Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
File:                     DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft (raw, json)
Hash identifier:          mICvm86wiCRITsfPhxTn/Z6c07ZSeJgcZbrfTrMGBjI=
Subject key identifier:   5E:8B:C6:C5:2B:D9:35:3F:7A:AC:B4:FA:4C:02:38:44:FD:DB:9B:3D
Authority key identifier: 0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
Certificate issuer:       /CN=0d814a5f08fb47711d7160b027f996dfb612f045
Certificate serial:       0198887B2F66F2C24CC02CCF872FED3A8CE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
Manifest number:          1566
Signing time:             Fri 08 Aug 2025 07:00:31 +0000
Manifest this update:     Fri 08 Aug 2025 07:00:31 +0000
Manifest next update:     Sat 09 Aug 2025 07:00:31 +0000
Files and hashes:         1: DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl (hash: Es6Hsi9tqdW/n4EMblQU4oSvmAfHXvJSXNdeUfsMzKQ=)
                          2: WodU5gDNw3cjAmLp67NGPeKWzm4.roa (hash: YXZKSjPXGmgzYL0wl21TgIMvnXm5A4XUDZj4O/e7fR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 07:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:88:7b:2f:66:f2:c2:4c:c0:2c:cf:87:2f:ed:3a:8c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d814a5f08fb47711d7160b027f996dfb612f045
        Validity
            Not Before: Aug  8 07:00:31 2025 GMT
            Not After : Aug  9 07:00:31 2025 GMT
        Subject: CN=5e8bc6c52bd9353f7aacb4fa4c023844fddb9b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:13:9d:ee:1d:a2:f2:56:42:a6:4f:93:91:e5:
                    9c:a5:8c:7f:4a:fe:cf:5d:ee:8c:ed:2d:78:87:86:
                    4e:0d:0c:3c:e2:29:90:d6:b3:a8:c9:4f:2e:aa:31:
                    0f:33:d6:c6:59:21:62:86:0b:4f:56:41:ba:c8:21:
                    d2:f4:17:0b:19:5f:40:7b:ab:1d:b9:ca:81:06:40:
                    89:77:ff:8c:f7:00:02:52:af:8d:95:71:bf:f8:56:
                    da:7e:05:dc:ed:6a:68:6d:67:d3:aa:7f:96:5b:6d:
                    79:76:fc:48:54:b0:31:dc:63:90:40:ce:f7:ed:83:
                    c4:8d:b1:5c:c5:2d:b5:33:c3:00:5e:e0:37:77:ef:
                    61:72:d9:46:44:1f:61:77:5b:31:fa:fa:1b:81:09:
                    81:2c:25:33:c9:dd:35:7e:52:60:9e:94:64:d6:3d:
                    8d:c9:27:ce:d6:77:e2:1e:4e:42:c8:c7:ce:7a:24:
                    1c:eb:83:93:ed:d0:40:5f:a6:4f:68:db:07:9a:28:
                    37:43:17:3e:fc:e7:b8:b5:88:5b:3b:c8:28:62:9a:
                    ce:94:7d:48:9b:83:dd:27:ef:63:b7:cf:40:8b:af:
                    35:4b:36:6b:5b:38:5e:4e:18:ca:99:db:89:d1:76:
                    5b:e3:5e:cf:15:95:e8:65:e7:9f:c6:d0:b3:01:8d:
                    f7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8B:C6:C5:2B:D9:35:3F:7A:AC:B4:FA:4C:02:38:44:FD:DB:9B:3D
            X509v3 Authority Key Identifier:
                keyid:0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:03:f1:52:10:a8:2a:b4:90:da:9d:0d:5f:e2:7f:4c:14:14:
         ae:63:a6:27:c9:31:c2:5f:aa:e0:c7:f4:d1:af:57:31:d6:9c:
         b5:bb:e2:10:64:8c:7e:cf:44:0b:9d:fc:8d:c5:33:d1:da:a9:
         5a:0b:53:d7:15:31:e2:74:60:bc:80:90:8c:44:99:4f:0d:7f:
         8e:d8:30:71:b2:e8:3d:d1:76:7e:82:ed:10:cd:7d:36:7d:f0:
         6f:95:3d:f2:eb:e7:d5:86:32:4f:f8:e1:fd:34:93:6c:e7:48:
         a8:1e:b5:f4:9f:bf:26:74:33:5e:27:bc:63:39:1e:91:d1:42:
         e7:81:b8:fa:02:1b:6f:fd:21:02:72:9c:9d:71:7e:3f:69:68:
         b2:01:2e:60:ed:bc:8e:56:70:1d:c3:1b:73:e0:29:79:10:6d:
         e7:24:ee:94:5e:98:e7:71:59:24:c2:4b:8b:2f:8d:55:48:c2:
         bc:d0:90:38:a3:39:fd:af:c3:0c:c2:ce:e9:5c:6b:67:2c:13:
         e8:40:a6:51:df:da:1e:80:4c:89:3d:42:fa:c6:b8:b2:e1:ff:
         df:da:47:8a:c4:a0:a3:09:d2:90:a6:1e:7e:d4:c7:56:64:2f:
         1c:e5:f4:c3:42:01:12:7e:f1:6e:77:a4:82:7e:ef:b7:27:b9:
         62:a3:36:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:08:21 2025 by rpki-client