Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
File:                     drC8_CzbBSuJ4pylp1u-8pIsgMM.mft (raw, json)
Hash identifier:          N9HSHvgOaEmkrITnEnZbsSw7FxDy3GSSttAr20iSQu4=
Subject key identifier:   5F:E0:FD:F0:D9:F0:96:6B:B6:DC:95:5E:52:37:3C:63:A8:7C:30:46
Authority key identifier: 76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3
Certificate issuer:       /CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
Certificate serial:       0197B70ECF2F327C118C2C67EB6935B43D4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 15:01:30 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:30 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:30 +0000
Files and hashes:         1: TxShveMXkagPpI8acAIIbuuHf-w.roa (hash: Yj05HPe3EYjPmxF4dbUmE24GvdhxKQjouYz6ySk5apU=)
                          2: drC8_CzbBSuJ4pylp1u-8pIsgMM.crl (hash: 0YXwdWEjuNNgnj4BfuFgDNxQen8u0bTi6A+RiqAzhHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:cf:2f:32:7c:11:8c:2c:67:eb:69:35:b4:3d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
        Validity
            Not Before: Jun 28 15:01:30 2025 GMT
            Not After : Jun 29 15:01:30 2025 GMT
        Subject: CN=5fe0fdf0d9f0966bb6dc955e52373c63a87c3046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:91:30:2e:03:a0:c2:c9:ab:6c:3b:26:f6:
                    33:a2:f3:e8:cf:50:92:67:19:e0:f1:9f:65:6b:1d:
                    69:a6:b5:79:da:10:de:f3:92:d3:09:40:dc:0f:cc:
                    fb:af:2a:7e:ea:06:db:27:5c:57:2a:b4:17:5b:62:
                    0f:0f:d4:ec:c1:c1:13:47:90:10:1f:2f:b3:17:f6:
                    03:f7:0e:28:a7:5f:77:d1:b2:bf:1f:b6:73:51:af:
                    e7:5d:ec:11:09:f9:60:67:37:dc:0e:28:be:c5:c9:
                    34:88:d9:9a:2a:e4:59:62:1c:f9:d7:3a:ae:53:5f:
                    30:6f:5b:3f:47:a1:d4:fe:9d:9e:5c:7a:fe:1a:a9:
                    b4:b6:ce:84:be:b6:40:df:fd:8e:8f:97:5a:41:95:
                    47:8d:62:90:45:da:1f:0e:1d:f3:aa:93:89:73:c6:
                    cc:b5:99:0b:c5:6b:5b:1a:9e:69:2b:98:03:83:39:
                    61:a4:89:18:ed:41:ac:4f:45:14:af:f4:4d:91:0a:
                    da:b9:55:7c:8d:d1:5a:a7:27:15:33:ec:8b:95:41:
                    01:f8:ce:fb:65:d5:ba:44:e6:2c:01:30:cf:44:cc:
                    9e:2c:bb:02:70:05:a0:0d:dc:d9:4a:f3:80:3d:3f:
                    a4:57:4f:2d:1f:68:17:b8:b8:cb:92:91:a5:f2:ab:
                    21:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E0:FD:F0:D9:F0:96:6B:B6:DC:95:5E:52:37:3C:63:A8:7C:30:46
            X509v3 Authority Key Identifier:
                keyid:76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:3f:66:96:f7:a6:f8:2e:84:0b:e8:d1:76:49:c8:53:1d:47:
         5c:1b:e4:8f:95:1e:c0:e2:a6:9a:ff:30:9b:86:69:09:31:09:
         e2:c0:72:9b:36:95:02:01:c0:97:67:33:ca:aa:c4:19:74:74:
         98:e1:65:86:0a:48:0a:9f:19:c5:46:a8:f1:2f:39:47:74:34:
         8f:ce:84:4a:4b:5a:af:0e:50:04:4f:67:55:fb:51:52:c7:2e:
         66:8d:7e:37:03:0f:e8:a7:ca:b4:d8:0e:17:d6:40:0f:bb:c1:
         ca:9a:dd:04:6e:2b:38:f8:e3:d2:b4:ef:42:78:98:ca:c4:6e:
         fd:2f:f9:7c:aa:48:de:51:6a:d2:8a:e9:ba:28:33:5f:70:47:
         69:a0:6d:e4:74:32:89:eb:4e:46:7e:03:b4:5a:d4:82:3e:ad:
         6a:3f:db:4c:a0:5a:d4:7c:0e:b8:f1:33:45:88:5e:15:9e:c3:
         a9:34:6c:91:dd:2c:7b:eb:8d:ca:c4:37:94:8b:90:e1:58:1d:
         4f:d6:26:51:a0:cb:97:38:74:82:51:ef:1c:7c:62:fe:31:9d:
         2e:eb:4e:91:ba:68:f8:20:3e:8b:86:47:b2:d8:f7:fd:c9:97:
         2a:d3:77:0e:e7:0b:81:d5:9d:ee:8b:e3:15:59:fd:b8:b2:c8:
         b0:1a:d6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:30 2025 by rpki-client