Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File:                     DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier:          oWMq58+17xpA4Z5HJ3TRaNgGdaM6vB66AQxNv+m8ZJw=
Subject key identifier:   50:94:59:0A:9D:91:88:A7:0C:B7:42:59:5D:43:7F:32:2C:19:8E:70
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer:       /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial:       01976D74608427322B5B1DB82DA9DA59DAB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number:          0D68
Signing time:             Sat 14 Jun 2025 08:00:32 +0000
Manifest this update:     Sat 14 Jun 2025 08:00:32 +0000
Manifest next update:     Sun 15 Jun 2025 08:00:32 +0000
Files and hashes:         1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: +cTKiv9URbDZt5UizuHtu0yWoJUf8RL258JjbRYejb8=)
                          2: WLSJNsKtp7tRpU1OJgVstTs_lJ8.roa (hash: HTWALMbF2cmOkLXiJznP+o3iPW0wZUQzmHPHS3MTUp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:74:60:84:27:32:2b:5b:1d:b8:2d:a9:da:59:da:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
        Validity
            Not Before: Jun 14 08:00:32 2025 GMT
            Not After : Jun 15 08:00:32 2025 GMT
        Subject: CN=5094590a9d9188a70cb742595d437f322c198e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b4:bd:e2:87:f3:17:9b:44:b2:ba:1b:61:fe:
                    97:ae:1a:1b:50:ab:ad:40:31:ed:ba:7d:32:92:46:
                    2b:5d:fe:54:d6:d1:58:e9:ae:d8:dc:e2:d2:dd:c6:
                    5c:7e:37:80:92:0e:26:eb:b8:29:e7:57:32:5d:1d:
                    22:04:32:d1:af:97:79:c9:34:0d:20:75:80:26:de:
                    9a:ed:68:70:8b:43:9b:1f:9f:b1:7b:4b:a9:17:72:
                    ea:d7:46:34:86:21:75:77:d0:f6:4d:f3:30:54:78:
                    6d:f9:3b:88:a5:f7:5b:b8:27:03:e4:26:65:c5:d1:
                    2c:19:15:66:c1:4f:2c:3e:b1:2b:f4:be:5c:65:f2:
                    bc:cf:0c:7c:05:aa:9b:15:46:d3:73:54:e2:41:cb:
                    62:b9:6e:7b:12:a6:46:f3:98:d3:41:33:22:ed:73:
                    e6:a4:ca:6d:f4:50:10:9b:e5:4e:46:95:4a:80:1e:
                    1c:9a:61:6f:2f:72:01:8f:bc:79:0f:79:f3:f1:00:
                    16:02:dc:b2:aa:90:b4:04:c4:fe:19:73:3b:f1:80:
                    5a:1d:70:7c:b6:27:d3:31:a7:ef:b3:f8:bc:96:67:
                    0a:be:17:ec:23:03:98:b9:d0:19:72:7a:b4:f6:78:
                    cc:09:17:ca:52:77:72:ff:d9:fd:16:9e:dd:f7:8d:
                    57:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:94:59:0A:9D:91:88:A7:0C:B7:42:59:5D:43:7F:32:2C:19:8E:70
            X509v3 Authority Key Identifier:
                keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1d:3f:a0:f5:21:89:69:fe:07:f4:df:b3:33:5a:d4:d2:f1:
         ff:aa:be:26:19:46:3a:72:86:8c:40:cd:d4:41:a6:49:9a:61:
         84:da:fe:f5:b5:d5:2b:03:4c:67:e4:dd:3e:d2:51:a3:07:e3:
         63:ea:6c:47:3c:01:bb:8e:11:0e:8c:c8:08:dc:9a:27:4a:00:
         1d:24:75:6c:38:1a:40:e4:95:01:f1:f8:a8:97:71:cd:21:50:
         3d:91:df:d1:4f:c2:58:dd:69:1a:a9:49:89:ba:67:26:ae:ea:
         65:55:86:93:ef:30:43:2d:4b:c7:f2:4e:04:d3:10:f8:8d:3f:
         13:6b:d4:c7:0c:97:c7:c9:20:50:29:19:08:88:bd:69:09:f0:
         62:67:a3:40:a7:62:50:dd:d7:51:8a:30:6f:af:17:60:d2:ab:
         e6:c6:11:65:a6:2a:c6:3a:b1:96:3d:af:66:95:78:4b:a6:36:
         6a:7c:8b:c8:32:c1:cd:61:e3:ec:8f:bb:3a:0e:df:be:c7:6f:
         82:6c:ce:2c:ef:05:b9:32:f0:5b:81:c8:1f:2e:a8:4b:f2:ee:
         51:66:2e:64:36:49:53:a0:cd:1a:d0:39:b6:c7:83:bf:36:9b:
         cd:b3:04:3a:1b:4d:93:a7:22:75:83:c4:4c:ce:79:3b:e1:f0:
         b8:ff:0d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:24:13 2025 by rpki-client