Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
File:                     IsXMfDZMkOr6uml-C_WfBVaalpU.mft (raw, json)
Hash identifier:          Nr/jd4E6cHeOzxRybL1trwvDqx/GwwGSWwGtaU15208=
Subject key identifier:   D8:BD:9F:50:64:EB:2F:76:5D:86:3F:85:AC:81:90:F8:54:71:AC:37
Authority key identifier: 22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95
Certificate issuer:       /CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
Certificate serial:       0198733DCC6DA7E022B95166350E68C88B93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
Manifest number:          0C99
Signing time:             Mon 04 Aug 2025 04:01:26 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:26 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:26 +0000
Files and hashes:         1: IsXMfDZMkOr6uml-C_WfBVaalpU.crl (hash: 6L2Wgw5gnKKPGyWDgh/krRuxr7aGV9gVmsz5CPrLdf4=)
                          2: Rwalp_l1gE5qteHvPqygUpBfDbs.roa (hash: uNWR8irKkp/fDA/zKVLrXnW+fuP58wA187hFjBN4YQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:cc:6d:a7:e0:22:b9:51:66:35:0e:68:c8:8b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
        Validity
            Not Before: Aug  4 04:01:26 2025 GMT
            Not After : Aug  5 04:01:26 2025 GMT
        Subject: CN=d8bd9f5064eb2f765d863f85ac8190f85471ac37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:ff:ea:c8:67:1f:93:0b:a8:eb:3c:33:7e:
                    a5:7f:6d:a6:e0:d0:23:ba:5a:0b:93:74:7d:9f:70:
                    33:92:91:5e:a5:b6:a8:1a:36:df:dd:f8:d1:a9:0e:
                    e8:8d:ab:4b:6e:52:9a:8d:cc:1b:8d:a5:c7:49:98:
                    52:ef:be:9b:b7:0d:0f:d8:84:e9:56:14:99:45:5b:
                    bb:20:30:53:61:15:e1:7b:bd:1f:d2:78:b3:2e:b5:
                    0d:1a:28:58:c2:47:31:24:b5:f5:20:0b:85:d8:dc:
                    95:d7:26:4c:18:da:d7:6c:41:62:85:0f:a5:ba:eb:
                    68:d6:3a:fa:72:f0:d4:8e:3a:8d:44:9a:9a:bf:56:
                    6e:dd:ba:d3:de:93:32:27:f8:f7:29:c4:a2:67:9d:
                    ba:82:86:d5:99:50:82:bf:b3:6e:2b:4d:70:cc:81:
                    c4:3a:39:16:6b:9a:fe:33:02:af:57:e5:4b:86:6f:
                    a5:3a:44:7c:b4:e0:f7:76:5c:98:0d:67:06:37:3e:
                    7a:16:fb:39:a2:93:30:c0:e2:f3:82:e6:da:4a:d0:
                    ab:28:50:94:8d:0a:e1:c8:d2:de:69:ba:ed:e7:c9:
                    bf:68:cc:1f:ca:60:dd:d4:0f:a7:c3:71:2b:d4:aa:
                    9a:e0:51:db:2e:4e:1d:45:fc:65:b8:4d:a0:9a:27:
                    04:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BD:9F:50:64:EB:2F:76:5D:86:3F:85:AC:81:90:F8:54:71:AC:37
            X509v3 Authority Key Identifier:
                keyid:22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:21:c7:eb:d0:f2:ea:07:fc:79:ad:5e:7e:0e:9c:a6:d6:b8:
         b3:e8:52:3a:7a:72:12:8c:fa:7a:fe:fa:a6:27:b8:d1:d6:79:
         fe:e1:fc:b5:41:ad:f5:ff:a9:1d:6c:8e:31:92:3d:48:53:c1:
         6c:47:76:d6:ac:22:19:44:8a:e5:9d:2e:82:04:b4:3f:51:ef:
         a8:8c:e0:5b:74:30:92:74:61:09:0f:24:d2:fe:ed:61:ea:d4:
         89:20:19:e8:c0:58:6e:d8:57:34:24:a6:18:ec:72:7e:90:85:
         18:6e:5e:5b:bd:3d:2f:ea:d6:db:24:f0:b4:20:a1:c4:c2:34:
         64:b6:b3:68:c0:9a:72:c4:07:8c:f3:3b:1d:fa:e0:51:4b:2d:
         86:f0:04:c8:4a:8c:f1:10:73:35:36:d0:de:d3:d9:ed:37:64:
         a2:fe:ad:f2:a5:4c:dc:79:88:4b:5e:a1:6a:b1:bc:cc:ac:f7:
         58:fa:9a:4a:61:de:fa:cd:9e:e3:13:31:ab:9a:d8:bd:6f:10:
         42:50:4b:00:cb:cf:d2:eb:ca:0a:af:6e:f3:14:b4:e3:f9:58:
         78:da:1b:68:71:80:73:43:c7:c3:e0:cf:9a:40:3f:cc:1a:c3:
         5e:c7:a5:ba:12:1a:3e:a8:06:a2:31:6e:a9:69:3a:e3:5e:fb:
         46:98:80:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:10 2025 by rpki-client