Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
File:                     DyP3PWT22_gdUdNYBUgVaM3YGHU.mft (raw, json)
Hash identifier:          OY0c6VyvNVfPguHHHXULLRHDVxWsC5vdcdJAdHEvSlo=
Subject key identifier:   16:40:A2:30:20:53:8C:78:A8:E3:EE:88:73:9E:26:D4:01:7F:30:53
Authority key identifier: 0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75
Certificate issuer:       /CN=0f23f73d64f6dbf81d51d35805481568cdd81875
Certificate serial:       019E30E04D82E990091BA8EED34B6A9C52F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
Manifest number:          10D9
Signing time:             Sat 16 May 2026 13:01:06 +0000
Manifest this update:     Sat 16 May 2026 13:01:06 +0000
Manifest next update:     Sun 17 May 2026 13:01:06 +0000
Files and hashes:         1: DyP3PWT22_gdUdNYBUgVaM3YGHU.crl (hash: aPHoPy5qsTlAF2dDqfAQj47TMCiK0sXI3jB1+VcxSmY=)
                          2: ancLH9rsRbLYVZt0JNdPMXKNpK0.roa (hash: rcYMBMHI8US97MASNfqHUHYDCTe+glT7idqsTc69Xuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:4d:82:e9:90:09:1b:a8:ee:d3:4b:6a:9c:52:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f23f73d64f6dbf81d51d35805481568cdd81875
        Validity
            Not Before: May 16 13:01:06 2026 GMT
            Not After : May 17 13:01:06 2026 GMT
        Subject: CN=1640a23020538c78a8e3ee88739e26d4017f3053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:56:fe:c8:4d:d0:73:68:33:7f:e4:83:8c:c6:
                    11:71:04:03:9f:99:4d:ff:fa:3d:fa:22:3e:6c:ab:
                    35:f4:a7:a3:ac:0a:1c:63:26:a2:19:62:a7:ce:52:
                    44:98:9a:fc:30:80:0d:1c:d2:7e:e9:8e:75:9c:9f:
                    b2:52:49:04:38:95:ae:c4:03:c4:83:2b:1e:19:2d:
                    e0:9e:9f:d4:a7:8e:0a:3c:09:c1:64:2f:3c:e6:2e:
                    75:10:7a:34:e6:f6:cd:9a:3c:12:9d:f3:c5:d1:ab:
                    65:e3:53:12:64:f7:bb:0e:ca:65:23:b1:fe:9c:ed:
                    fc:48:6f:fe:b4:ee:ef:92:81:0c:a3:01:12:a1:04:
                    da:96:73:bc:bd:ad:b6:12:e5:b0:90:f2:fd:55:c1:
                    c4:68:ad:46:29:bd:58:18:3b:91:66:4a:43:4d:ea:
                    a5:8f:fd:34:d3:1d:6c:19:3e:aa:e6:a3:b8:f7:ce:
                    7c:d2:a2:d9:2e:aa:5b:e2:3b:66:95:b2:46:76:58:
                    81:14:ea:af:bc:24:fd:2c:2d:cb:21:23:6c:2d:65:
                    3d:cb:f8:af:af:56:75:9a:73:9c:07:c4:ed:8e:75:
                    c8:b7:7a:88:d8:4c:c0:91:c4:33:c7:83:1c:6b:45:
                    79:88:97:d6:74:59:2e:0a:d4:8e:e2:bb:36:ef:6c:
                    51:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:40:A2:30:20:53:8C:78:A8:E3:EE:88:73:9E:26:D4:01:7F:30:53
            X509v3 Authority Key Identifier:
                keyid:0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:8f:b2:32:6b:89:49:60:6c:3a:8d:8a:8f:7f:a2:da:73:7d:
         42:fc:2e:3a:de:cc:4c:71:79:6b:a5:8c:63:e7:01:8a:92:dc:
         94:22:34:8e:21:42:c7:63:66:6d:75:9c:32:a9:b8:3c:1a:a5:
         29:82:d8:61:06:1d:35:b8:16:13:ed:2b:a5:8c:6e:d4:43:23:
         3b:9e:36:52:85:93:5c:1f:59:1b:19:11:eb:47:39:28:37:f7:
         53:d6:34:76:2e:9a:2c:98:1a:dd:a4:36:94:dd:20:45:8f:ea:
         a2:1b:29:d6:bd:c4:47:80:5b:fb:0c:4c:51:c6:24:aa:4f:e7:
         3b:0e:65:15:cc:0b:d0:c3:a4:ba:fd:71:de:85:50:d1:54:f0:
         52:05:64:c7:28:e5:56:95:1a:45:91:1e:c3:62:e5:b2:06:43:
         62:d6:4f:b8:4e:8e:18:ab:2e:b4:47:41:da:fe:97:35:3b:a1:
         7d:e3:be:3a:90:8a:8b:68:2e:34:a2:bb:a8:7b:3e:7f:17:8d:
         46:cd:7a:b3:7a:67:8a:91:bd:24:27:c9:3b:c2:47:62:82:05:
         14:58:f0:2d:28:6f:83:fd:f1:a6:a6:4e:55:34:68:95:ff:bf:
         7b:df:20:9f:bc:40:de:a3:00:4e:f4:eb:32:5a:a0:36:a1:ba:
         45:c9:f9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:53 2026 by rpki-client