Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
File:                     DyP3PWT22_gdUdNYBUgVaM3YGHU.mft (raw, json)
Hash identifier:          WDb+ttJ0Ulhz4E3YYdHFAYkR5O6u6t5m471jhxcApQo=
Subject key identifier:   1B:ED:8C:0F:63:18:30:A0:69:28:83:37:F3:3B:4B:D3:BE:C6:31:7D
Authority key identifier: 0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
Certificate issuer:       /CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Certificate serial:       0196BB2430BE6A2C845BA8AA65FD70DA7BE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
Manifest number:          0CFC
Signing time:             Sat 10 May 2025 17:00:33 +0000
Manifest this update:     Sat 10 May 2025 17:00:33 +0000
Manifest next update:     Sun 11 May 2025 17:00:33 +0000
Files and hashes:         1: DyP3PWT22_gdUdNYBUgVaM3YGHU.crl (hash: km5ELtDcyurKrJ9PuFQJU+PfwntnCchu6neC7r1NnW4=)
                          2: _mseEGqhmjk5DbDhY65kEG9l3Do.roa (hash: 4EKC+djlGJVTHQZoZJyp3llh1Qpa/Gw18st2TTUCkbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:24:30:be:6a:2c:84:5b:a8:aa:65:fd:70:da:7b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f23f73d64f6dbf81d51d35805481568cdd81875
        Validity
            Not Before: May 10 17:00:33 2025 GMT
            Not After : May 11 17:00:33 2025 GMT
        Subject: CN=1bed8c0f631830a069288337f33b4bd3bec6317d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:89:66:5e:8d:a5:31:14:67:27:9f:c1:26:c9:
                    a3:59:8c:a9:ab:9e:e4:70:06:f7:f6:98:ab:54:83:
                    bd:97:47:0b:4a:ea:ba:a2:fc:2b:52:3d:c4:04:35:
                    26:39:51:ea:8e:91:1f:97:16:0e:6c:25:9e:6c:91:
                    74:4b:1e:57:2a:f8:9a:01:17:a6:89:77:18:f4:7a:
                    1e:2a:60:5a:be:83:fa:43:87:8a:fd:69:11:ba:fd:
                    e6:14:19:f8:17:79:a4:37:0a:04:a5:3c:53:3f:be:
                    59:eb:a4:c0:a6:53:09:bc:62:3e:ca:85:80:c0:b5:
                    3b:ec:89:7d:18:b8:fe:68:d6:14:5c:ef:f2:3d:d2:
                    1b:c4:ae:7e:92:d2:98:69:3a:0d:9c:7e:81:b5:e2:
                    ec:7c:ce:cd:13:4f:3e:e2:17:85:8b:b1:f6:17:ea:
                    86:00:6e:a9:63:33:b9:7c:e2:b9:77:eb:53:13:b1:
                    ee:4b:be:fc:b0:f5:ff:b7:56:a6:60:76:75:6f:a1:
                    9f:9d:6b:aa:4a:de:64:33:ff:84:4c:a4:e2:dc:7f:
                    35:6d:17:7b:11:bc:3d:8f:42:a5:d6:b4:ae:b1:cc:
                    1c:91:2b:e3:92:7c:10:a9:40:d2:85:bc:7e:bc:94:
                    3c:4f:fd:30:64:aa:85:eb:17:29:c7:6a:61:dc:60:
                    ba:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:ED:8C:0F:63:18:30:A0:69:28:83:37:F3:3B:4B:D3:BE:C6:31:7D
            X509v3 Authority Key Identifier:
                keyid:0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:01:b6:9d:3d:39:b5:aa:c2:cc:6d:5c:1c:ac:e3:65:38:fd:
         15:9a:52:21:1c:06:dc:a2:2d:38:a2:a2:0d:ba:94:77:ab:29:
         bf:06:cb:20:af:de:07:a3:0f:ed:6c:16:7e:40:60:1d:f7:91:
         07:a9:1c:06:80:e7:30:9a:17:82:1f:3c:1a:24:74:8d:8c:12:
         6c:f6:d0:47:bb:75:88:d6:9b:14:dd:d8:dd:da:70:c7:ee:21:
         11:9a:21:91:a3:33:2b:3c:05:5b:c2:fa:3b:80:f6:44:cd:13:
         67:e4:b4:5e:2f:b7:80:c4:cc:30:69:7d:3c:e8:cb:19:cd:b8:
         a2:f8:26:0c:81:4d:1c:b4:04:21:64:d5:e3:5b:f4:93:ac:55:
         ad:ca:1e:a1:12:27:66:1d:f6:a4:17:2d:64:f6:37:90:9a:a7:
         f4:a8:7d:45:e3:98:25:4e:44:02:ce:31:50:09:1e:ad:c5:42:
         69:c4:82:3b:4b:f4:3d:73:98:00:54:53:7f:eb:c6:bb:26:f7:
         e4:04:23:3b:1f:7f:7e:36:5e:42:a8:57:40:ec:3b:52:a7:31:
         67:b8:a4:0c:0b:d6:33:1d:ff:2c:40:ff:3d:cc:6c:75:4a:6d:
         03:d5:42:01:ea:fc:56:20:f1:ee:54:1a:57:2b:a3:0c:a9:d6:
         2d:b9:47:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:04:14 2025 by rpki-client