Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File:                     DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier:          7PaetcLlHadhix9Nj+xs/QlZK2AEA27sFdvRvZqAulo=
Subject key identifier:   6F:1D:94:8F:1D:F9:F2:3C:44:72:4B:63:C7:A7:7E:4A:2D:19:37:B7
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer:       /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial:       019FAABE67E5FFD0A846DD213E5250AD4D39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number:          11AD
Signing time:             Tue 28 Jul 2026 22:00:32 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:32 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:32 +0000
Files and hashes:         1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: /2HzSTH7cfSEs6NrSF36YgVu8y9zom6f4UU5y62WHgg=)
                          2: EAp4uNAc6f0HymDOmRK8myDrjdo.roa (hash: pmfGtVbkHJrjhdQXgKEkAIluH1FlB2AL+HRSoa36574=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:67:e5:ff:d0:a8:46:dd:21:3e:52:50:ad:4d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
        Validity
            Not Before: Jul 28 22:00:32 2026 GMT
            Not After : Jul 29 22:00:32 2026 GMT
        Subject: CN=6f1d948f1df9f23c44724b63c7a77e4a2d1937b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:23:b2:db:0c:c6:3a:d9:a0:50:da:59:b9:
                    58:fb:6a:1e:c4:87:c2:a1:46:14:ba:76:61:27:cc:
                    58:69:3f:17:97:78:26:e2:1e:4f:0f:e6:c2:2c:20:
                    56:a7:a0:48:77:c7:01:a5:a4:de:f4:39:6e:78:6a:
                    e0:bd:43:20:4e:e4:cf:db:7c:d4:02:d1:2d:70:4e:
                    43:4a:47:93:b4:2d:c0:d7:17:41:4c:68:27:3b:d5:
                    10:9b:1a:ea:0e:37:70:e5:98:ac:06:99:83:3f:e7:
                    fb:58:2a:b3:07:65:a8:e9:b3:48:43:71:0f:17:f9:
                    bb:53:b0:84:28:68:89:c6:a5:4e:59:00:21:e3:82:
                    18:62:de:12:93:84:ac:20:6c:3f:5e:76:0a:ed:6a:
                    e0:d0:71:29:c6:7c:51:c2:e9:32:bb:31:fc:53:04:
                    84:52:42:79:9f:76:72:10:2b:cc:2c:33:40:00:21:
                    86:eb:0a:81:73:2b:fa:58:a5:4a:8f:a2:7e:1f:9a:
                    6d:ca:98:63:c1:cb:e2:95:72:97:30:29:6a:13:ea:
                    17:6c:2e:2d:b3:8a:33:f3:43:4d:94:62:7b:cc:c8:
                    27:89:ee:e8:eb:c0:3c:1f:58:a1:39:7e:3d:54:84:
                    18:1c:6d:58:cd:0a:34:94:a6:28:90:8a:ad:ba:fd:
                    8b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1D:94:8F:1D:F9:F2:3C:44:72:4B:63:C7:A7:7E:4A:2D:19:37:B7
            X509v3 Authority Key Identifier:
                keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:99:4d:0a:7c:ee:cf:fd:c4:7b:fb:d0:ba:90:ed:c2:81:4c:
         04:b8:49:97:e8:5b:11:9c:4e:9b:40:91:dc:3c:98:bd:7a:4f:
         bf:9b:ec:88:7c:f1:32:ea:fc:3c:8d:e3:c7:91:d5:a7:c0:e1:
         99:cb:61:9b:a8:e9:44:ad:dd:9b:27:cf:11:7d:6c:b7:2a:eb:
         e8:78:f6:4e:69:d6:87:e9:82:8e:3f:a7:ee:a3:6b:33:19:64:
         4b:40:de:42:e5:8d:a4:7d:cc:c8:b7:d2:95:9b:0e:b4:20:a2:
         c4:93:c3:94:18:c8:25:d2:47:a1:34:b7:1a:27:4d:75:82:a5:
         33:7d:a6:91:c7:7c:3a:81:08:ac:3d:e3:2d:a0:6d:e2:d3:05:
         9d:31:66:20:55:84:94:d8:0c:77:4a:b6:51:91:24:96:db:fd:
         d6:e0:97:e8:a4:32:e8:c6:2c:76:d3:3a:c9:3d:88:c8:82:ed:
         01:e2:b4:6c:d2:72:ad:c9:df:1b:d3:d0:ed:fc:22:2b:87:96:
         d7:c7:59:c1:6e:d3:30:c9:b8:f7:f1:31:be:14:82:a7:10:49:
         3e:1a:34:67:07:41:29:e7:77:87:c0:c2:47:94:26:a5:43:a5:
         7e:c9:cb:7a:30:5d:5f:97:9c:bf:09:70:70:23:bc:ff:36:54:
         ab:2a:7f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:48:26 2026 by rpki-client