Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.mft
File:                     drjsczufmU1ahYxeVVF46K6Kou0.mft (raw, json)
Hash identifier:          l406Xd47+1E1lARpBh7wXjUnsTdVGx2QxK80aDoexOo=
Subject key identifier:   ED:30:EA:89:9F:D1:6D:2D:39:DB:E9:72:18:0C:A8:C2:A8:67:2B:EE
Authority key identifier: 76:B8:EC:73:3B:9F:99:4D:5A:85:8C:5E:55:51:78:E8:AE:8A:A2:ED
Certificate issuer:       /CN=76b8ec733b9f994d5a858c5e555178e8ae8aa2ed
Certificate serial:       01977941FDD8E197A9CBDE788405A68EBD05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drjsczufmU1ahYxeVVF46K6Kou0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.mft
Manifest number:          105D
Signing time:             Mon 16 Jun 2025 15:00:57 +0000
Manifest this update:     Mon 16 Jun 2025 15:00:57 +0000
Manifest next update:     Tue 17 Jun 2025 15:00:57 +0000
Files and hashes:         1: S4GC9z8T1D4fMhH9pz6xtTzGJy8.roa (hash: oDc/JvXHI28ccd9ZG6/Yr60N+FV54r1lVJyg24riv30=)
                          2: drjsczufmU1ahYxeVVF46K6Kou0.crl (hash: u7MZA0Z0CRYnGwKleYXkONncXCZF/Tdt+OAt/MlxF9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drjsczufmU1ahYxeVVF46K6Kou0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:41:fd:d8:e1:97:a9:cb:de:78:84:05:a6:8e:bd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76b8ec733b9f994d5a858c5e555178e8ae8aa2ed
        Validity
            Not Before: Jun 16 15:00:57 2025 GMT
            Not After : Jun 17 15:00:57 2025 GMT
        Subject: CN=ed30ea899fd16d2d39dbe972180ca8c2a8672bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:19:0a:d6:e4:96:03:60:cc:b1:2f:5d:06:
                    79:d4:a7:aa:de:42:17:cc:52:18:b6:82:36:87:79:
                    ce:5c:7a:0c:e6:e9:f5:e7:cc:f3:0c:87:06:38:5e:
                    71:8a:1f:e6:3a:76:08:81:3e:db:c4:b1:92:27:29:
                    c0:74:00:10:dc:1b:9a:4e:c1:cc:49:95:0c:dc:cd:
                    aa:1f:d4:97:b3:63:20:b5:4f:63:6e:1a:06:d6:06:
                    54:7a:84:e4:9f:e9:73:4e:16:fb:8a:3c:fd:d1:fb:
                    64:c9:a8:83:bc:ff:88:13:4e:76:f1:b1:f9:2e:cd:
                    b7:aa:36:9e:ab:52:23:e3:d1:82:45:7c:7e:55:f8:
                    60:ae:9d:74:53:af:8a:32:fd:07:63:0f:56:16:c4:
                    92:da:1d:03:69:54:61:84:32:ce:2c:20:ba:ff:b3:
                    c5:10:d8:c5:37:0c:a1:26:27:51:46:2d:5d:80:91:
                    82:5c:aa:3e:e2:48:67:9e:fc:ae:74:a5:a4:ce:dc:
                    b7:72:f6:af:07:01:8c:37:d4:45:aa:ef:1a:53:0b:
                    73:83:2d:a5:e1:f9:b9:eb:b2:94:96:94:bf:30:7f:
                    02:49:42:86:ba:35:f1:cc:7a:fe:9e:9a:bc:61:f6:
                    65:91:7a:03:60:e9:43:63:df:67:c6:0d:cb:5a:01:
                    24:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:30:EA:89:9F:D1:6D:2D:39:DB:E9:72:18:0C:A8:C2:A8:67:2B:EE
            X509v3 Authority Key Identifier:
                keyid:76:B8:EC:73:3B:9F:99:4D:5A:85:8C:5E:55:51:78:E8:AE:8A:A2:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drjsczufmU1ahYxeVVF46K6Kou0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/eb4c6e-a2b0-4e5b-9aea-8b7cf9b86764/1/drjsczufmU1ahYxeVVF46K6Kou0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:72:0c:ce:e7:46:c8:a7:cb:1c:e5:5a:c5:2e:e5:8d:20:24:
         01:54:aa:c1:73:fa:a9:cb:e4:bc:9e:58:0e:d9:9c:e4:49:bc:
         d1:7d:b8:5d:2f:9b:3d:fc:ab:a8:7b:b4:3e:41:c6:6c:30:4c:
         36:fe:e2:d3:81:26:cd:cd:f9:63:e4:db:0e:71:ec:4f:4f:48:
         62:5c:f1:0d:ae:05:0c:12:a7:49:c8:13:3a:1d:e4:2e:aa:98:
         3e:8b:fc:1e:97:47:9d:f4:f0:fb:89:f7:1e:81:29:4e:1d:1a:
         96:5a:3d:23:71:73:fe:6b:85:95:ec:15:43:86:91:67:05:eb:
         05:0c:c7:b8:22:79:e1:da:f5:13:c6:48:54:f9:54:61:52:e2:
         6f:f7:65:87:a6:d2:72:97:09:e9:33:f5:20:92:5e:98:28:32:
         cb:a7:47:5e:24:38:6d:bc:6a:20:68:6c:bd:02:16:13:85:f2:
         a3:10:fd:fb:3f:f0:ac:46:61:55:cb:b8:7a:66:44:19:ff:0a:
         c6:82:66:9c:8d:88:0d:9d:36:12:c2:48:0d:a0:9b:d7:24:6a:
         83:4a:94:b7:ac:4f:47:4e:e2:a5:ec:4d:da:5f:a5:1a:6d:66:
         69:c7:a5:c0:4b:d7:b6:49:59:63:a0:4a:f7:ed:9d:df:7e:76:
         b2:a0:56:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 23:38:06 2025 by rpki-client