Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
File:                     SIkYymYYDe4Hm69FBT5M61dikr0.mft (raw, json)
Hash identifier:          AeipxprdjioKQFcgsxuC//nPcY2Sho0NFFYaPJqTjlU=
Subject key identifier:   21:87:77:DF:D4:98:03:1F:14:B3:F0:43:5D:C0:25:46:2F:F9:89:46
Authority key identifier: 48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD
Certificate issuer:       /CN=488918ca66180dee079baf45053e4ceb576292bd
Certificate serial:       0198892077DF51A311312E1D6F26B1AA89D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
Manifest number:          15B2
Signing time:             Fri 08 Aug 2025 10:01:02 +0000
Manifest this update:     Fri 08 Aug 2025 10:01:02 +0000
Manifest next update:     Sat 09 Aug 2025 10:01:02 +0000
Files and hashes:         1: SIkYymYYDe4Hm69FBT5M61dikr0.crl (hash: rZSHQdPAZmbtnHu27YK9b6bJkkQKPikwdDEMf1Bzil8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:20:77:df:51:a3:11:31:2e:1d:6f:26:b1:aa:89:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488918ca66180dee079baf45053e4ceb576292bd
        Validity
            Not Before: Aug  8 10:01:02 2025 GMT
            Not After : Aug  9 10:01:02 2025 GMT
        Subject: CN=218777dfd498031f14b3f0435dc025462ff98946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a8:36:d7:6c:a5:67:a7:44:ab:21:cf:2e:25:
                    91:90:aa:dc:76:70:4c:4d:10:0b:65:af:42:6a:89:
                    5a:9e:7a:8c:0c:b7:ea:71:9f:e1:b1:f4:a5:57:6a:
                    f2:23:38:ad:a3:5d:5d:f6:ab:e2:a3:e6:7a:d7:cc:
                    5c:0a:ee:4b:2a:83:08:bb:43:71:26:34:95:09:d1:
                    ad:d8:01:cd:75:26:f8:e3:fb:19:ff:d4:53:2e:53:
                    01:22:89:3c:07:00:f4:27:38:9f:2c:c4:c8:54:c1:
                    cd:ed:c4:45:82:9c:8a:03:3f:7a:d7:f0:a3:60:3d:
                    93:05:16:ca:00:1f:68:a6:66:76:6b:2a:a5:8e:f2:
                    32:81:62:b0:7e:f1:7c:ac:3c:cd:24:33:73:9e:1f:
                    a6:54:6b:95:16:0a:44:dc:6e:9c:8d:5c:ac:a0:4a:
                    55:b2:93:d8:95:08:2c:95:6a:6e:2e:f4:2e:54:ad:
                    76:5c:6e:b9:15:82:3a:72:c7:26:ac:33:0d:86:cf:
                    b3:9b:df:93:52:59:9d:ca:26:f8:5e:0b:14:d9:f0:
                    00:8a:c2:44:f5:66:09:83:a4:02:9a:a3:4d:c6:1f:
                    e9:a1:93:2b:b5:42:5e:b1:12:e5:c8:44:bf:cf:1d:
                    bd:cb:3c:3c:3b:cd:61:bf:e3:c9:cc:89:46:8f:83:
                    10:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:87:77:DF:D4:98:03:1F:14:B3:F0:43:5D:C0:25:46:2F:F9:89:46
            X509v3 Authority Key Identifier:
                keyid:48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0e:aa:2a:b5:4e:55:58:52:fc:24:10:1f:e7:bb:98:c6:42:
         f1:b6:4f:d1:5b:e1:8c:c4:13:8d:dd:16:4f:da:15:12:43:05:
         d1:02:ff:60:81:08:5a:61:80:ab:d9:e0:4d:09:74:81:22:72:
         1a:58:6c:e1:d9:73:fb:54:33:1d:e6:fc:86:0a:df:57:e5:fe:
         99:e9:89:9f:28:41:9d:74:a8:09:67:a4:ef:4f:de:1b:21:77:
         73:50:ff:36:95:45:25:57:7e:ba:8d:d8:35:9e:43:66:1a:c0:
         2c:c1:50:d1:f4:83:7b:1d:e9:7b:25:ba:f5:fd:3c:e3:ff:d9:
         7a:64:ed:f9:25:91:4b:ec:e0:c2:17:03:14:08:29:d8:8f:4a:
         bf:80:79:32:94:2a:c1:39:67:61:32:4e:30:37:45:58:98:fe:
         e6:98:0c:63:bb:e9:2e:52:00:85:23:06:1e:39:2f:ce:ef:13:
         c9:66:c9:ec:90:a9:22:3d:0d:c2:dc:ee:ea:98:ad:c7:1d:eb:
         d1:81:c0:56:58:e6:ca:51:06:1c:4a:a6:9c:d4:bb:65:17:2f:
         ec:6b:50:81:dc:39:a1:72:e3:39:63:39:a3:10:d8:61:d2:2d:
         2c:6a:f5:6a:bc:5b:48:41:27:dd:9d:f2:4e:04:50:ca:37:4b:
         9a:08:76:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:49:23 2025 by rpki-client