Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
File:                     drC8_CzbBSuJ4pylp1u-8pIsgMM.mft (raw, json)
Hash identifier:          i2PcO7Dum+3j38ukR5cPEw2hsJe11TqklL0BS+tkgFc=
Subject key identifier:   39:ED:96:A4:0E:26:6B:37:A4:B8:BE:47:EE:25:FD:71:91:82:9C:48
Authority key identifier: 76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3
Certificate issuer:       /CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
Certificate serial:       0198D4E0331D3D1138BEF0BE6799D278ED2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 03:01:59 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:59 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:59 +0000
Files and hashes:         1: TxShveMXkagPpI8acAIIbuuHf-w.roa (hash: Yj05HPe3EYjPmxF4dbUmE24GvdhxKQjouYz6ySk5apU=)
                          2: drC8_CzbBSuJ4pylp1u-8pIsgMM.crl (hash: ZedItgIZQcQp+XiSh48aPz/BG8zJDZR01cArS1MOKls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:33:1d:3d:11:38:be:f0:be:67:99:d2:78:ed:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
        Validity
            Not Before: Aug 23 03:01:59 2025 GMT
            Not After : Aug 24 03:01:59 2025 GMT
        Subject: CN=39ed96a40e266b37a4b8be47ee25fd7191829c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:81:ff:99:c0:af:2e:a5:cd:0e:4e:56:3a:29:
                    91:e6:3e:8d:90:ec:ad:2b:d8:21:b5:f8:47:76:d9:
                    ba:3c:ad:27:95:79:6e:41:91:2d:a3:c0:70:40:b4:
                    2e:5b:37:dc:03:94:af:dc:f0:df:87:48:f3:e3:8c:
                    fa:24:ab:7f:44:ae:03:2c:5c:2a:9d:b1:73:8e:05:
                    13:c5:94:c7:0a:47:a3:90:0c:a4:ad:5a:ea:59:f4:
                    06:ea:29:3a:c3:ae:78:ae:a8:86:42:da:79:8b:2d:
                    51:7a:5f:f9:23:a6:9a:e9:51:00:28:b8:9f:45:4f:
                    76:2b:93:46:5a:84:36:ec:e4:02:ba:e8:c8:92:a5:
                    a4:40:35:00:e7:71:61:db:dc:6e:69:f3:e0:c0:d7:
                    1e:7c:fd:f2:2e:56:71:23:31:94:42:83:51:ab:1b:
                    2d:3e:e8:89:6f:7d:7e:b4:d9:bf:89:34:15:3d:e9:
                    d6:8c:ef:64:0e:e0:43:2f:2f:b2:18:c5:87:5d:1a:
                    cb:df:3d:a6:0c:8d:7d:6b:64:e2:13:7a:85:cf:c5:
                    9c:17:6a:c2:c2:1a:a5:19:f6:fd:f3:d9:28:65:9a:
                    c8:3a:6f:40:f4:45:2f:dc:61:34:d2:89:9a:8b:53:
                    75:9e:18:9f:d3:76:77:93:37:5d:52:10:64:af:c3:
                    17:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:ED:96:A4:0E:26:6B:37:A4:B8:BE:47:EE:25:FD:71:91:82:9C:48
            X509v3 Authority Key Identifier:
