Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
File:                     DyP3PWT22_gdUdNYBUgVaM3YGHU.mft (raw, json)
Hash identifier:          4zKmDDlW2H+j4UPgoiKVhp8Td/fjQliN1wA+9U3nJhs=
Subject key identifier:   70:BC:AF:2A:CC:CD:1E:A2:C8:D6:F6:F2:91:B5:E0:46:5D:70:2A:3C
Authority key identifier: 0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
Certificate issuer:       /CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Certificate serial:       01A0C36916EFD8D18C500F09BC0EB06BEABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
Manifest number:          122E
Signing time:             Mon 21 Sep 2026 10:00:39 +0000
Manifest this update:     Mon 21 Sep 2026 10:00:39 +0000
Manifest next update:     Tue 22 Sep 2026 10:00:39 +0000
Files and hashes:         1: DyP3PWT22_gdUdNYBUgVaM3YGHU.crl (hash: GEBzwlWT7EkJ/lW4GVnGHXew1UVXeb3DR1hdA+l5aho=)
                          2: ancLH9rsRbLYVZt0JNdPMXKNpK0.roa (hash: rcYMBMHI8US97MASNfqHUHYDCTe+glT7idqsTc69Xuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:69:16:ef:d8:d1:8c:50:0f:09:bc:0e:b0:6b:ea:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f23f73d64f6dbf81d51d35805481568cdd81875
        Validity
            Not Before: Sep 21 10:00:39 2026 GMT
            Not After : Sep 22 10:00:39 2026 GMT
        Subject: CN=70bcaf2acccd1ea2c8d6f6f291b5e0465d702a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0c:c1:35:cf:9b:32:00:a3:c3:ab:d1:c9:1c:
                    b7:ed:44:b0:07:ef:30:52:ea:9a:df:5b:43:5e:63:
                    72:1e:8c:5d:bd:75:9b:1f:9d:7b:86:12:63:10:10:
                    12:2e:da:48:78:fa:c9:4f:25:54:73:c1:85:2f:99:
                    6a:90:a2:60:fb:10:e3:20:76:25:61:d5:96:bc:f0:
                    b8:5a:7d:fd:ad:07:ea:0f:eb:a2:19:80:51:b6:76:
                    11:09:77:60:5e:a6:5d:cd:22:15:40:99:16:63:53:
                    c3:24:27:c7:4d:07:2f:ee:c0:37:b7:f9:5e:3b:79:
                    e0:71:19:03:e3:3a:c7:b1:c1:a5:ce:51:b2:01:67:
                    ff:75:4b:e5:cc:29:c4:16:b2:a4:a1:94:10:61:97:
                    ad:d1:57:1a:79:48:38:95:22:de:85:87:a5:e8:0e:
                    2d:84:68:9d:39:24:17:fc:ea:7c:66:be:ac:bf:6d:
                    4a:8f:f4:14:52:b6:5d:c7:7c:48:2d:7d:0c:6d:34:
                    2f:7f:fa:4a:3e:1a:91:64:d6:4e:20:40:a1:e1:85:
                    38:f4:58:a0:29:f7:66:8a:8e:e6:a1:99:03:17:3d:
                    0d:29:b1:e5:29:8a:9c:a3:bf:47:10:0d:87:a3:15:
                    70:86:42:b0:6d:08:67:78:53:a2:1b:d8:05:17:ff:
                    6a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BC:AF:2A:CC:CD:1E:A2:C8:D6:F6:F2:91:B5:E0:46:5D:70:2A:3C
            X509v3 Authority Key Identifier:
                keyid:0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7f:bf:a6:c8:e8:25:de:5e:7c:3f:75:ef:99:79:ef:68:7c:
         6d:4b:1f:ee:da:07:c4:7a:65:9c:bd:8c:a5:b9:6e:9e:d7:07:
         b6:9b:50:60:fb:84:d2:6b:71:f5:02:eb:a2:1e:99:e0:e3:71:
         8a:10:41:e4:93:43:b7:3e:76:f4:7a:3f:b8:a4:e1:09:67:94:
         4a:27:42:df:1e:db:ae:67:a9:c9:f7:68:29:15:e3:49:0b:07:
         d5:a1:5f:f9:67:76:ad:28:af:39:de:99:0b:45:0d:05:9b:b3:
         6c:f9:12:1b:a7:7d:fc:88:d0:d9:6a:8a:64:92:1b:ff:39:7a:
         2e:78:f1:20:62:16:7f:d9:7d:17:c9:34:04:59:1d:14:88:b9:
         b6:5a:fd:2c:52:3b:e8:ac:37:22:4c:1a:e5:e0:2f:7d:2d:04:
         eb:32:ab:f9:f4:3b:ae:67:bb:4d:04:e6:da:c1:61:b4:40:1c:
         5f:ba:1d:39:c9:de:66:54:a9:9e:8f:59:58:ba:6d:3b:49:14:
         32:bc:a5:07:ca:47:96:dd:0b:b9:c6:54:9d:d2:97:bc:78:8b:
         76:8f:77:63:cd:3b:99:65:33:2d:23:de:fc:9d:67:9f:5f:9d:
         b0:bd:a8:a4:35:a4:ba:a2:26:30:59:7f:7d:51:bb:57:2a:3c:
         eb:1c:0c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:21:55 2026 by rpki-client