Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
File:                     DyP3PWT22_gdUdNYBUgVaM3YGHU.mft (raw, json)
Hash identifier:          X3ylQjW9quf+v8XigCQD+q3xFZ6ctEOxKybeI/qyQ3Y=
Subject key identifier:   ED:4D:D3:F9:0A:CB:B8:31:74:1E:97:2F:05:4E:C9:5C:DF:76:7A:96
Authority key identifier: 0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
Certificate issuer:       /CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Certificate serial:       0198D5F1590AC1BE1645DDE00534CABB3BE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
Manifest number:          0E13
Signing time:             Sat 23 Aug 2025 08:00:20 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:20 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:20 +0000
Files and hashes:         1: DyP3PWT22_gdUdNYBUgVaM3YGHU.crl (hash: a/jG23wVtLc7ysHB5wT4N9aAw/uTLDdjSPuqlBnzRz8=)
                          2: _mseEGqhmjk5DbDhY65kEG9l3Do.roa (hash: 4EKC+djlGJVTHQZoZJyp3llh1Qpa/Gw18st2TTUCkbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:59:0a:c1:be:16:45:dd:e0:05:34:ca:bb:3b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f23f73d64f6dbf81d51d35805481568cdd81875
        Validity
            Not Before: Aug 23 08:00:20 2025 GMT
            Not After : Aug 24 08:00:20 2025 GMT
        Subject: CN=ed4dd3f90acbb831741e972f054ec95cdf767a96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:6f:cc:e6:a8:ca:7e:20:e1:2e:91:54:72:
                    94:ea:ea:c2:9c:62:ea:05:95:c0:ed:a1:64:92:0d:
                    98:f0:10:4f:f0:22:08:1a:b6:93:30:84:43:05:ea:
                    7c:b1:72:66:a9:ae:cb:f5:79:2f:80:41:93:e6:29:
                    fd:2f:6f:ad:d8:a5:08:a0:ee:39:e8:a6:e8:52:e8:
                    87:95:a1:85:39:4d:8a:18:7a:67:e5:4c:14:17:92:
                    87:92:8a:8b:d5:53:73:c2:ea:85:46:9f:1e:bc:b5:
                    75:71:34:77:ce:23:1f:a0:09:30:80:78:2f:53:c6:
                    4b:14:c9:1a:e8:37:53:cd:05:9c:af:1f:b4:25:8a:
                    4a:3e:bf:26:4e:ee:8c:1d:ef:e7:a5:a5:bf:f2:70:
                    62:e4:3c:d0:f6:8c:6a:08:24:be:a3:28:9d:7c:1c:
                    34:c9:75:29:f6:67:e3:cf:15:18:95:81:24:a1:8c:
                    a9:80:e9:cd:c7:5e:92:a4:26:7f:46:35:b3:eb:63:
                    b2:8b:23:3a:01:99:7a:7a:ab:6b:4b:52:8e:17:4f:
                    e6:9b:8e:6e:d4:ed:dd:f8:1b:55:68:fb:0c:64:90:
                    20:94:a7:9e:df:b6:f4:ee:b9:23:00:25:2b:81:6a:
                    1c:cf:a2:f7:cb:75:73:f8:c9:62:8a:98:dc:7c:b8:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4D:D3:F9:0A:CB:B8:31:74:1E:97:2F:05:4E:C9:5C:DF:76:7A:96
            X509v3 Authority Key Identifier:
                keyid:0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f0:b5:ef:39:11:f1:6a:f4:32:96:58:28:a6:8c:ba:47:6d:
         2a:d3:71:12:70:0f:00:2d:ce:cd:31:c5:e6:e4:fc:27:42:76:
         34:c2:4a:70:83:8a:cc:61:aa:8e:b9:a9:ef:22:21:12:ae:e9:
         0d:df:c1:0b:f5:76:9f:9c:78:f7:c1:f9:cc:43:c2:76:ea:46:
         e4:99:0b:3b:06:49:e8:e5:55:20:d4:d6:85:25:91:70:bf:7b:
         1d:fd:b8:1c:9a:c1:87:a0:01:12:1f:3a:1d:c1:0e:7c:c6:2c:
         4b:4e:f3:d2:a7:cc:b3:cb:57:5e:00:2b:84:ed:b3:51:40:38:
         33:7e:3f:28:5e:da:eb:56:6d:4e:1a:40:1f:53:f3:db:ed:2b:
         42:82:63:ad:2d:a6:30:24:8e:7d:5b:8d:2b:33:3c:b9:51:78:
         1d:a8:fa:33:83:8c:02:ff:35:7a:dd:09:4d:08:4c:0a:eb:cc:
         6b:c7:2e:99:09:c1:aa:a6:3d:2d:f8:38:89:71:61:40:da:6d:
         8a:9b:78:c2:07:82:75:35:5c:5f:99:ba:9a:c9:e5:c5:91:ac:
         00:81:40:bf:cb:a5:27:e2:07:5f:8a:14:f7:c8:e4:8e:7f:bd:
         ce:7f:9c:bf:c4:8c:f8:8b:a3:d9:d6:1a:6d:a4:1f:e8:4f:0b:
         9b:3b:ed:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:29:05 2025 by rpki-client