Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File:                     DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier:          vF/8yifq60YcZ5+tZ5tWun2kjCcub/1mVAAICvH+6gA=
Subject key identifier:   56:15:0C:7F:CE:71:96:3F:12:2C:8A:45:DE:1C:F4:A8:6C:07:F6:C1
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer:       /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial:       019E303BA2B49E8CC73A6945427B5260438E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number:          10E9
Signing time:             Sat 16 May 2026 10:01:14 +0000
Manifest this update:     Sat 16 May 2026 10:01:14 +0000
Manifest next update:     Sun 17 May 2026 10:01:14 +0000
Files and hashes:         1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: xa9HcYGwBb7z/KEYy3zj5aUYsl/wmijC5b2b6EsuQDI=)
                          2: EAp4uNAc6f0HymDOmRK8myDrjdo.roa (hash: pmfGtVbkHJrjhdQXgKEkAIluH1FlB2AL+HRSoa36574=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:a2:b4:9e:8c:c7:3a:69:45:42:7b:52:60:43:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
        Validity
            Not Before: May 16 10:01:14 2026 GMT
            Not After : May 17 10:01:14 2026 GMT
        Subject: CN=56150c7fce71963f122c8a45de1cf4a86c07f6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:4f:4a:83:3d:fa:6d:fd:5c:06:8f:30:1a:
                    9f:07:cb:fe:f3:c4:ea:d5:32:e4:b5:b1:29:9a:6b:
                    f1:b7:b7:81:b8:c2:22:f2:f3:23:dc:b7:05:be:c9:
                    1c:16:d5:e6:26:7a:ae:1d:38:35:2a:40:46:1b:d4:
                    8a:0d:45:e0:86:c0:5e:4e:73:e1:1b:9f:b3:f0:de:
                    45:10:b0:60:06:da:a5:88:68:68:ea:82:3e:ed:b7:
                    29:08:30:da:12:0f:b2:74:7d:45:22:5f:db:08:90:
                    b4:b5:8a:e1:17:4e:46:85:3c:6a:a7:44:0d:6e:fe:
                    66:21:d7:03:b3:d0:6a:8d:1b:66:97:4a:10:8e:b2:
                    91:2c:ef:70:c7:b9:cf:b7:a5:f6:fa:9a:ec:a7:96:
                    ae:4e:c6:db:70:01:85:e4:3f:e2:23:2c:f8:fc:1f:
                    64:0b:f7:c3:41:58:04:a7:d5:e8:a6:4b:b7:6d:1a:
                    ea:be:da:78:f0:57:2a:ec:42:86:7e:77:61:3d:1f:
                    27:de:43:de:16:06:f4:05:86:38:1b:c1:72:cf:01:
                    d2:07:e3:97:e6:50:fa:d9:43:73:20:f5:e9:be:43:
                    5a:2d:cb:ef:b6:29:b4:dd:47:6b:55:ca:18:c5:23:
                    b7:a2:b0:8b:4c:c5:c9:98:1a:3e:44:27:3d:b1:d4:
                    51:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:15:0C:7F:CE:71:96:3F:12:2C:8A:45:DE:1C:F4:A8:6C:07:F6:C1
            X509v3 Authority Key Identifier:
                keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:c6:cb:b9:a6:d2:ef:ed:08:4e:7e:3d:2a:bf:a0:0b:6e:a0:
         f9:68:fd:e7:70:70:5b:ea:ca:8e:c8:de:e0:70:de:87:5b:53:
         0d:72:0c:70:86:d5:bc:b3:a4:e6:e2:fe:79:4b:95:2e:0e:6c:
         25:2f:b1:15:21:6d:85:76:8f:39:84:bd:a3:2a:ba:4b:d2:84:
         ba:af:b1:28:2c:98:6b:42:50:f3:50:da:72:50:57:99:d4:5b:
         f8:05:83:40:7c:53:b9:a8:3c:04:ce:dc:97:f7:ac:4c:29:f6:
         a1:7e:2f:03:a9:77:8d:78:28:d9:cc:0a:17:58:37:cc:6c:c6:
         6f:8d:0b:d5:7e:66:b8:f6:35:23:77:63:86:64:1f:7c:4f:64:
         aa:0a:86:3e:bc:2a:50:d1:3f:48:86:f1:08:1a:4b:d6:5f:f7:
         a8:27:37:43:ff:84:47:cd:12:22:c9:01:4e:20:13:61:3d:3d:
         1f:d6:84:f6:e6:07:65:96:a4:5b:8e:f9:7f:72:dc:da:68:d8:
         36:55:f2:7f:c4:0a:58:44:80:60:f8:77:93:ed:dd:a7:72:09:
         d0:65:b6:fe:b3:31:a2:ed:d7:08:5d:fc:41:c0:3f:62:38:0d:
         2f:72:20:f2:db:32:5a:23:43:d7:41:c9:19:7a:a5:ee:42:8e:
         80:77:74:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wO6K0nozHOmlFQntSYEOOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkOGZjOGRmODRmYmYyYWI0MDQxMmU2ZDRhZGZmN2MxYjg0
YTViMmYwHhcNMjYwNTE2MTAwMTE0WhcNMjYwNTE3MTAwMTE0WjAzMTEwLwYDVQQD
Eyg1NjE1MGM3ZmNlNzE5NjNmMTIyYzhhNDVkZTFjZjRhODZjMDdmNmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdlPSoM9+m39XAaPMBqfB8v+88Tq
1TLktbEpmmvxt7eBuMIi8vMj3LcFvskcFtXmJnquHTg1KkBGG9SKDUXghsBeTnPh
G5+z8N5FELBgBtqliGho6oI+7bcpCDDaEg+ydH1FIl/bCJC0tYrhF05GhTxqp0QN
bv5mIdcDs9BqjRtml0oQjrKRLO9wx7nPt6X2+prsp5auTsbbcAGF5D/iIyz4/B9k
C/fDQVgEp9Xopku3bRrqvtp48Fcq7EKGfndhPR8n3kPeFgb0BYY4G8FyzwHSB+OX
5lD62UNzIPXpvkNaLcvvtim03UdrVcoYxSO3orCLTMXJmBo+RCc9sdRR4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYVDH/OcZY/EiyKRd4c9KhsB/bBMB8GA1UdIwQY
MBaAFA2PyN+E+/KrQEEubUrf98G4SlsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgt
Njg4NzYyYmI5ODVlLzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgtNjg4NzYyYmI5ODVl
LzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAucbLuabS
7+0ITn49Kr+gC26g+Wj953BwW+rKjsje4HDeh1tTDXIMcIbVvLOk5uL+eUuVLg5s
JS+xFSFthXaPOYS9oyq6S9KEuq+xKCyYa0JQ81DaclBXmdRb+AWDQHxTuag8BM7c
l/esTCn2oX4vA6l3jXgo2cwKF1g3zGzGb40L1X5muPY1I3djhmQffE9kqgqGPrwq
UNE/SIbxCBpL1l/3qCc3Q/+ER80SIskBTiATYT09H9aE9uYHZZakW475f3Lc2mjY
NlXyf8QKWESAYPh3k+3dp3IJ0GW2/rMxou3XCF38QcA/YjgNL3Ig8tsyWiND10HJ
GXql7kKOgHd0xw==
-----END CERTIFICATE-----
Generated at Sat May 16 19:31:21 2026 by rpki-client