Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
File:                     DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft (raw, json)
Hash identifier:          TpcnEqUEaOVKQNd038m48QRdQH6/+ZgI3LJTwAHx1xI=
Subject key identifier:   31:8D:88:11:23:DF:92:FF:F3:8A:11:FB:98:49:6C:7B:50:D3:ED:C0
Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Certificate issuer:       /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Certificate serial:       019876AC58AF1E4F595C61B9CBE747AF1556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
Manifest number:          0E80
Signing time:             Mon 04 Aug 2025 20:01:03 +0000
Manifest this update:     Mon 04 Aug 2025 20:01:03 +0000
Manifest next update:     Tue 05 Aug 2025 20:01:03 +0000
Files and hashes:         1: DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl (hash: lnHVxnlqE3Sb8J+friXwN3t7sE2prFqX1y8cfgjQLcY=)
                          2: ZobxiROg1-GkiBXFARtEezPM_z8.roa (hash: BIGExweVB1y4EbbG2Qn538fyHAdIwqd6x14IhgSUKYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:76:ac:58:af:1e:4f:59:5c:61:b9:cb:e7:47:af:15:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
        Validity
            Not Before: Aug  4 20:01:03 2025 GMT
            Not After : Aug  5 20:01:03 2025 GMT
        Subject: CN=318d881123df92fff38a11fb98496c7b50d3edc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:41:64:d2:4a:c2:e4:b3:68:b4:4f:c4:bc:a2:
                    1e:f0:dd:eb:82:9d:86:ec:64:4c:6f:f2:cd:52:af:
                    5b:c8:19:25:73:88:59:50:7c:3e:9f:51:8d:eb:49:
                    63:89:af:4a:e5:9b:1e:10:1c:19:bf:f8:fc:15:6c:
                    76:4c:14:d5:49:44:b2:8e:bd:9b:36:cf:89:37:eb:
                    a6:65:0c:41:5f:03:de:da:75:f9:e2:f2:ab:cc:16:
                    aa:f7:a3:12:2a:f3:9b:69:5f:ce:9a:bd:a8:ff:e6:
                    ac:18:20:75:6c:4b:47:b4:8b:f2:69:53:3d:e9:e0:
                    12:09:7b:2b:cc:9a:0a:65:71:b1:a0:7f:19:47:fb:
                    f2:30:c7:e5:ca:49:34:e7:ac:be:ed:26:14:1f:55:
                    e9:cc:cb:6f:c3:7b:f3:76:9e:a5:b6:85:88:1c:db:
                    95:2c:c1:10:7a:e5:63:bf:f0:ed:8b:92:60:a5:da:
                    01:8e:4b:2d:a3:b4:c6:19:83:76:65:f8:95:8e:c8:
                    ab:77:99:23:c8:32:d6:46:e9:64:77:96:12:5e:11:
                    bf:24:12:67:47:70:04:73:07:12:d2:dd:a7:ef:93:
                    be:09:2e:d4:13:8f:81:c5:29:c8:42:25:cf:cb:f8:
                    5e:e1:0a:b7:c7:54:98:30:39:ef:55:3e:27:17:1c:
                    7e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8D:88:11:23:DF:92:FF:F3:8A:11:FB:98:49:6C:7B:50:D3:ED:C0
            X509v3 Authority Key Identifier:
                keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:5d:bc:ec:7c:ff:9b:79:3d:7f:5f:7b:ec:03:1d:0f:a9:17:
         aa:bf:8d:82:de:22:40:68:05:d0:ac:3e:4d:97:2b:a3:0a:86:
         aa:65:fc:44:a0:6a:e2:8d:5a:eb:53:84:ea:79:a9:c5:08:6c:
         2b:7b:50:27:33:e6:d0:0e:ee:68:6a:24:98:f6:e7:23:de:97:
         45:6c:83:4f:3f:28:8d:78:57:e6:33:88:f8:6c:e7:7e:b1:e3:
         67:f9:b1:00:94:63:41:eb:a1:fb:12:6e:e2:1a:bd:6b:90:77:
         9d:99:c6:76:9d:3e:13:b9:d1:2a:7d:8e:6d:bc:74:1c:94:3e:
         7f:3a:82:9c:fa:4b:88:c5:68:72:33:c6:0e:7c:3b:15:e8:35:
         1a:0c:a7:0c:12:25:ea:20:b5:b7:0d:ed:a4:0d:27:d0:da:18:
         07:cc:82:d3:70:06:bc:0d:2e:54:89:44:b4:04:72:1e:6e:70:
         ec:ac:7c:e0:2c:d0:26:1d:4e:13:0c:df:34:4b:80:62:6b:61:
         d6:ce:3a:17:70:65:c6:49:1b:47:ac:d2:66:cf:9e:5c:31:30:
         f6:9a:27:8e:78:c3:d4:49:c3:0e:ab:58:91:69:75:7c:af:ec:
         e9:a5:9a:d8:e2:a0:27:e4:80:21:44:73:8b:fc:6f:9d:ec:a3:
         81:2f:29:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:22:11 2025 by rpki-client