Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
File:                     drC8_CzbBSuJ4pylp1u-8pIsgMM.mft (raw, json)
Hash identifier:          HSwuYgFhNo2JEZn8Qd2ZGmTsT3Rj00Lw8AwlNDGUhRI=
Subject key identifier:   BF:A0:F9:FC:AE:D1:3C:57:14:E9:7E:4E:8F:A2:BB:AD:AC:3E:83:4C
Authority key identifier: 76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3
Certificate issuer:       /CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
Certificate serial:       0199FC5830BE5276A4C9A6013E3929828D5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 12:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:01 +0000
Files and hashes:         1: TxShveMXkagPpI8acAIIbuuHf-w.roa (hash: Yj05HPe3EYjPmxF4dbUmE24GvdhxKQjouYz6ySk5apU=)
                          2: drC8_CzbBSuJ4pylp1u-8pIsgMM.crl (hash: WAR5TX1WljwVCOxUlL7U1UAcAe3qDOP5QEw1+yEuC7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:30:be:52:76:a4:c9:a6:01:3e:39:29:82:8d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
        Validity
            Not Before: Oct 19 12:01:01 2025 GMT
            Not After : Oct 20 12:01:01 2025 GMT
        Subject: CN=bfa0f9fcaed13c5714e97e4e8fa2bbadac3e834c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:3f:11:f8:0a:d2:ff:a7:be:fb:a9:e1:82:
                    a5:fd:b5:45:55:b3:f4:a3:21:70:b1:dc:68:c7:2c:
                    03:b3:cb:6e:ca:e1:35:39:07:65:47:aa:0c:5a:82:
                    17:2e:09:80:49:90:0a:65:2a:eb:74:b5:db:ef:4e:
                    5c:d0:90:49:25:cc:90:dc:1e:2d:2f:19:9f:53:b6:
                    77:67:f8:f0:26:40:f6:ea:e5:a4:55:77:3c:cd:35:
                    94:5c:63:cb:78:07:0f:a9:d8:81:d5:19:ea:78:11:
                    11:9c:c1:d7:22:05:0c:1b:28:6e:1e:7f:7b:80:8d:
                    6f:23:3f:df:49:a6:b6:ad:22:ae:03:5a:40:fc:e4:
                    9e:69:57:42:5f:44:f2:fb:d2:ee:b2:f6:01:23:be:
                    62:50:85:21:ab:cb:d8:87:bc:23:0b:1f:80:4c:ca:
                    a3:64:a0:61:33:2a:28:19:e5:ff:97:8c:92:97:75:
                    50:05:1c:1f:0c:12:8a:a0:d1:b4:9f:7c:c7:f0:2d:
                    a2:91:7b:46:11:05:31:01:53:50:2e:8e:99:c3:be:
                    a8:e3:c4:f9:79:a1:6d:70:32:0b:44:37:ab:2d:25:
                    94:97:da:9b:05:45:25:94:a6:d6:50:da:12:b5:50:
                    4e:0f:bb:76:40:ca:cc:2b:fc:34:f2:86:75:06:84:
                    ff:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A0:F9:FC:AE:D1:3C:57:14:E9:7E:4E:8F:A2:BB:AD:AC:3E:83:4C
            X509v3 Authority Key Identifier:
                keyid:76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:40:7f:43:dc:40:f7:87:52:3d:aa:91:59:a1:34:5f:d9:18:
         f0:c4:d7:70:14:a4:ca:7e:c1:25:d8:86:f4:8d:f4:7a:af:6d:
         e5:2d:7b:97:f3:2c:8b:ec:ae:ab:7b:06:0d:c8:8e:37:75:5f:
         8d:9d:ff:30:d9:c2:df:a3:7d:ba:db:2d:0a:df:cb:37:9c:e0:
         cb:7e:c0:88:5e:40:62:a1:73:2a:6e:f6:00:bd:3e:96:2e:b7:
         90:6c:4a:8e:2c:82:3c:99:35:f9:29:84:80:b9:2f:0a:82:a3:
         70:90:4f:39:5a:f2:08:64:f1:94:d2:33:39:25:be:6d:a1:de:
         45:bf:d1:5f:d0:80:38:0a:7d:3d:93:96:a2:56:69:0d:f9:b6:
         92:5f:bd:17:39:cc:3e:4c:43:ec:47:fc:64:1f:53:76:af:66:
         06:8f:b6:7e:ec:04:11:f8:36:d6:af:2a:9f:8e:97:4d:d0:5a:
         19:6a:08:d8:fc:ee:c5:7e:95:f0:0b:87:0d:5e:14:8a:3f:f2:
         a9:d7:9b:07:95:48:02:58:cd:c9:36:60:a2:12:cd:1f:7a:4f:
         85:29:74:8b:7c:b1:c8:8d:dd:40:97:ef:cb:99:81:b8:bd:a1:
         4c:98:40:ec:ad:8f:c7:1d:92:f7:b1:63:69:86:ae:da:2d:18:
         e8:46:1e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:52 2025 by rpki-client