Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
File:                     Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft (raw, json)
Hash identifier:          KbWXbjuZt7fqFHrnKVUsOl2dzrUBkwlUIG67DWvcRCk=
Subject key identifier:   1C:CF:4E:F2:93:20:83:70:43:CA:5D:AF:A2:AB:64:39:AB:EA:2F:40
Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
Certificate issuer:       /CN=233adc97f9826262007f46286591830df58fc55e
Certificate serial:       01987FE6DF39063C032F92901BAB39760562
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
Manifest number:          0A48
Signing time:             Wed 06 Aug 2025 15:01:33 +0000
Manifest this update:     Wed 06 Aug 2025 15:01:33 +0000
Manifest next update:     Thu 07 Aug 2025 15:01:33 +0000
Files and hashes:         1: Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl (hash: wlFXYQOoLsEW8dx4VPL1lUtkUA7CSesJSNWyNWPYJWQ=)
                          2: R7UR19A8DA5u7WHUKAJI549nkdo.roa (hash: 4PQK0W7UKUZhH5u+a1D7FV7JRsd1931HwX1XToed8Vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:e6:df:39:06:3c:03:2f:92:90:1b:ab:39:76:05:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233adc97f9826262007f46286591830df58fc55e
        Validity
            Not Before: Aug  6 15:01:33 2025 GMT
            Not After : Aug  7 15:01:33 2025 GMT
        Subject: CN=1ccf4ef29320837043ca5dafa2ab6439abea2f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:c2:8c:1c:6f:08:60:ec:94:57:65:4d:c4:
                    68:da:d0:3d:09:05:1c:5e:1e:76:e6:3b:85:97:2e:
                    b0:54:87:5c:dd:e6:56:6e:59:f6:bc:05:e5:6b:26:
                    48:53:d5:85:44:da:e8:ac:bb:76:a7:81:2f:3b:5b:
                    fe:7f:38:61:be:e4:04:56:02:c4:41:8f:b2:0a:90:
                    f4:80:91:1b:c2:0a:cd:42:b9:e8:d6:33:80:fe:85:
                    09:d6:26:11:b8:a5:c6:cd:b0:a4:c4:8c:d7:e8:75:
                    a6:c9:ee:c2:d3:c8:de:dc:d1:79:ee:55:cf:ae:b3:
                    03:27:0a:2a:18:10:40:bf:f3:44:67:e9:84:b3:cc:
                    eb:9e:8a:d0:ac:e5:41:11:da:d7:78:b2:3e:c6:db:
                    fb:74:9f:51:ec:01:b7:8b:48:e0:c3:f2:8c:ae:55:
                    a5:8c:0d:3f:6e:52:fb:11:c3:08:52:af:5e:c1:fa:
                    d0:b4:36:b5:80:0d:f9:29:8b:51:8f:e2:91:8c:83:
                    10:08:db:6e:91:35:94:92:fb:41:e2:ea:34:77:72:
                    55:55:4b:3e:15:67:6e:c8:d5:22:8d:2c:db:a0:bc:
                    8b:be:6e:2a:21:d3:44:f7:10:eb:ac:cc:8f:b3:3d:
                    5a:1a:70:06:d2:7b:59:e1:8f:84:7d:5a:9f:a9:b6:
                    4c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CF:4E:F2:93:20:83:70:43:CA:5D:AF:A2:AB:64:39:AB:EA:2F:40
            X509v3 Authority Key Identifier:
                keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:28:b9:0a:af:e9:dd:6d:0a:61:3c:33:fb:11:f6:ca:57:bc:
         64:63:f4:e8:3c:62:f9:04:1d:b8:03:68:57:4b:93:a7:34:a4:
         dc:96:23:f2:fd:62:fe:0a:5d:d0:b7:56:64:d1:06:4d:6f:c5:
         c1:e0:05:ff:c6:6d:41:90:19:03:b0:4b:da:bf:14:37:4e:6e:
         b2:f2:97:05:54:df:5d:96:2b:be:32:34:f2:e6:6e:84:77:88:
         03:e6:69:5c:0d:8a:c0:1c:69:a6:eb:af:71:f8:43:15:6a:1b:
         65:93:71:0d:d5:2c:8f:ba:26:68:b5:22:52:44:8e:99:42:90:
         00:98:59:99:85:9c:bf:0e:0f:1e:15:fb:e3:c1:50:93:19:26:
         20:c2:57:68:7f:2b:26:a8:0f:29:c6:e7:ea:a5:0d:95:35:62:
         07:92:13:0e:57:4b:c1:64:25:99:c1:eb:98:da:93:56:0d:81:
         d6:33:43:5e:d5:07:f4:77:64:11:68:b7:13:f7:2a:2d:e0:68:
         56:b0:b0:ef:17:7b:36:73:98:47:8e:1f:4f:d9:da:88:3a:ce:
         d6:5d:5b:79:88:83:cb:94:5c:06:35:b2:08:75:ec:0f:04:f6:
         55:5f:aa:01:9c:b7:66:b3:c4:56:55:b9:fa:49:47:28:24:68:
         1e:73:19:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:31:13 2025 by rpki-client