAK22OsWD98nWnpV2eDqly3Y+/8+fl8Mnx1fG0gJD8nD
5peZ+SaenFq0Is1MpgE9/FE1O8dZGwP3//1ef8ZR4IdKNl0NXWJ+giu+ax1ij1Rt
SHLd5A+APuwOrRXB8AK9Iv4Zl+QOdEYiO/c9caTRk+gUkUIVhpiDxv/EqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFsj2uclvsOQu6EfgWaamnveNBkMB8GA1UdIwQY
MBaAFA2PyN+E+/KrQEEubUrf98G4SlsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgt
Njg4NzYyYmI5ODVlLzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgtNjg4NzYyYmI5ODVl
LzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdXZBuQo
9mTDIc42RtkiEKX7JZYhr3mDWATuH6OzAxMXoBCdDVcCfZoMzlpaEVdZ6LuqE5rX
XCBANYVqR1NwB/0d9gMPT72ubVJVJ6xscwdSV8vAc83yyeegaUYeuhoDp2F1jkZv
Uym1SwBPcp/TT7NIbv1I/Oblwn8VF6W414xIv4VG2kP9nodfZx8yx4+j1SmaFd7K
qZIMLs/4T/JXxSbE4zel71pXhmLQ3kP/9UuB2gaN+vGXvm1G3bElgKrln9HbmPJg
z9YNRa/aUgYdpa4U66DCGXd/ZTvX7i2ezkVBxVNaLT4QelLlG7P5HK723Mm8qTXT
GLFJ4P6Vd6REmw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:02 2025 by rpki-client