Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
File:                     DyP3PWT22_gdUdNYBUgVaM3YGHU.mft (raw, json)
Hash identifier:          FnOLCTE2J5U/0yVqfJQITZbgDaP89Fd2wJLNVoutRzc=
Subject key identifier:   8F:A2:82:11:F6:55:33:14:C0:0F:E3:20:2C:D9:BD:9A:C6:49:42:45
Authority key identifier: 0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
Certificate issuer:       /CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Certificate serial:       019D265F0BDFF614BC7FC0D71676FF8D7C37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
Manifest number:          104F
Signing time:             Wed 25 Mar 2026 19:00:56 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:56 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:56 +0000
Files and hashes:         1: DyP3PWT22_gdUdNYBUgVaM3YGHU.crl (hash: EiSFHgz4s452uosIsgL1RgnjCbQzzERILzpdvm3IgIY=)
                          2: ancLH9rsRbLYVZt0JNdPMXKNpK0.roa (hash: rcYMBMHI8US97MASNfqHUHYDCTe+glT7idqsTc69Xuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:0b:df:f6:14:bc:7f:c0:d7:16:76:ff:8d:7c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f23f73d64f6dbf81d51d35805481568cdd81875
        Validity
            Not Before: Mar 25 19:00:56 2026 GMT
            Not After : Mar 26 19:00:56 2026 GMT
        Subject: CN=8fa28211f6553314c00fe3202cd9bd9ac6494245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:7d:d4:34:92:56:c4:a5:32:f4:b6:2b:96:
                    fd:58:6c:f2:ba:82:00:65:7b:47:8b:4a:64:ef:53:
                    d0:b6:0d:b7:61:ea:54:79:61:0e:f4:af:b3:a0:e7:
                    ca:ad:12:71:62:30:4e:6c:25:e5:ae:d2:1b:3d:31:
                    df:90:68:a0:8c:42:8b:e2:48:75:2e:b6:67:28:b7:
                    14:67:6b:4e:e8:72:2e:54:1e:59:78:5a:36:ee:5c:
                    3f:7c:4d:4e:42:14:1d:89:af:66:fa:f5:3c:9b:df:
                    2e:82:e2:65:73:d5:95:b4:9b:b5:e0:d0:28:4a:e2:
                    36:39:59:23:68:c9:f9:fa:46:be:2f:07:b4:9c:0c:
                    dd:12:41:e9:a5:95:63:fd:6e:b0:67:4a:fb:c3:73:
                    c7:11:59:5a:2e:78:5e:1b:52:f5:59:ad:a5:82:06:
                    c9:83:3c:24:02:4c:27:33:2c:2c:72:dc:a7:22:46:
                    5b:66:a7:56:d9:47:89:71:4c:3c:fd:12:a5:af:ae:
                    11:e2:a5:89:21:f9:f4:df:cf:23:30:7a:e8:ef:0c:
                    f7:2a:90:e3:f0:38:87:7d:12:15:c8:7c:e6:2d:5a:
                    12:97:25:2d:96:60:46:76:91:93:9e:48:80:a7:25:
                    c2:6f:93:20:50:1b:27:1d:42:59:85:d2:0f:c5:8e:
                    a1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:A2:82:11:F6:55:33:14:C0:0F:E3:20:2C:D9:BD:9A:C6:49:42:45
            X509v3 Authority Key Identifier:
                keyid:0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:38:70:0a:12:a0:d7:ec:36:1b:e5:a6:e4:b9:7c:e7:b6:b6:
         3c:d9:0b:0c:64:1e:83:bb:e9:7b:33:d8:72:6c:76:b4:e5:f0:
         6a:87:e3:26:87:32:45:84:a3:cd:e6:45:8c:6a:9b:ef:9c:57:
         e0:cf:07:78:5d:17:fe:c7:7e:c4:2c:20:ce:2d:96:29:e1:96:
         98:66:41:d3:b9:ac:24:f8:8f:4d:38:5d:81:a1:6a:f9:4c:b0:
         79:7d:ab:a4:14:fd:4e:d8:ab:b9:87:1f:29:75:27:de:db:77:
         a8:92:73:3e:66:bd:bd:cd:04:ee:04:e3:95:e7:05:5c:f6:f7:
         c1:81:a1:1e:9a:e8:a1:1d:2f:be:ca:3c:f4:07:c3:c6:17:01:
         03:1c:0e:0b:43:72:c0:7f:44:18:7c:57:36:6d:5b:90:83:38:
         72:43:2c:ee:3a:9f:62:4a:25:e7:df:bf:0f:a1:18:44:7d:83:
         72:68:24:8a:1e:08:3a:dc:51:a4:ff:ea:0d:7d:a3:50:9d:25:
         a5:23:4d:b8:2c:2b:c5:22:90:e6:1b:6d:c0:63:c7:0c:d4:e5:
         db:8d:14:33:5e:3a:8c:34:b8:3c:6c:03:8a:39:9d:db:4a:77:
         8e:e8:0c:cb:28:51:42:40:47:2f:9c:91:6e:72:6a:0c:e5:7e:
         ab:2f:b1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:04 2026 by rpki-client