Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
File:                     IszPoSLTuug6vlRBwKGcm-E_VIs.mft (raw, json)
Hash identifier:          /63/q5S/M+aAWyvaToa6iDeKsTkAzzHKZyEIbz+pxl4=
Subject key identifier:   AF:AB:FC:28:2F:A2:64:26:DF:5D:08:27:5B:A7:5B:C3:8E:D7:69:8C
Authority key identifier: 22:CC:CF:A1:22:D3:BA:E8:3A:BE:54:41:C0:A1:9C:9B:E1:3F:54:8B
Certificate issuer:       /CN=22cccfa122d3bae83abe5441c0a19c9be13f548b
Certificate serial:       01976FD0AF2C667365D727865C7F17B6EB31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
Manifest number:          0C37
Signing time:             Sat 14 Jun 2025 19:00:36 +0000
Manifest this update:     Sat 14 Jun 2025 19:00:36 +0000
Manifest next update:     Sun 15 Jun 2025 19:00:36 +0000
Files and hashes:         1: IszPoSLTuug6vlRBwKGcm-E_VIs.crl (hash: 6zAwoGdBfCsEK4OMDN7l+dbthpcLtf+aqErtjXpX+Pk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:d0:af:2c:66:73:65:d7:27:86:5c:7f:17:b6:eb:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22cccfa122d3bae83abe5441c0a19c9be13f548b
        Validity
            Not Before: Jun 14 19:00:36 2025 GMT
            Not After : Jun 15 19:00:36 2025 GMT
        Subject: CN=afabfc282fa26426df5d08275ba75bc38ed7698c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:5c:96:30:8f:6d:ee:9d:ff:93:4b:1e:10:
                    8e:6b:ef:d1:b2:24:20:38:21:2b:78:53:d7:5a:a4:
                    da:38:5a:a4:61:49:cd:57:97:0d:26:b3:a6:11:39:
                    62:77:a0:4c:5d:16:9c:60:35:f8:b9:76:82:ff:46:
                    e4:b1:90:d4:3b:23:4a:b6:bb:d7:de:ec:a4:06:63:
                    e3:20:17:ce:f6:23:73:b8:51:13:8a:37:98:24:a6:
                    34:fe:69:09:f6:c1:80:87:2c:ba:43:00:8c:e6:38:
                    e6:48:f7:c0:87:73:67:b6:9d:81:6d:22:32:f0:42:
                    b1:45:f7:3d:d5:6e:42:1b:5b:99:eb:17:4e:8a:a4:
                    dd:97:61:4b:82:14:82:a6:74:a4:f8:5a:5d:31:e3:
                    df:58:94:30:d1:97:1c:76:37:c1:67:88:21:02:0f:
                    c8:3c:8d:fd:fc:1a:ba:70:dc:ec:76:83:47:2e:52:
                    b1:6f:dc:64:06:88:ee:5e:06:5c:b8:d4:d7:29:62:
                    e0:ec:bb:d4:89:09:b2:75:1b:d0:08:9f:f0:2c:3e:
                    94:d0:f9:e2:90:9c:98:2d:a1:92:3f:fd:e3:f7:68:
                    0f:6c:87:78:e7:91:be:09:3b:59:db:35:51:b8:dc:
                    65:ae:6b:8f:0d:71:14:0c:d8:79:79:96:0f:2f:74:
                    8a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AB:FC:28:2F:A2:64:26:DF:5D:08:27:5B:A7:5B:C3:8E:D7:69:8C
            X509v3 Authority Key Identifier:
                keyid:22:CC:CF:A1:22:D3:BA:E8:3A:BE:54:41:C0:A1:9C:9B:E1:3F:54:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b3:f2:63:43:14:98:0a:6f:23:43:50:36:df:45:e0:f1:f8:
         50:6a:b2:2c:59:fd:64:15:9c:c3:72:4a:0b:d8:2b:40:1b:d7:
         07:0f:43:f6:c0:bd:d4:b6:65:49:cc:63:ad:d0:97:57:58:20:
         a8:3d:f4:17:b7:cf:b2:3d:fb:d0:b2:a5:e0:f4:74:ee:48:c8:
         e1:08:72:e1:17:39:12:52:19:4b:87:90:0c:5a:f4:10:d9:1c:
         c5:5c:a4:8f:83:a6:06:ad:d9:af:40:2d:4f:92:5d:52:5f:8f:
         7c:a8:f1:37:61:a8:17:be:1b:1d:36:4a:e1:bd:a3:ee:db:ce:
         a3:00:a3:20:73:95:4f:4c:ab:06:7e:5b:20:a9:73:40:6c:ad:
         f6:64:59:f8:0b:f9:22:d5:b6:ac:89:11:cd:92:3b:ac:80:38:
         87:49:b3:8e:c1:3b:3e:7a:4a:ec:d8:26:40:b0:8f:b1:d7:4d:
         4b:35:de:9c:18:da:f5:88:dd:bc:c3:88:2c:79:13:ce:0d:8a:
         36:c0:ea:e4:ca:20:0e:d1:97:5f:69:c9:61:30:cf:b9:97:7c:
         36:47:e8:b8:ad:66:db:a8:7d:b3:e6:25:82:d8:29:25:ac:4d:
         3c:26:80:ad:9d:f5:b2:f4:0a:86:bd:aa:9d:18:a5:1a:2d:81:
         90:1d:81:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:13:27 2025 by rpki-client