Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
File:                     ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft (raw, json)
Hash identifier:          TlYAAMfexBsaEn2/HWB0d4tAv+vf5CUMjIqb15JrefM=
Subject key identifier:   D9:8C:F3:7E:3E:28:8D:F7:37:EB:1C:C2:2A:2F:3B:25:F5:63:06:67
Authority key identifier: 20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73
Certificate issuer:       /CN=20ba71e46c75916b8e5de193cc7f81069df86f73
Certificate serial:       01988BEA642E62451CF546ABA5312617E839
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
Manifest number:          1324
Signing time:             Fri 08 Aug 2025 23:00:50 +0000
Manifest this update:     Fri 08 Aug 2025 23:00:50 +0000
Manifest next update:     Sat 09 Aug 2025 23:00:50 +0000
Files and hashes:         1: ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl (hash: GkTATPCXxm7L0uNGXWtvWR1zzo87DLD+ozBJb10aM3w=)
                          2: S_d1yxjPDAZnGSrhlxcFQsHo8B8.roa (hash: 1yCKzHKyUcb+bDJzq8H1WVPfPxnz9wCx2KQZUrXnAc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:64:2e:62:45:1c:f5:46:ab:a5:31:26:17:e8:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20ba71e46c75916b8e5de193cc7f81069df86f73
        Validity
            Not Before: Aug  8 23:00:50 2025 GMT
            Not After : Aug  9 23:00:50 2025 GMT
        Subject: CN=d98cf37e3e288df737eb1cc22a2f3b25f5630667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4d:0e:c9:5a:ca:35:bd:13:d3:28:ea:58:b5:
                    3c:2b:c9:70:90:a2:71:0f:13:9d:3d:cb:73:c2:1d:
                    7f:69:60:a6:7e:29:f7:89:c4:bc:c3:b0:5e:04:50:
                    8b:88:e1:72:be:cb:38:c0:58:f6:35:0e:75:0f:dc:
                    5d:a4:20:fd:d2:91:9b:ea:09:24:4d:7c:0d:3e:87:
                    3c:ce:4a:07:7f:3a:ab:69:b4:59:56:86:4b:8b:ea:
                    65:a0:47:52:ee:34:e2:38:63:7f:ee:f8:dc:6f:7c:
                    07:42:7c:4d:d6:13:2c:a4:6e:29:a1:f9:d2:8c:bf:
                    85:a7:67:22:b1:26:90:67:1d:b9:d9:b1:fa:26:1d:
                    31:d4:94:8f:15:af:87:9c:67:b9:ee:db:a1:7a:0f:
                    5a:23:6b:54:7d:dd:42:4a:dc:1c:7c:9b:3e:60:10:
                    68:bd:97:51:e6:a7:52:fb:ed:1b:3c:1c:0c:ce:2e:
                    3a:56:df:0a:4e:2d:56:85:45:4c:04:46:23:8b:30:
                    07:f2:16:62:e7:30:45:fd:05:37:7a:7d:78:1d:e4:
                    49:bb:b4:8a:86:0d:41:c4:ec:4c:b0:7f:4c:44:0c:
                    37:22:66:79:77:c8:b4:c7:7c:da:af:92:d9:7d:fd:
                    14:46:2a:da:47:fa:da:cb:10:6c:06:55:2f:cd:a0:
                    82:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8C:F3:7E:3E:28:8D:F7:37:EB:1C:C2:2A:2F:3B:25:F5:63:06:67
            X509v3 Authority Key Identifier:
                keyid:20:BA:71:E4:6C:75:91:6B:8E:5D:E1:93:CC:7F:81:06:9D:F8:6F:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILpx5Gx1kWuOXeGTzH-BBp34b3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d0642c-84e6-4290-afb1-484500bcfb07/1/ILpx5Gx1kWuOXeGTzH-BBp34b3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:20:09:4c:b3:0e:a0:f4:87:e5:d8:94:a3:0e:fa:d6:a0:9f:
         5c:00:ad:dc:44:fa:88:a7:18:64:bc:e4:4f:b9:5a:a8:e6:2c:
         9f:89:a4:09:d1:d2:90:1d:0e:46:d9:92:0d:98:cf:02:88:b0:
         71:ae:b6:82:3f:e3:c2:e8:45:5f:3e:01:d8:57:dd:c7:66:a1:
         6c:d2:a1:db:6e:c5:8a:dc:37:8d:6c:8d:12:f7:4d:67:78:6a:
         da:5a:dd:9d:d5:4c:b7:47:66:6d:df:97:60:5e:c0:47:99:8d:
         07:23:a0:2f:0c:68:65:77:88:80:0f:01:f7:03:18:cd:2b:f6:
         5a:a8:15:a4:d1:91:45:14:7b:04:f9:08:6f:cd:10:6d:32:73:
         1a:15:5f:21:2f:a1:f8:d1:74:ae:ef:fe:29:70:e9:ef:c4:d3:
         aa:f5:39:f6:70:b8:18:6d:79:7b:41:14:c5:ac:50:c5:ff:a7:
         fb:80:21:a1:6a:0e:6c:6a:0e:45:a7:77:1a:3b:2b:15:40:69:
         79:cf:cb:05:26:1b:ad:51:96:da:f4:32:e2:bd:d7:ad:fc:a4:
         ac:bd:ba:63:2a:eb:3d:04:be:57:02:50:54:98:3e:a9:a5:d6:
         8c:8d:ff:fd:47:e5:18:5c:25:5d:85:07:1b:d5:6a:d0:62:33:
         8f:87:ce:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:50 2025 by rpki-client