Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
File:                     DyP3PWT22_gdUdNYBUgVaM3YGHU.mft (raw, json)
Hash identifier:          kAtBjyiL/1L3IIZdcAhvUgRcXbR1d3oLvp/uGbwQhEE=
Subject key identifier:   27:D4:C0:BA:14:19:55:DD:25:62:79:9B:53:81:67:1D:F9:79:32:F7
Authority key identifier: 0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
Certificate issuer:       /CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Certificate serial:       019848F74F1247D8D999377A3032E6FFF3AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
Manifest number:          0DCA
Signing time:             Sat 26 Jul 2025 23:00:23 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:23 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:23 +0000
Files and hashes:         1: DyP3PWT22_gdUdNYBUgVaM3YGHU.crl (hash: ndSiMvxQPIQMhchk0j+40fjJA8b5hNvWjd3rktVoZtM=)
                          2: _mseEGqhmjk5DbDhY65kEG9l3Do.roa (hash: 4EKC+djlGJVTHQZoZJyp3llh1Qpa/Gw18st2TTUCkbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:4f:12:47:d8:d9:99:37:7a:30:32:e6:ff:f3:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f23f73d64f6dbf81d51d35805481568cdd81875
        Validity
            Not Before: Jul 26 23:00:23 2025 GMT
            Not After : Jul 27 23:00:23 2025 GMT
        Subject: CN=27d4c0ba141955dd2562799b5381671df97932f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:e8:93:38:14:25:b2:f4:e5:22:cb:a1:79:
                    88:ea:0e:98:62:cb:53:ec:64:d7:f4:2d:e6:5a:1c:
                    d5:81:2a:7a:d6:84:11:98:3f:a5:4c:8d:ac:1d:35:
                    83:22:ee:9e:55:6f:b6:6f:aa:01:13:b9:5d:12:40:
                    a2:a3:7c:f4:c5:01:5d:0f:df:97:aa:72:77:4c:9f:
                    6d:f8:8b:25:3b:cb:f6:4f:a5:0d:8e:78:1b:a2:7a:
                    ef:a2:3a:70:99:1c:f2:45:35:c8:81:4e:32:6c:59:
                    e5:51:83:e9:e6:d7:dc:f4:23:d1:7a:7b:78:14:80:
                    74:f6:7c:6c:f3:72:1c:75:96:f8:d4:a1:67:d0:08:
                    d7:ee:8a:85:20:83:ab:61:52:34:23:4e:fc:2d:c1:
                    52:12:23:b2:b1:85:52:d2:80:9c:ab:e6:b6:77:af:
                    7d:15:5e:4b:cc:80:2c:6b:b0:16:75:7b:0e:43:87:
                    10:72:8f:ec:18:9e:ef:eb:67:19:8f:92:00:85:90:
                    db:68:82:34:4e:99:81:74:02:1c:6b:80:ea:2c:ec:
                    cf:20:66:1d:0a:d9:8d:b5:28:02:03:f6:5c:3c:eb:
                    b4:1b:89:8f:c6:92:a7:fa:ac:d3:6c:d7:65:03:ef:
                    87:9d:ef:29:be:dc:7f:07:9f:09:a4:e0:71:08:d3:
                    ce:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D4:C0:BA:14:19:55:DD:25:62:79:9B:53:81:67:1D:F9:79:32:F7
            X509v3 Authority Key Identifier:
                keyid:0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9a:a9:ee:75:80:e6:e9:43:b2:2f:6e:33:a7:5c:66:60:4c:
         16:49:e0:52:90:22:29:8f:93:95:81:53:cd:5f:b0:54:4a:b5:
         3d:b3:52:58:ae:e8:29:3a:06:1a:cc:e3:d1:97:ef:8e:78:82:
         84:18:61:77:fe:57:ef:c0:f4:3b:12:48:a1:32:50:fb:57:df:
         b2:57:03:a7:95:4c:a3:50:b5:4f:52:1c:28:61:40:b2:1c:2c:
         99:e1:a1:ee:c5:7d:39:dc:b4:86:ec:30:78:c2:be:42:a8:9f:
         0b:b7:6b:2c:ad:a8:17:50:3d:2f:90:7e:ee:c8:77:74:bb:f7:
         7b:ce:ec:f5:b0:df:8d:e8:7f:0e:28:8b:5b:6a:b5:09:db:9a:
         94:62:c1:8f:b3:82:b3:b5:4d:c1:ef:3d:a2:f2:64:b7:a4:13:
         cd:6a:7e:49:8a:ff:93:c0:9b:7c:10:c9:25:16:dc:19:cb:57:
         be:fb:f2:af:45:ab:d7:3a:30:14:ea:5f:b2:7d:3e:13:c0:e4:
         c2:4f:d4:ed:4f:72:f8:e3:42:13:cd:8d:4f:30:37:0e:27:b0:
         15:50:4c:83:d5:3b:e2:8d:6f:14:e1:8d:76:10:ac:c6:a0:c5:
         14:9d:4d:c7:b0:6a:8f:12:47:e6:18:be:97:4f:35:41:21:5d:
         f8:22:be:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:58:01 2025 by rpki-client