Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
File:                     DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft (raw, json)
Hash identifier:          gfEO7yNSJH/H9UhgPW9DXhxN0q2GrBQXJibOASa2gdk=
Subject key identifier:   70:C9:16:DE:B5:C7:BB:F9:F3:83:6F:16:A9:32:A0:AD:47:50:97:CE
Authority key identifier: 0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45
Certificate issuer:       /CN=0d814a5f08fb47711d7160b027f996dfb612f045
Certificate serial:       019F859F0A803B205C37C94B1A9273A5AE4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
Manifest number:          1905
Signing time:             Tue 21 Jul 2026 17:00:20 +0000
Manifest this update:     Tue 21 Jul 2026 17:00:20 +0000
Manifest next update:     Wed 22 Jul 2026 17:00:20 +0000
Files and hashes:         1: DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl (hash: KD3IqrMWo/LL2igswXi1bsYAiw9QLPB120IcLN0ND7E=)
                          2: hvrAoDLP-O8bFZV3A8_RKQudOis.roa (hash: 5pvq3N7LVgKGxK7NA9zvvsccRO2dQ9fcZlkpsYmHI4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:9f:0a:80:3b:20:5c:37:c9:4b:1a:92:73:a5:ae:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d814a5f08fb47711d7160b027f996dfb612f045
        Validity
            Not Before: Jul 21 17:00:20 2026 GMT
            Not After : Jul 22 17:00:20 2026 GMT
        Subject: CN=70c916deb5c7bbf9f3836f16a932a0ad475097ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:70:44:9e:56:be:8e:bf:81:13:16:ba:99:3d:
                    95:27:32:0b:00:28:ba:9d:64:05:b7:fc:56:aa:94:
                    33:ce:d5:f9:6e:25:0f:8e:66:ea:5a:bc:36:5b:42:
                    b0:79:58:a2:63:e0:4a:ad:18:44:24:38:7f:1a:60:
                    7c:5d:78:a1:1d:de:62:1a:ef:50:b3:35:85:07:f3:
                    f7:dd:63:82:05:c4:69:b6:fd:a1:83:8b:d3:a0:d2:
                    17:a5:27:47:4f:ff:36:8a:4a:00:78:16:8e:95:fb:
                    43:a2:91:ac:18:f5:85:d8:45:e5:27:f3:87:3f:ca:
                    51:21:43:fb:86:e0:f1:ea:f7:be:eb:f1:58:9a:9c:
                    ef:24:af:d9:15:fd:3c:53:b4:ea:3c:ae:85:b4:45:
                    d6:77:9f:28:94:e9:3e:10:18:fe:ca:8f:4a:a3:ac:
                    e5:29:55:aa:f5:ea:7e:85:30:4c:76:3d:0a:0a:0c:
                    bd:4c:b7:65:a9:dd:2d:08:47:4a:fa:98:78:98:10:
                    3a:96:a8:73:15:a1:9a:09:41:d9:5e:07:94:b9:3f:
                    a1:80:b2:2e:45:bb:c7:2b:c9:23:4c:5a:21:bb:29:
                    04:8b:1d:cd:49:6c:78:12:fe:fb:c6:f3:e1:89:51:
                    51:1c:19:0f:a9:ff:25:77:1d:cc:67:ee:c8:a7:80:
                    dc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C9:16:DE:B5:C7:BB:F9:F3:83:6F:16:A9:32:A0:AD:47:50:97:CE
            X509v3 Authority Key Identifier:
                keyid:0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:cf:ee:4c:02:d6:fe:8c:c5:ce:1e:4a:86:c4:a0:9e:23:b7:
         bc:21:34:04:f1:e8:15:96:43:01:4d:0f:f2:be:f4:d7:57:11:
         45:8f:f9:bf:fa:2b:06:8a:60:a9:c8:5b:0f:95:cb:c8:6b:f2:
         fc:77:24:4d:06:06:40:fb:11:6d:96:d1:f4:77:e7:a9:bd:a1:
         17:53:c9:f1:ed:e2:df:91:e2:09:1f:cb:d0:f2:3f:d2:bf:d9:
         27:fb:ef:4c:c5:6b:95:db:4c:df:40:9b:83:5b:4d:7f:c5:d7:
         d6:b3:dc:4b:44:74:dc:5a:9d:84:e5:e6:c3:a6:d3:e9:2e:3b:
         d4:a3:3a:0b:63:d2:13:c7:de:df:a4:ee:57:dd:fa:bb:de:68:
         9a:ab:6c:84:7a:d0:1c:65:eb:73:95:a9:d9:41:80:e3:7a:dd:
         7f:e4:27:ef:38:5c:ac:e3:86:a6:9d:42:90:ed:59:e8:08:aa:
         e3:73:17:4f:6a:f9:46:9b:98:1d:c0:14:c4:b5:70:bb:76:bd:
         a9:9e:7b:a0:65:8c:fd:c9:99:43:e6:06:9f:d2:72:5b:34:13:
         a0:db:fd:5e:0f:90:a1:7e:eb:37:88:e4:e1:ac:a9:11:6e:ed:
         68:69:22:10:f9:ce:4d:4f:24:8c:f7:1e:52:b3:d2:cb:09:83:
         2e:f1:7c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:55:38 2026 by rpki-client