Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
File:                     drtZ2KtKtSd87uX_CYIIQzBiex8.mft (raw, json)
Hash identifier:          vjUzidiREK4pYp9yrWmJDEveRireQPnPyt9JeX2A/BI=
Subject key identifier:   1F:90:C5:B3:7A:04:DA:89:01:3C:CD:AB:82:35:EF:6E:69:8E:A8:EE
Authority key identifier: 76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
Certificate issuer:       /CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Certificate serial:       019A221BAD15CE5B729093D7D63C40982540
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
Manifest number:          01AA
Signing time:             Sun 26 Oct 2025 20:00:30 +0000
Manifest this update:     Sun 26 Oct 2025 20:00:30 +0000
Manifest next update:     Mon 27 Oct 2025 20:00:30 +0000
Files and hashes:         1: AMeFJYEOsq8eDF0JklVrrKO_x-w.roa (hash: BUSoz6NuItfjL6psERkejscD0G0Lwnx4YN1Y5CF1al8=)
                          2: drtZ2KtKtSd87uX_CYIIQzBiex8.crl (hash: kAodtljiF10ZceJQFDG3B7cRglMNputuOAhb86DFaOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:1b:ad:15:ce:5b:72:90:93:d7:d6:3c:40:98:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
        Validity
            Not Before: Oct 26 20:00:30 2025 GMT
            Not After : Oct 27 20:00:30 2025 GMT
        Subject: CN=1f90c5b37a04da89013ccdab8235ef6e698ea8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:e4:af:67:08:b7:e6:70:c5:6c:5b:bd:4c:
                    18:64:92:0e:f1:ba:3b:40:b5:e3:35:c1:74:0b:21:
                    0b:ae:8e:b4:6c:53:94:8c:6b:9a:03:ef:d7:eb:20:
                    c5:9f:c0:c3:c2:89:04:90:be:59:07:52:17:0f:65:
                    65:93:fd:5a:c7:bf:f8:f2:a8:0d:80:57:5f:30:06:
                    39:fa:a1:be:4e:e4:fc:2a:bd:ed:d2:f8:08:cb:b7:
                    4a:f1:79:c0:80:45:f0:6f:b4:5f:04:99:ff:aa:0c:
                    5d:80:74:d1:80:24:9a:90:d3:b6:ab:e0:29:e1:34:
                    7f:86:ec:7d:2d:32:f1:02:0b:91:1f:ce:f0:1e:6a:
                    51:9a:42:22:49:3b:3a:4c:f3:11:58:32:2d:ae:1a:
                    d1:8f:f9:fd:cc:23:99:a6:6e:6f:55:ae:c4:c3:88:
                    ba:df:c9:db:b0:d1:9b:75:4e:f4:91:cb:38:6f:aa:
                    14:84:4e:6a:e9:a9:01:1a:3e:f1:84:f5:bf:4d:89:
                    ad:7b:c0:eb:d8:57:ab:b5:b5:05:69:33:4c:8b:87:
                    6d:de:f7:f2:66:18:50:ef:cf:99:1d:ab:7a:bd:e7:
                    0a:21:52:3b:ed:e0:43:64:12:b0:41:51:26:d3:2f:
                    0c:f8:a2:8e:2e:15:4d:52:3f:ce:d7:80:01:74:d5:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:90:C5:B3:7A:04:DA:89:01:3C:CD:AB:82:35:EF:6E:69:8E:A8:EE
            X509v3 Authority Key Identifier:
                keyid:76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:53:2e:4d:10:66:d6:fb:c2:73:ba:df:38:f6:c3:63:e1:e4:
         35:3b:61:8c:b0:3a:29:bd:83:d6:2d:46:7a:53:83:a7:61:72:
         14:a2:5f:61:a3:af:81:f0:45:10:a2:82:67:88:2f:d9:a4:c9:
         5e:30:ff:55:03:ec:dc:ec:e5:59:6b:f0:13:8b:a1:ec:66:22:
         24:98:b2:df:bc:3e:0b:bd:a3:0a:7e:95:4d:c4:6f:70:41:c4:
         d0:64:73:18:e7:06:d1:f5:b6:d8:d2:e7:35:45:18:4e:03:5f:
         11:b9:14:5c:f6:00:1a:10:d2:43:ac:12:e7:19:bb:8e:52:fd:
         03:d4:b4:ca:37:f4:5b:50:41:ed:03:8b:8c:f1:86:58:4e:00:
         b2:a2:da:f4:12:0b:fb:dc:3b:31:9a:be:96:ae:79:f1:13:62:
         a5:11:ca:78:c3:d0:da:0c:a4:30:99:19:d9:49:94:bf:06:85:
         de:9f:14:36:a9:1c:5c:60:bf:4b:19:aa:3f:79:9e:21:28:91:
         08:d7:19:ec:4a:80:f3:f7:30:ac:7b:fa:df:61:7f:b6:fe:d1:
         96:6f:24:c3:11:de:a7:28:5c:7b:d3:b4:11:72:1a:15:b7:5c:
         53:5c:e3:33:26:30:79:9e:18:02:48:49:e0:a2:c8:7c:27:68:
         9a:5a:8d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:42:20 2025 by rpki-client