Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
File:                     DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft (raw, json)
Hash identifier:          A/E3SpL4VpnsV+RZGGz+ovoU2lyrnEGtRJC2wyp8KDQ=
Subject key identifier:   C4:5E:07:40:6B:5D:7E:67:E0:0A:AB:4B:6B:6E:6A:BF:3D:10:0C:A2
Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Certificate issuer:       /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Certificate serial:       0197B77C26A872C88B4FCFAC6CA9BD7363CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
Manifest number:          0E1D
Signing time:             Sat 28 Jun 2025 17:00:56 +0000
Manifest this update:     Sat 28 Jun 2025 17:00:56 +0000
Manifest next update:     Sun 29 Jun 2025 17:00:56 +0000
Files and hashes:         1: DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl (hash: phluM1uN1qXAayMr4WkR+BU2zqh2HY3BDHX+LWB6Bb4=)
                          2: ZobxiROg1-GkiBXFARtEezPM_z8.roa (hash: BIGExweVB1y4EbbG2Qn538fyHAdIwqd6x14IhgSUKYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:26:a8:72:c8:8b:4f:cf:ac:6c:a9:bd:73:63:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
        Validity
            Not Before: Jun 28 17:00:56 2025 GMT
            Not After : Jun 29 17:00:56 2025 GMT
        Subject: CN=c45e07406b5d7e67e00aab4b6b6e6abf3d100ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:5d:97:32:0e:7b:5f:a4:0e:f1:ec:b1:fa:
                    40:f3:af:37:64:ea:b0:4d:14:04:5d:ac:45:07:25:
                    76:50:8d:70:77:4f:af:b7:46:76:65:1c:47:77:e6:
                    80:09:ea:d0:7e:ee:21:5d:6b:08:02:c1:79:92:60:
                    28:de:1e:ae:e6:17:87:c6:c4:6a:a9:d9:90:9a:29:
                    9d:94:49:d0:fe:92:44:e3:dd:91:8c:80:18:02:77:
                    66:32:f5:aa:48:71:cc:f8:a7:ec:c2:c8:ee:e5:cc:
                    ce:5c:6d:cd:a5:9a:8c:58:b9:4b:78:cd:56:e2:59:
                    1b:83:d2:42:9e:6e:2a:f7:4f:2a:d0:5d:7b:87:de:
                    f5:10:2b:d7:f9:a1:5a:bf:99:4a:01:6b:71:a3:1b:
                    55:50:1a:f8:9f:ac:24:e0:48:42:13:56:c4:b7:21:
                    75:ed:ae:a3:de:c0:2a:96:d2:7e:b2:e4:4a:19:88:
                    a6:3b:ee:ef:27:65:00:53:0b:1c:ca:4b:53:8c:b4:
                    c4:a5:e4:a3:bd:93:8d:d0:31:12:bc:28:b4:21:66:
                    66:e2:6e:6d:f4:b9:c9:be:6b:b2:a8:1a:34:6b:7a:
                    c0:ec:f6:b2:8a:b4:d1:25:44:a2:74:f4:7a:4a:0e:
                    06:f3:17:a0:d1:10:21:82:3e:35:b1:fd:bd:b9:c1:
                    fc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5E:07:40:6B:5D:7E:67:E0:0A:AB:4B:6B:6E:6A:BF:3D:10:0C:A2
            X509v3 Authority Key Identifier:
                keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f2:de:3b:72:52:fb:08:45:08:9f:ec:a8:e4:78:47:3a:99:
         bc:0f:29:26:c6:4f:a9:d6:50:e9:00:77:1a:0f:9f:6e:99:85:
         17:0e:eb:e0:36:7d:eb:e3:fa:54:b9:a0:61:3f:76:d4:29:7d:
         b8:70:34:98:54:d5:f4:f5:84:b8:8c:7b:1a:96:60:fb:43:cd:
         64:80:19:fd:d6:8f:6b:1f:b4:5a:d8:76:2f:7d:f0:74:4a:2b:
         ef:9b:66:f1:e5:45:44:fe:94:41:c6:a5:00:61:5f:45:5b:12:
         4d:86:8b:3a:cb:b5:05:c3:f2:53:a4:83:80:60:ac:e5:e2:3c:
         7d:d9:04:1e:68:ad:2e:64:bd:24:c8:62:70:a7:a1:e9:69:4f:
         98:ad:45:e1:09:1a:c3:e7:fb:98:1c:3f:80:42:cc:ac:d2:d6:
         1d:0b:51:fd:2d:ad:b9:ab:36:36:4e:db:7f:46:78:b1:b6:65:
         1b:14:0f:15:af:8c:bc:09:b0:a2:07:0b:44:4b:c8:27:84:47:
         29:6c:de:28:48:25:77:79:62:3b:c2:91:93:8d:7f:fe:81:59:
         b2:e7:e8:0a:fb:b6:91:90:03:6f:9d:cc:06:64:f3:a7:9a:99:
         29:16:99:c9:62:81:6f:38:24:02:8e:f3:ff:22:a9:cc:d5:43:
         79:1a:3b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:45:57 2025 by rpki-client