Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft
File:                     iLJuRMUJzzYPfLp8ijtRNABSrzE.mft (raw, json)
Hash identifier:          7nqmRNQaDGw++ad5eMZjN2fckNgo68OlBWAgm5MElDg=
Subject key identifier:   27:97:42:EF:10:B8:49:29:E8:58:CF:BF:BF:65:C8:66:5C:1C:5F:32
Authority key identifier: 88:B2:6E:44:C5:09:CF:36:0F:7C:BA:7C:8A:3B:51:34:00:52:AF:31
Certificate issuer:       /CN=88b26e44c509cf360f7cba7c8a3b51340052af31
Certificate serial:       0198D65F393AAF38E0ABCAC381F0709744D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iLJuRMUJzzYPfLp8ijtRNABSrzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft
Manifest number:          093C
Signing time:             Sat 23 Aug 2025 10:00:21 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:21 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:21 +0000
Files and hashes:         1: iLJuRMUJzzYPfLp8ijtRNABSrzE.crl (hash: XDeRuGQ/F1MdIGL4XwBsEQIDNu/YEI6sQ07TChmcL0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iLJuRMUJzzYPfLp8ijtRNABSrzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:39:3a:af:38:e0:ab:ca:c3:81:f0:70:97:44:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88b26e44c509cf360f7cba7c8a3b51340052af31
        Validity
            Not Before: Aug 23 10:00:21 2025 GMT
            Not After : Aug 24 10:00:21 2025 GMT
        Subject: CN=279742ef10b84929e858cfbfbf65c8665c1c5f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b6:e5:f8:8f:ec:e1:dc:e0:53:a4:ad:8d:d5:
                    0d:56:f3:6f:b4:0c:0e:d3:69:9f:da:b8:d7:38:db:
                    b6:ac:a9:2a:4b:c8:c2:77:e3:3f:b6:bf:8a:9b:f8:
                    11:29:bf:de:e8:5d:97:3f:d4:2d:33:5c:1c:9c:0a:
                    56:d1:6b:a8:21:2d:85:fb:97:6f:0e:2d:7d:33:2d:
                    fa:2c:ce:76:28:c6:9f:80:d6:39:f7:cb:26:50:bd:
                    4c:b1:4a:0b:ef:e3:5b:14:1e:83:65:b3:0a:4f:b6:
                    12:21:71:90:4b:52:9b:ff:16:c8:eb:6c:7b:24:4b:
                    8e:0a:e9:ca:46:ab:3d:2b:bb:a5:22:c0:6a:53:30:
                    ed:31:ec:b1:8e:22:1c:ec:d6:c7:ee:2f:1d:4b:c3:
                    d8:11:9a:21:f5:e9:de:7e:9e:12:c8:3e:d5:c8:db:
                    f8:ae:aa:9c:70:bf:e1:e5:10:51:d7:34:04:ce:1d:
                    ea:42:4c:4c:0b:b2:fc:0c:3c:3b:fc:04:15:3f:51:
                    37:a9:e8:61:8d:81:5b:b9:82:b7:36:0f:22:c5:83:
                    3e:e4:69:45:3d:f1:50:6a:65:d3:fe:da:ac:f8:ca:
                    1a:04:db:50:df:6f:ff:2a:d7:88:18:eb:4e:e6:e0:
                    24:a9:4f:19:d1:a0:c5:af:a7:dd:d1:09:74:65:8b:
                    d7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:97:42:EF:10:B8:49:29:E8:58:CF:BF:BF:65:C8:66:5C:1C:5F:32
            X509v3 Authority Key Identifier:
                keyid:88:B2:6E:44:C5:09:CF:36:0F:7C:BA:7C:8A:3B:51:34:00:52:AF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLJuRMUJzzYPfLp8ijtRNABSrzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dbd6cc-c6ef-4d7a-9876-0ef790a7b90e/1/iLJuRMUJzzYPfLp8ijtRNABSrzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:67:11:64:d1:8e:35:77:dc:71:d8:12:00:f0:b9:7a:03:72:
         92:34:0f:3b:f6:5f:3b:b8:a7:05:e9:69:c2:20:e8:6b:b1:41:
         2a:51:9a:66:37:fe:86:09:9b:ff:f6:f7:29:d5:0c:f1:6f:c5:
         18:3b:6e:fa:ab:8d:c6:63:de:c5:41:c8:70:62:41:e3:00:b8:
         9a:c3:0b:02:ea:bb:07:a4:bd:93:5d:1c:79:32:a1:05:4e:fb:
         15:e3:68:75:38:c6:52:f1:e1:26:0f:e4:5a:17:2a:ff:7b:78:
         c4:a3:b1:57:1c:cd:fc:bc:cb:33:13:f0:05:55:09:10:3f:d1:
         ec:d6:7f:d2:e8:bf:d2:ee:64:ea:43:e4:75:19:8c:d8:7c:48:
         a2:88:85:7b:31:38:95:a0:5b:24:dd:54:f9:77:8d:ea:34:b6:
         a4:a5:a2:a7:ea:66:1b:b2:48:74:ad:10:e9:5e:03:f9:92:5b:
         76:dc:c0:7a:37:c7:7e:d3:4a:13:b9:95:d1:df:c1:82:05:91:
         fc:f4:d3:18:42:27:50:34:09:89:c6:18:61:77:d9:3b:54:93:
         bf:ae:a8:d7:5f:2e:99:e7:9b:cb:96:0c:cb:82:6e:08:38:f1:
         7a:df:5b:b0:81:4c:79:21:43:7f:b0:1c:d9:62:c1:24:67:09:
         d2:f1:a4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:51:10 2025 by rpki-client