Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
File:                     dyDGcENNpRAiYQmdoQHyXdP3qto.mft (raw, json)
Hash identifier:          n0NLtu+6i0nBnJmTSv1ITpfWAcMC8yZ5BwFjkrP1yag=
Subject key identifier:   9D:78:E3:CE:E1:68:7A:FC:E9:01:E9:CA:4F:43:34:EE:25:9F:FF:24
Authority key identifier: 77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA
Certificate issuer:       /CN=7720c670434da5102261099da101f25dd3f7aada
Certificate serial:       019889FBFBFA454569ED5FB359322F289723
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
Manifest number:          0E65
Signing time:             Fri 08 Aug 2025 14:00:49 +0000
Manifest this update:     Fri 08 Aug 2025 14:00:49 +0000
Manifest next update:     Sat 09 Aug 2025 14:00:49 +0000
Files and hashes:         1: dyDGcENNpRAiYQmdoQHyXdP3qto.crl (hash: TrY41Aj3JHVBwUQwwi2zXdVICgKkEmCtQ9CPyMK30ao=)
                          2: s7pdPnsOB8imHTQwb8o3CB7JIMI.roa (hash: lFvR0bEMv7k9KIxJ6Wc08171+rqM84YXRxLTrqtVpQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:fb:fb:fa:45:45:69:ed:5f:b3:59:32:2f:28:97:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7720c670434da5102261099da101f25dd3f7aada
        Validity
            Not Before: Aug  8 14:00:49 2025 GMT
            Not After : Aug  9 14:00:49 2025 GMT
        Subject: CN=9d78e3cee1687afce901e9ca4f4334ee259fff24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:15:20:30:84:31:70:33:c8:80:8a:14:e5:7d:
                    3a:d5:da:87:c8:77:bf:b0:6a:37:ea:73:60:22:01:
                    67:91:5b:3c:6e:ad:52:57:89:de:41:cc:29:77:c2:
                    fb:52:c6:b2:7f:9d:3c:a4:e1:86:b6:69:e4:46:c3:
                    b0:06:4c:44:67:2a:8d:ad:16:1e:a8:8d:da:9c:5a:
                    5c:20:b4:cf:9b:6c:f0:d7:ab:7b:a4:83:c3:13:ff:
                    e0:21:ab:5a:4a:cb:54:29:89:d8:5a:0e:81:0b:d4:
                    9b:43:ba:5b:49:fe:45:12:b1:f4:3f:9f:6b:66:a2:
                    b4:1a:8f:83:2f:08:8e:0c:cc:c9:6d:df:8c:22:20:
                    83:20:23:54:cc:1e:f8:5c:5b:17:a3:ac:d3:a8:b2:
                    86:6f:94:f2:ed:7b:04:41:39:c8:ea:43:41:a9:0b:
                    6c:fe:9d:a7:ac:b3:2e:43:2d:a4:eb:6c:71:6a:27:
                    da:b7:31:79:f4:f9:e0:6d:29:79:9e:5b:45:f4:60:
                    b5:bd:1a:11:97:fa:6e:96:3a:3c:0e:b0:01:d6:15:
                    26:4f:9a:4f:f2:a2:e0:43:a9:01:a1:e1:df:1e:07:
                    1d:f3:7a:ab:fc:b2:a0:2f:d9:d6:01:55:4e:2b:fc:
                    d5:ce:89:05:d2:be:35:16:c0:45:9d:d6:7c:14:30:
                    8e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:78:E3:CE:E1:68:7A:FC:E9:01:E9:CA:4F:43:34:EE:25:9F:FF:24
            X509v3 Authority Key Identifier:
                keyid:77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:71:3b:75:6f:6f:c1:43:c8:b2:07:a6:ea:f6:dd:62:f1:e9:
         f7:69:85:6c:37:21:63:a2:1f:04:ee:65:25:5e:62:44:78:20:
         31:36:bf:40:fc:71:af:84:9b:2d:df:44:36:9b:0c:0a:d8:ee:
         a0:52:18:5a:d1:1b:de:18:d5:ab:34:55:10:59:a5:ef:b9:0e:
         78:d8:47:fb:a3:d5:1c:d8:35:9c:e7:50:4a:68:10:7d:e0:2e:
         64:62:a5:37:81:db:ad:20:5c:6e:48:60:28:98:22:c1:b1:c9:
         a1:52:fb:ea:c2:1f:27:e2:f5:c2:25:7b:28:7c:2e:ad:b6:f2:
         aa:73:3f:fa:42:58:38:1a:a4:cb:22:a4:8b:b8:21:b8:95:44:
         bb:81:37:66:c8:0c:46:69:12:31:06:e5:6f:93:e4:8c:6a:82:
         86:00:14:93:d5:d7:49:8b:c4:32:d2:b4:a5:52:11:ee:e2:f1:
         6e:42:bb:7e:87:cc:a8:c9:32:62:df:cf:ae:19:51:00:ec:44:
         30:50:d4:21:f5:34:82:bc:42:28:32:4d:c5:06:3e:3f:35:47:
         47:10:40:e8:41:c7:64:df:20:65:0d:e7:c8:ee:e8:52:d3:e3:
         55:89:fb:f1:72:75:3c:30:ff:0b:91:92:b3:4b:2f:23:b2:7a:
         c1:ac:ff:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:54:29 2025 by rpki-client