Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
File:                     I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft (raw, json)
Hash identifier:          QQIoHlaiRXz+k3Ok7BX35U83C7ivwYUw0dsW1Pghn38=
Subject key identifier:   93:29:6F:3A:89:8B:87:99:08:E4:5A:17:E0:47:C6:09:37:10:57:40
Authority key identifier: 23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D
Certificate issuer:       /CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d
Certificate serial:       0198D66122FD784C1047FD641B40A50FC543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
Manifest number:          06D4
Signing time:             Sat 23 Aug 2025 10:02:26 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:26 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:26 +0000
Files and hashes:         1: I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl (hash: IdIXMid4ByfzHoHBG2lFatSGci/j5QUbKX9d3a1Ff1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:22:fd:78:4c:10:47:fd:64:1b:40:a5:0f:c5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2365aa3df58c9e55d9e07ea2cff2cae85ee15c1d
        Validity
            Not Before: Aug 23 10:02:26 2025 GMT
            Not After : Aug 24 10:02:26 2025 GMT
        Subject: CN=93296f3a898b879908e45a17e047c60937105740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ae:00:69:29:a1:c1:aa:57:5b:ff:f3:1c:98:
                    ec:3a:c1:fe:cd:99:6d:95:08:80:fa:c8:3b:f0:37:
                    e9:a0:d1:e2:0e:fb:21:4f:eb:9e:63:2a:eb:3a:39:
                    8f:b7:42:95:65:73:d8:33:90:f5:41:63:ce:92:ae:
                    5e:5e:c6:3d:d6:2b:23:c5:1f:1e:72:88:68:e7:45:
                    f9:72:01:45:26:64:48:81:af:f8:eb:48:eb:b4:5c:
                    d8:91:bd:c7:07:d9:07:b4:68:73:23:40:dd:d4:2a:
                    3d:37:22:61:55:6a:99:cd:81:b0:70:d1:0b:9e:ea:
                    b6:36:dc:b0:2b:62:4f:1b:f3:08:6c:4b:ba:99:f1:
                    27:43:20:49:5a:85:aa:b6:a8:26:b1:36:58:51:a5:
                    ed:94:97:82:11:09:d1:db:5d:1a:5f:c8:44:a5:50:
                    e0:6a:7d:5b:71:08:e9:45:f5:15:f9:f6:14:6c:f0:
                    97:f6:d3:75:74:d0:20:ca:14:11:8e:a5:49:51:34:
                    e5:48:cf:4f:e4:e8:6e:b1:37:1e:eb:c0:78:dd:54:
                    71:7c:41:8a:a7:ed:95:79:ae:bd:54:f6:5a:be:4d:
                    bc:ed:fe:5b:30:6f:1b:bb:29:2f:2e:4e:6b:93:9a:
                    04:9f:de:3f:79:c0:42:52:4b:e2:fe:7f:cb:11:fe:
                    57:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:29:6F:3A:89:8B:87:99:08:E4:5A:17:E0:47:C6:09:37:10:57:40
            X509v3 Authority Key Identifier:
                keyid:23:65:AA:3D:F5:8C:9E:55:D9:E0:7E:A2:CF:F2:CA:E8:5E:E1:5C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22078d-cd51-4ed2-bbbd-82ce464c2cdd/1/I2WqPfWMnlXZ4H6iz_LK6F7hXB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:9e:12:b9:25:ca:27:94:f5:0d:51:cd:45:c0:cb:80:2a:79:
         48:63:37:c9:4b:2c:04:e6:3f:58:dd:4f:13:73:0e:f0:6c:20:
         1b:1c:ad:40:82:b9:b0:c8:c3:1a:14:f8:81:12:d0:29:e7:4b:
         e7:a9:8a:a2:05:c4:73:e0:13:5b:fc:8e:57:fa:d0:ce:33:44:
         19:1a:3e:cc:0c:34:21:40:b7:85:f2:f3:f6:5f:fa:0b:fe:b9:
         d1:2a:bc:6d:55:98:a8:9d:73:fc:8d:ae:15:8d:87:21:eb:ec:
         89:dd:ea:54:b9:9a:b9:54:71:fe:fe:fc:d8:80:e1:c6:e3:ee:
         75:0b:89:a7:bc:06:2b:1a:2a:ff:a4:f6:b7:e6:4b:e4:f8:30:
         26:b4:1e:45:41:75:33:bb:a4:e5:3f:d5:81:a8:69:8f:ff:b3:
         1d:ea:d7:44:11:7d:6e:78:47:15:c8:be:a9:0d:e1:99:c4:45:
         24:8d:c2:60:71:30:1c:9a:6e:25:16:ff:93:fd:b6:3d:95:2e:
         65:ff:c2:d6:6d:c8:3c:ae:c8:60:f1:68:01:4b:73:79:02:18:
         3b:23:bd:1c:db:a5:a8:42:f2:75:4f:c8:2b:0c:22:27:6e:2b:
         10:45:0c:a1:e2:e3:ac:c3:b8:b5:54:4a:67:c3:e3:ef:da:82:
         9b:35:37:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:28:07 2025 by rpki-client