Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
File:                     drC8_CzbBSuJ4pylp1u-8pIsgMM.mft (raw, json)
Hash identifier:          3YMlXm/2J1jUC8HvNz2Q2T7gkKJFDXU+5EhFNR/7V/4=
Subject key identifier:   4A:1A:C1:3D:4A:93:01:A0:73:AD:E9:4B:E3:8A:E1:19:73:97:26:5B
Authority key identifier: 76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3
Certificate issuer:       /CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
Certificate serial:       01974AE8BB37446DE36BB8648680F921EA4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 15:00:55 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:55 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:55 +0000
Files and hashes:         1: TxShveMXkagPpI8acAIIbuuHf-w.roa (hash: Yj05HPe3EYjPmxF4dbUmE24GvdhxKQjouYz6ySk5apU=)
                          2: drC8_CzbBSuJ4pylp1u-8pIsgMM.crl (hash: lY+rXBSBmDfcMU94XwRTaq30y0cONGqtKFd/MRZVFnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:bb:37:44:6d:e3:6b:b8:64:86:80:f9:21:ea:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76b0bcfc2cdb052b89e29ca5a75bbef2922c80c3
        Validity
            Not Before: Jun  7 15:00:55 2025 GMT
            Not After : Jun  8 15:00:55 2025 GMT
        Subject: CN=4a1ac13d4a9301a073ade94be38ae1197397265b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9e:2b:1d:a0:2d:e5:7a:c4:b4:32:4a:6d:55:
                    79:c3:37:3f:5e:ef:ba:13:2d:a3:0e:9b:c5:e9:0e:
                    bd:53:80:2f:82:db:2f:9a:f5:4c:3f:f3:a5:52:4c:
                    61:28:3a:06:59:f3:d9:df:ad:d3:4f:3a:58:96:13:
                    4c:1a:81:a2:35:5c:ba:86:ba:5c:13:3b:10:c8:3d:
                    56:6b:49:b0:49:a6:7f:de:23:c7:53:0d:4a:4b:fe:
                    26:b6:eb:c9:98:66:9b:a7:b3:49:96:77:1e:a6:fe:
                    51:cf:47:d3:91:90:fc:5e:9d:68:9d:5f:83:cc:06:
                    49:0c:b3:b2:9b:e0:a1:e2:d5:1d:df:a3:bf:b4:35:
                    03:b5:bb:63:af:64:cb:34:a9:e0:49:df:93:69:7b:
                    4c:27:da:4f:18:86:e3:08:90:a1:72:27:19:c9:61:
                    e0:8a:7e:60:2a:f9:3b:3f:78:bd:64:68:34:02:cb:
                    fd:08:45:31:64:a7:23:99:96:16:67:1a:e8:7c:0e:
                    0a:ef:45:63:37:cd:4c:33:67:10:f9:e5:10:b6:10:
                    8d:de:e4:4b:72:6e:0d:58:f3:1a:e7:ea:85:82:13:
                    c7:45:0c:81:9d:67:f5:39:31:b4:20:35:20:f4:1b:
                    bc:4d:60:97:52:4c:77:d4:4a:2a:26:ca:bd:2e:49:
                    38:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1A:C1:3D:4A:93:01:A0:73:AD:E9:4B:E3:8A:E1:19:73:97:26:5B
            X509v3 Authority Key Identifier:
                keyid:76:B0:BC:FC:2C:DB:05:2B:89:E2:9C:A5:A7:5B:BE:F2:92:2C:80:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drC8_CzbBSuJ4pylp1u-8pIsgMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/fa9d86-ca25-4d69-a0f4-109c2ae59316/1/drC8_CzbBSuJ4pylp1u-8pIsgMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:4e:e2:19:c2:d7:ae:43:be:b2:24:87:6c:29:3c:d9:a5:b0:
         bf:2b:c7:68:4c:07:59:48:e8:ee:e4:53:47:ea:d4:23:ef:5c:
         ef:8c:0e:00:29:a5:26:a5:ad:9a:1d:04:52:83:8d:2d:ee:81:
         3a:16:ec:2a:10:29:84:aa:39:a0:1a:db:fb:91:31:dc:c2:74:
         5a:88:b0:f9:4b:e5:03:45:79:b4:f4:de:e8:98:d1:2b:c0:bf:
         60:20:c8:14:3b:6a:40:55:c5:8a:89:53:d5:df:72:06:1b:bf:
         c9:ac:7e:e7:c8:d4:91:4c:ce:8f:c8:21:7e:3f:6f:46:db:97:
         a6:35:c2:e0:dc:a9:6e:33:e3:c1:fb:68:19:88:b3:64:e2:4e:
         df:62:f6:a5:31:fd:10:69:96:d1:7f:80:d9:cc:6d:ee:bb:52:
         a4:43:65:84:b3:b8:f3:f9:19:75:3f:57:f0:48:d1:32:d6:80:
         4c:c4:3b:32:75:f0:33:fa:60:d0:0f:ef:df:4b:e4:96:6a:33:
         b2:d4:f6:f6:a4:4c:44:92:02:43:aa:6d:a6:64:37:fe:d8:2d:
         42:60:f8:33:69:36:44:ce:13:a3:6e:f8:8f:64:48:46:b7:70:
         5b:96:0a:d0:b3:36:83:5d:0c:68:c4:14:5f:d5:21:40:ec:ff:
         e3:55:46:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:05:25 2025 by rpki-client