Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
File:                     Dri8RONvrhbTcQL9DVGfKE1mPZA.mft (raw, json)
Hash identifier:          s7k/PSNFSevt7KpMtWT1OiiDqsEpbsIEE+wnb3j0Dfw=
Subject key identifier:   05:B0:88:E2:74:2F:5E:DF:78:BD:61:34:68:8C:07:97:61:BA:2F:04
Authority key identifier: 0E:B8:BC:44:E3:6F:AE:16:D3:71:02:FD:0D:51:9F:28:4D:66:3D:90
Certificate issuer:       /CN=0eb8bc44e36fae16d37102fd0d519f284d663d90
Certificate serial:       0199FAD843FB1C54164F79FAC7EEDC055DD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
Manifest number:          162C
Signing time:             Sun 19 Oct 2025 05:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:41 +0000
Files and hashes:         1: Dri8RONvrhbTcQL9DVGfKE1mPZA.crl (hash: Q0LyrYcwCRYGAUY0mjmIodtzmoYh21deSuQnhsF89WQ=)
                          2: EnQM4_whnPJeaxWRQxPEz7dH7rY.roa (hash: anAGsxZMEMPM7WeK+BVeddK3oakg7+TLd3wIh7D05ik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:43:fb:1c:54:16:4f:79:fa:c7:ee:dc:05:5d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb8bc44e36fae16d37102fd0d519f284d663d90
        Validity
            Not Before: Oct 19 05:01:41 2025 GMT
            Not After : Oct 20 05:01:41 2025 GMT
        Subject: CN=05b088e2742f5edf78bd6134688c079761ba2f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:59:2d:58:aa:17:0b:69:cd:e8:46:08:b6:7f:
                    42:f9:1f:39:7c:83:eb:f3:9a:7c:7b:e1:26:bc:88:
                    05:40:41:f0:a9:5c:30:b3:c3:16:24:b8:4c:1f:9e:
                    f9:88:94:f5:7c:3f:21:4c:c2:c0:24:4e:0f:ef:c4:
                    25:bd:37:3a:3b:00:0a:f8:39:fd:4c:8c:71:ac:e5:
                    29:17:48:aa:3c:b7:30:31:64:d4:21:47:b6:78:7e:
                    6d:5f:eb:e0:f5:6a:bb:46:a0:8c:9b:a4:8f:d6:b6:
                    7f:0b:66:a2:63:92:17:4c:3f:28:5e:6a:16:94:3d:
                    7b:a7:0e:12:12:c7:37:7e:71:b0:25:f8:91:d1:5d:
                    bf:ca:06:d9:d8:ae:ed:f4:8d:b7:2d:3b:11:78:f9:
                    05:d8:03:fc:e9:c3:cc:b2:85:10:17:4b:18:14:d8:
                    2d:2f:cf:7f:d9:c6:00:97:f7:b0:7e:91:56:dc:21:
                    78:b8:fa:81:ec:40:72:47:17:85:3a:08:72:86:1f:
                    ef:4c:f1:b3:ab:4a:2d:fe:32:73:3f:9f:e7:7e:ad:
                    b4:21:58:29:e7:47:47:e8:d7:26:b3:d7:aa:6f:d9:
                    a6:1c:21:34:37:82:39:ac:8c:48:6c:82:4f:12:fb:
                    19:ee:ed:4f:c3:7f:64:bd:ef:2d:1d:3f:8f:00:d6:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B0:88:E2:74:2F:5E:DF:78:BD:61:34:68:8C:07:97:61:BA:2F:04
            X509v3 Authority Key Identifier:
                keyid:0E:B8:BC:44:E3:6F:AE:16:D3:71:02:FD:0D:51:9F:28:4D:66:3D:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dri8RONvrhbTcQL9DVGfKE1mPZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/61d1ce-cd80-429d-bfe1-89b3a3f15df0/1/Dri8RONvrhbTcQL9DVGfKE1mPZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ea:8a:0d:cd:db:b0:a9:8e:4e:f9:59:17:96:76:fa:ec:f9:
         c7:d7:ee:29:7f:cb:3d:d9:6c:d3:d8:1a:39:ca:9a:81:03:8e:
         dc:0c:58:09:c6:51:50:57:fa:92:72:04:37:fe:36:9e:59:00:
         72:61:04:ca:e9:86:b1:be:12:e0:a3:77:5e:f3:58:72:7b:19:
         6b:99:cc:f5:df:c2:c2:0a:2e:b0:ff:5d:a9:96:15:9b:39:1f:
         13:f4:b1:f7:55:b3:b8:85:ad:78:fc:e8:1c:e0:fa:64:1d:9e:
         e4:38:a1:de:41:5f:bd:2f:c7:2b:1e:b0:e8:76:e2:56:35:9b:
         8c:03:14:c7:9e:d9:9b:3b:a2:12:ae:cd:73:f1:6a:39:6e:8a:
         10:ea:5c:e4:ae:82:bc:d6:81:fc:eb:1b:f8:ce:ee:e5:d0:81:
         8a:1e:5e:25:09:6b:13:3e:e5:9e:2b:d1:78:f6:98:a6:72:8a:
         6e:1c:ad:b8:26:c3:2c:bf:41:0a:20:52:70:50:87:a2:59:1f:
         5f:42:6b:0f:a6:e6:44:69:a1:ac:9a:89:82:e8:43:86:ce:5b:
         67:69:82:b7:59:67:88:61:ee:a3:12:87:c5:35:3f:ee:e9:be:
         41:00:5d:69:d5:f1:f1:87:b7:48:0b:42:56:9d:c4:e6:34:eb:
         41:53:01:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:04 2025 by rpki-client