Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
File:                     imo0EVg-JhQzSS5QR88xxGw9LB0.mft (raw, json)
Hash identifier:          F1wl/kwiu9tOMIfmCY3lnCXtvJJ8uw7exKaCf6Wp20g=
Subject key identifier:   80:6F:E2:7B:33:BF:EB:2F:24:93:B9:03:11:2A:17:59:01:F6:81:67
Authority key identifier: 8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D
Certificate issuer:       /CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
Certificate serial:       0198D5BB7D6DF5984E29A737BAF51FA735F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 07:01:30 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:30 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:30 +0000
Files and hashes:         1: imo0EVg-JhQzSS5QR88xxGw9LB0.crl (hash: 9PRcvtqPwsq+8q6qXeihWiUYgsw2Z/ZB43lTDTZFWUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:7d:6d:f5:98:4e:29:a7:37:ba:f5:1f:a7:35:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6a3411583e261433492e5047cf31c46c3d2c1d
        Validity
            Not Before: Aug 23 07:01:30 2025 GMT
            Not After : Aug 24 07:01:30 2025 GMT
        Subject: CN=806fe27b33bfeb2f2493b903112a175901f68167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:23:3d:47:74:45:15:b5:3e:91:92:64:6f:5d:
                    e1:d3:62:04:3e:6c:7c:07:20:88:cf:14:6d:41:a1:
                    d4:5f:55:e4:42:99:30:6c:2c:5d:e7:ff:a1:42:ea:
                    76:2c:3c:86:16:5f:1a:92:46:51:89:f5:a0:ae:e1:
                    7c:e7:82:70:3f:1d:a0:9e:54:de:a4:43:fb:01:9f:
                    f7:59:af:4c:c8:93:9e:f4:77:da:97:02:b0:53:74:
                    9f:87:7a:7c:b1:46:f0:a9:15:2f:60:ae:28:a6:f7:
                    0d:c1:45:57:14:e4:93:ee:e4:a4:1e:7b:54:4d:03:
                    64:0d:22:0c:22:8b:26:a2:4e:75:f7:fd:db:72:bf:
                    d1:b8:8a:85:1b:38:7f:ed:7d:09:55:5e:fb:63:b6:
                    9d:a1:a7:6a:2f:dc:52:92:93:d4:c5:e3:3a:e5:a9:
                    72:48:36:52:49:96:10:0a:f7:3f:ed:36:3d:71:01:
                    d8:88:ef:5c:e9:de:17:d8:57:b3:f1:19:32:4e:53:
                    fb:17:69:f2:81:b4:28:66:38:32:77:11:d0:b1:30:
                    3d:95:77:7d:6c:6c:c8:62:2b:ea:e7:f3:b6:54:67:
                    37:d2:b1:0e:81:7f:86:e4:d9:12:58:7d:b7:e7:6e:
                    f1:b5:5f:8a:7f:16:36:58:b4:88:cd:62:6a:a5:7a:
                    1d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6F:E2:7B:33:BF:EB:2F:24:93:B9:03:11:2A:17:59:01:F6:81:67
            X509v3 Authority Key Identifier:
                keyid:8A:6A:34:11:58:3E:26:14:33:49:2E:50:47:CF:31:C4:6C:3D:2C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imo0EVg-JhQzSS5QR88xxGw9LB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/282974-37fb-4d85-92bf-7098a7a52c7e/1/imo0EVg-JhQzSS5QR88xxGw9LB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b0:ef:ea:87:47:8d:d4:62:01:78:d8:6c:d2:7a:9e:8d:4a:
         b7:99:07:26:e4:9f:fb:f4:ee:58:5e:74:66:cb:68:2b:26:05:
         f2:f9:61:c5:e2:e7:e9:c6:28:19:5d:20:01:78:75:34:fe:57:
         ea:50:98:ff:40:e4:41:31:d6:d3:af:ce:72:98:d1:60:f6:30:
         60:d1:00:7b:0e:41:b7:4d:62:df:43:a9:5f:3d:d6:8a:bc:dc:
         c5:f2:4c:c2:7c:1c:fe:11:99:4b:a3:b0:44:04:1a:cc:dc:21:
         5c:b6:0b:7a:46:d8:75:bd:be:53:e9:0c:32:a9:22:27:3e:e6:
         c0:46:be:cb:85:29:e9:72:f5:45:e3:aa:b7:ae:b1:ed:a5:3b:
         1f:ba:37:8f:6d:2d:90:f3:87:b8:7f:4b:f6:53:75:96:71:fb:
         cb:ff:f7:3b:4e:9a:35:fe:a9:3d:f3:1b:48:4d:22:50:4d:df:
         5b:26:53:11:c0:36:84:fb:9d:fb:a8:f7:5c:a1:15:8a:55:39:
         82:05:88:84:7f:04:60:48:7c:d2:e0:e4:b2:7c:88:cb:2a:19:
         c1:9b:90:39:e6:a6:fd:f0:bb:30:a7:19:43:42:b0:a1:74:51:
         f6:76:16:c2:19:50:d7:6a:b6:38:da:8d:85:fd:25:a4:ba:32:
         11:1d:2f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:50 2025 by rpki-client