Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
File:                     DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft (raw, json)
Hash identifier:          65kLGNBvMDkAzGNdiyvqPeEs4sYuD/aIRJgHR61ueKY=
Subject key identifier:   0D:36:DE:02:C6:CA:A0:4A:EC:CC:EB:56:EB:73:E0:06:2D:29:C9:6D
Authority key identifier: 0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05
Certificate issuer:       /CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
Certificate serial:       019853443858BB56A7CC5A8B6BE89EE257E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
Manifest number:          1609
Signing time:             Mon 28 Jul 2025 23:00:36 +0000
Manifest this update:     Mon 28 Jul 2025 23:00:36 +0000
Manifest next update:     Tue 29 Jul 2025 23:00:36 +0000
Files and hashes:         1: DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl (hash: dBvBWSWLjODSjMUmbarfbNeobDf+FD83jjzWdOrPbHQ=)
                          2: rG4uV5FpPy0fw9yTiKRJUxEEj4o.roa (hash: BaS8t7omCzvSgmaV1xikWxIAkO9HyfZ7kCUC9REWlSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:44:38:58:bb:56:a7:cc:5a:8b:6b:e8:9e:e2:57:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb510d7c915a4be6df6b16ff582fd2d6ad23605
        Validity
            Not Before: Jul 28 23:00:36 2025 GMT
            Not After : Jul 29 23:00:36 2025 GMT
        Subject: CN=0d36de02c6caa04aeccceb56eb73e0062d29c96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c6:09:e4:b3:b1:68:71:9a:b3:d9:06:cd:4b:
                    80:62:16:16:71:fc:b2:97:97:59:20:66:82:33:2f:
                    ea:8a:f0:54:52:f3:f4:d3:fa:03:24:66:00:a5:3d:
                    20:d7:5c:63:f6:e2:6a:18:f0:44:cb:70:c9:f6:29:
                    f9:ea:3e:e9:b8:db:48:b8:1a:c9:a2:3d:5d:3d:14:
                    50:e9:85:2c:97:36:da:40:e0:a2:e6:8a:8d:24:ae:
                    93:c7:22:07:4b:48:33:eb:65:a2:d6:3b:52:b7:40:
                    f8:ce:7f:09:01:5b:ad:0a:55:f8:21:90:46:01:f7:
                    20:e6:a0:9b:dc:ab:ea:bd:c3:8e:ed:96:17:2c:c4:
                    b9:5c:36:21:93:ff:5a:ce:6a:0c:9d:72:c3:50:c5:
                    75:94:69:c7:d5:92:e5:32:4e:73:73:72:2a:ca:66:
                    e4:c4:5a:cb:95:d5:cd:0b:32:84:ac:4d:7b:c3:84:
                    37:60:b8:3e:ca:4c:f8:3e:2e:51:7b:26:7d:00:3f:
                    1e:a7:4e:38:41:a0:48:2d:9d:c2:58:39:32:6b:e1:
                    6f:8e:72:22:e6:52:96:e6:d8:ba:8d:5c:a7:a1:a4:
                    6c:3c:27:82:90:7b:0c:8b:9c:a8:5a:d6:f7:4a:a6:
                    9d:f4:bd:2d:64:26:49:89:7b:f6:6b:e5:da:33:7e:
                    1b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:36:DE:02:C6:CA:A0:4A:EC:CC:EB:56:EB:73:E0:06:2D:29:C9:6D
            X509v3 Authority Key Identifier:
                keyid:0E:B5:10:D7:C9:15:A4:BE:6D:F6:B1:6F:F5:82:FD:2D:6A:D2:36:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrUQ18kVpL5t9rFv9YL9LWrSNgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/96be3d-d7d2-4753-a783-d638a3be88ca/1/DrUQ18kVpL5t9rFv9YL9LWrSNgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ba:bb:c8:48:2f:45:45:83:78:f4:0c:1f:a7:b8:7c:8d:9a:
         db:bd:72:25:9e:5a:40:31:27:3d:e4:ba:ab:96:f8:19:6c:ad:
         19:ba:14:03:5f:69:3c:68:dd:df:8f:1d:1e:10:d0:1d:f9:3e:
         46:af:c6:5e:84:34:3b:5a:dd:1f:8a:cd:48:3c:93:f7:fe:be:
         62:ca:fb:da:79:9a:17:74:00:96:d5:8e:61:e3:4e:0a:62:8d:
         d5:77:34:e2:49:e9:29:ca:95:3e:7e:1d:25:0c:ae:23:53:02:
         4a:bc:bd:ec:35:b2:62:ef:bb:6a:f3:e2:eb:3d:f2:74:07:95:
         4f:25:2f:55:39:cf:a5:59:4f:e4:7d:56:c6:1f:af:4f:54:3f:
         97:16:b0:78:5d:3a:ed:e6:92:74:75:e2:39:e3:6e:1c:13:f9:
         87:7e:ee:54:45:82:49:04:67:a1:2e:ec:e3:1d:06:c9:c4:44:
         55:e7:7f:29:ef:0b:fb:c7:97:e7:6f:8f:7f:0a:81:e3:0b:63:
         2b:73:7d:93:c2:dd:85:05:36:a9:a6:71:3a:c0:f4:58:d6:dd:
         bc:3f:6f:e7:01:22:e9:bd:62:d0:f6:33:71:db:7d:6d:81:86:
         72:bb:a6:63:dd:2e:f7:c4:e4:0d:bd:0d:6a:a1:2f:98:ac:79:
         6a:a4:2f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:32:13 2025 by rpki-client