                keyid:76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:42:82:ef:1e:9d:ce:99:b9:f1:a8:fa:4b:e9:af:5b:0f:f5:
         54:9a:8a:bb:de:7f:61:84:74:4b:84:9b:88:06:f1:a5:42:a6:
         dd:2d:b3:bf:ed:77:f6:c6:c2:16:2c:66:23:63:3b:60:90:97:
         86:03:bc:8e:aa:3a:fc:84:c7:32:9e:b2:af:1d:53:45:37:94:
         d5:17:af:1e:46:3f:e7:d0:9d:68:3e:97:e6:5f:02:ba:b1:04:
         f9:dc:2d:3b:f2:c0:06:cb:56:0f:33:b2:2a:b7:8f:dc:d7:a5:
         b1:f6:b0:21:ff:9b:4d:b5:50:66:67:e3:7a:0d:a1:44:fe:42:
         fe:e2:a3:21:9b:aa:9a:1d:96:03:94:dc:8f:d3:67:1c:4d:d2:
         62:14:60:b9:bd:2b:12:0c:ec:47:8b:28:cc:9f:59:fa:62:40:
         48:1f:77:5e:f2:fe:79:8c:15:68:7d:29:d0:70:2c:8d:56:d7:
         66:c7:d0:83:f0:96:2a:16:19:3a:e8:3e:4b:e6:39:0f:91:3d:
         4c:4e:28:14:3f:b1:a8:e3:e4:8b:90:b0:e6:a9:cb:b5:26:c1:
         6c:33:09:26:2c:c8:9e:a6:27:17:fd:ac:12:06:51:16:c9:4e:
         b0:fa:35:1e:4c:27:a3:41:c6:3c:f3:17:03:ec:42:cb:53:f2:
         5d:61:2e:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4DMdPRE4vvC+Z5nSeO0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YjBiY2ZjMmNkYjA1MmI4OWUyOWNhNWE3NWJiZWYyOTIy
YzgwYzMwHhcNMjUwODIzMDMwMTU5WhcNMjUwODI0MDMwMTU5WjAzMTEwLwYDVQQD
EygzOWVkOTZhNDBlMjY2YjM3YTRiOGJlNDdlZTI1ZmQ3MTkxODI5YzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oH/mcCvLqXNDk5WOimR5j6NkOyt
K9ghtfhHdtm6PK0nlXluQZEto8BwQLQuWzfcA5Sv3PDfh0jz44z6JKt/RK4DLFwq
nbFzjgUTxZTHCkejkAykrVrqWfQG6ik6w654rqiGQtp5iy1Rel/5I6aa6VEAKLif
RU92K5NGWoQ27OQCuujIkqWkQDUA53Fh29xuafPgwNcefP3yLlZxIzGUQoNRqxst
PuiJb31+tNm/iTQVPenWjO9kDuBDLy+yGMWHXRrL3z2mDI19a2TiE3qFz8WcF2rC
whqlGfb989koZZrIOm9A9EUv3GE00omai1N1nhif03Z3kzddUhBkr8MX4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDntlqQOJms3pLi+R+4l/XGRgpxIMB8GA1UdIwQY
MBaAFHawvPws2wUrieKcpadbvvKSLIDDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHJDOF9DemJCU3VKNHB5bHAxdS04cElzZ01NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mYTlkODYtY2EyNS00ZDY5LWEwZjQt
MTA5YzJhZTU5MzE2LzEvZHJDOF9DemJCU3VKNHB5bHAxdS04cElzZ01NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9mYTlkODYtY2EyNS00ZDY5LWEwZjQtMTA5YzJhZTU5MzE2
LzEvZHJDOF9DemJCU3VKNHB5bHAxdS04cElzZ01NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUKC7x6d
zpm58aj6S+mvWw/1VJqKu95/YYR0S4SbiAbxpUKm3S2zv+139sbCFixmI2M7YJCX
hgO8jqo6/ITHMp6yrx1TRTeU1RevHkY/59CdaD6X5l8CurEE+dwtO/LABstWDzOy
KreP3NelsfawIf+bTbVQZmfjeg2hRP5C/uKjIZuqmh2WA5Tcj9NnHE3SYhRgub0r
EgzsR4sozJ9Z+mJASB93XvL+eYwVaH0p0HAsjVbXZsfQg/CWKhYZOug+S+Y5D5E9
TE4oFD+xqOPki5Cw5qnLtSbBbDMJJizInqYnF/2sEgZRFslOsPo1Hkwno0HGPPMX
A+xCy1PyXWEueQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:39:23 2025 by rpki-client