Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
File:                     il1FpMFzqusjbL6gnS6K_IBFFpU.mft (raw, json)
Hash identifier:          S7aowJsDnMuEQF7jMx25nEkSaYK7ilG+Mc6m/iqAn1c=
Subject key identifier:   82:0C:C9:24:15:1C:5E:D8:28:44:86:F0:6F:63:D1:1D:3E:49:92:09
Authority key identifier: 8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95
Certificate issuer:       /CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
Certificate serial:       019874BE590FCBD9C75DBB7779E8CA416959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
Manifest number:          0E18
Signing time:             Mon 04 Aug 2025 11:01:28 +0000
Manifest this update:     Mon 04 Aug 2025 11:01:28 +0000
Manifest next update:     Tue 05 Aug 2025 11:01:28 +0000
Files and hashes:         1: il1FpMFzqusjbL6gnS6K_IBFFpU.crl (hash: DezshNsPERqVyZtrS0pIFy8VQpXwZQuMhKGQF/mpB00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:be:59:0f:cb:d9:c7:5d:bb:77:79:e8:ca:41:69:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5d45a4c173aaeb236cbea09d2e8afc80451695
        Validity
            Not Before: Aug  4 11:01:28 2025 GMT
            Not After : Aug  5 11:01:28 2025 GMT
        Subject: CN=820cc924151c5ed8284486f06f63d11d3e499209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:e0:a4:4c:d6:0f:fb:c8:ba:9a:ef:09:0c:
                    e7:a1:01:7b:27:9e:18:1e:f0:8b:61:ef:d9:af:28:
                    73:de:27:c4:34:7f:c4:48:f6:15:f6:dc:89:74:5d:
                    e0:45:27:77:10:81:d6:2f:3e:38:a7:6d:b7:44:19:
                    bf:21:b0:16:c1:b8:69:25:41:02:06:73:e9:27:6f:
                    73:3a:4c:91:59:5e:e9:bb:e7:83:bf:f1:35:a6:24:
                    dc:96:f0:40:e5:77:36:8d:53:05:69:2e:7f:1a:b6:
                    a8:d2:c6:f0:95:ee:1e:87:e0:9b:71:2d:35:df:6c:
                    06:cb:57:07:3a:a7:67:09:bb:7e:77:6d:be:6e:ad:
                    55:b0:37:2c:56:51:50:3a:e5:0c:af:de:98:db:45:
                    56:d9:4a:55:c4:8a:d1:c7:04:4a:da:79:0b:4a:bf:
                    34:5e:cb:e9:60:27:68:db:4c:e3:b7:17:72:62:65:
                    f9:23:a8:3b:c8:4a:ba:82:05:21:b1:af:31:97:c4:
                    d3:bd:54:1d:1b:7f:40:b2:e2:50:b3:22:2e:7f:f3:
                    2f:be:89:1a:e0:44:e5:3d:32:88:41:7b:4b:07:71:
                    2a:e3:24:a6:28:d2:5e:41:8b:64:6d:85:07:9e:2e:
                    cf:05:06:d6:f3:4f:b2:ec:f3:b8:f6:97:18:04:d2:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0C:C9:24:15:1C:5E:D8:28:44:86:F0:6F:63:D1:1D:3E:49:92:09
            X509v3 Authority Key Identifier:
                keyid:8A:5D:45:A4:C1:73:AA:EB:23:6C:BE:A0:9D:2E:8A:FC:80:45:16:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il1FpMFzqusjbL6gnS6K_IBFFpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5c88cc-bd06-4c3f-9356-e06b204ac494/1/il1FpMFzqusjbL6gnS6K_IBFFpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:75:5a:06:9c:07:2b:31:4b:d3:26:bd:6a:c3:a0:7a:16:2b:
         ad:b5:bf:54:91:4e:62:f2:48:15:49:06:46:1c:4a:90:ad:5e:
         46:4f:a8:a3:8b:2b:73:97:d0:1d:c8:1d:86:44:11:0a:fd:a8:
         56:20:05:46:9b:9a:94:6f:1d:73:07:58:b9:35:bb:d3:ce:70:
         f5:23:fc:2d:69:d5:cc:78:66:1a:64:6e:24:8f:43:ad:47:a8:
         93:a1:e4:ce:b7:be:95:b0:f1:b7:d2:85:e0:a7:a3:2d:32:4f:
         04:40:65:81:2a:4e:1b:33:59:ec:21:00:c0:88:cd:32:21:8c:
         47:d6:c9:78:1f:22:24:27:2a:b7:39:9d:ec:e5:85:43:85:d8:
         dc:12:d9:c8:a4:83:38:6d:fa:2c:3f:40:2b:13:60:13:4d:2e:
         15:f6:0a:5f:54:e2:e0:42:95:57:5c:dd:e9:f1:b8:01:57:b6:
         a0:0f:1c:39:81:c2:38:12:1d:fe:68:95:46:75:db:ef:34:97:
         4b:cc:48:0f:73:9d:d0:42:3d:26:70:3a:f7:cb:d6:13:7b:28:
         7c:bc:16:e0:c7:35:0d:17:fa:4c:61:59:85:12:5d:3e:e4:0a:
         a6:8e:ef:ff:00:38:e9:0c:5e:10:78:ad:de:82:9e:a0:68:dc:
         73:82:a7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:09:53 2025 by rpki-client