Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
File:                     IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft (raw, json)
Hash identifier:          UqjCiPo3S47nMonyudgiTBASo2BH20thNQCgBW8u9+0=
Subject key identifier:   7F:A1:1E:81:BF:F0:B8:8B:F4:36:9F:11:71:52:6E:D6:37:38:AE:B2
Authority key identifier: 23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29
Certificate issuer:       /CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
Certificate serial:       0198D62984FFC26B8B8C4078801541EE6370
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
Manifest number:          061B
Signing time:             Sat 23 Aug 2025 09:01:41 +0000
Manifest this update:     Sat 23 Aug 2025 09:01:41 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:41 +0000
Files and hashes:         1: IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl (hash: LiOOdAhxLaAhxKFe6upbLfVD/UMqoEwnVRajICveiMA=)
                          2: P4joPrMbyyf9eJU97dD_0zc8DJY.roa (hash: gl6GZ/HrB5BKfA9rjfcCYlZhjRwEwX8+Blcs80phGI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:29:84:ff:c2:6b:8b:8c:40:78:80:15:41:ee:63:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23329cb3abe4e940cfc62a20e2a6e2c28fc28329
        Validity
            Not Before: Aug 23 09:01:41 2025 GMT
            Not After : Aug 24 09:01:41 2025 GMT
        Subject: CN=7fa11e81bff0b88bf4369f1171526ed63738aeb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7b:64:46:8a:05:d0:07:a7:ad:5a:35:2a:07:
                    f2:4c:7c:8d:40:ec:a8:07:ec:98:11:e9:6a:06:66:
                    a9:c0:d6:5e:b8:c4:9a:c9:52:82:d8:11:0c:3e:da:
                    4d:16:d4:c8:f3:14:59:9d:92:e3:a9:11:10:09:ba:
                    40:2d:62:5c:88:6c:53:62:76:7f:f1:bc:ce:f6:aa:
                    6a:16:3d:9a:78:43:14:27:16:ad:1f:23:c4:cc:4f:
                    b6:81:64:0a:68:39:2d:66:d9:f5:37:5c:54:d0:b5:
                    f0:ae:a5:12:36:96:39:77:40:c4:86:c6:e9:e5:8b:
                    b0:e8:b5:cd:80:b4:35:db:53:68:2d:00:36:e0:49:
                    77:84:95:56:51:d8:c0:b1:27:a0:33:07:0e:3a:c8:
                    66:42:74:e0:ce:01:85:59:32:32:17:64:10:c6:49:
                    66:20:cd:cf:d5:9d:76:85:a3:1d:f4:5f:28:dd:ce:
                    ae:95:a5:e0:cc:4f:18:b7:7e:af:0e:d9:c1:80:d2:
                    97:41:51:73:4b:26:d3:60:2d:45:7e:02:5c:59:99:
                    78:a9:6b:75:56:2b:4b:7a:cf:57:9d:3e:fa:d7:c4:
                    6a:40:6b:bf:c8:d0:53:7c:68:08:ba:8b:aa:61:65:
                    b5:68:37:ac:ef:72:64:f0:8c:b0:ad:1f:10:45:d7:
                    7f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A1:1E:81:BF:F0:B8:8B:F4:36:9F:11:71:52:6E:D6:37:38:AE:B2
            X509v3 Authority Key Identifier:
                keyid:23:32:9C:B3:AB:E4:E9:40:CF:C6:2A:20:E2:A6:E2:C2:8F:C2:83:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IzKcs6vk6UDPxiog4qbiwo_Cgyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dd394b-6bc4-4e47-b012-518f2c8f846b/1/IzKcs6vk6UDPxiog4qbiwo_Cgyk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:29:55:9c:19:e5:21:98:1b:68:fc:94:90:ad:b1:88:20:23:
         aa:b3:6e:e0:8c:75:ec:e1:55:51:02:b2:2e:75:a0:ec:9d:6a:
         d5:69:e7:28:38:bb:bb:bf:b4:69:ac:37:1f:0f:b7:87:82:ee:
         06:76:62:54:65:9f:a9:5c:bf:cd:a2:02:be:4f:34:89:0a:cb:
         00:b9:98:31:15:1a:3d:cc:2d:a8:6d:da:41:a4:20:e7:d6:cb:
         e3:e2:12:6a:fc:5a:04:7c:d0:72:6f:88:f8:d3:f9:66:22:23:
         f1:56:f2:9d:df:4f:53:d2:e7:43:43:ca:93:eb:ec:b7:12:8f:
         b7:d3:f0:88:70:c8:dc:47:78:3a:59:fc:3e:2b:32:14:67:44:
         36:35:6f:33:c7:a7:f5:26:d9:9d:ae:ae:6e:00:ed:76:90:57:
         7d:32:e5:c3:c7:70:e8:78:ee:91:1f:ac:4a:1a:36:dc:71:80:
         b8:35:6e:4b:b0:50:cc:bf:0b:82:f1:47:d9:42:62:5f:24:41:
         d4:bc:dd:89:fe:6f:5f:9d:0f:ce:38:3a:73:0b:a2:e4:fc:0a:
         87:77:67:3c:ee:70:f3:9a:4b:b1:c8:b7:cc:18:98:8d:3c:69:
         3f:c1:99:5b:96:63:ae:56:c6:4c:17:13:6b:5d:49:a5:52:8b:
         65:f4:ff:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:11 2025 by rpki-client