Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
File:                     lISBYokoMa3VoH1DAuf8__UvAv0.mft (raw, json)
Hash identifier:          5OLN+xdyoFfSMJLiE9TAE2frKBAxO745eB36kvR1NJU=
Subject key identifier:   04:C0:45:A1:A2:22:8D:74:D8:4E:28:A7:C3:17:AE:A7:98:DB:D1:AD
Authority key identifier: 94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD
Certificate issuer:       /CN=94848162892831add5a07d4302e7fcfff52f02fd
Certificate serial:       0198D5BBF72119422257D150BCF26551DD5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
Manifest number:          0EBA
Signing time:             Sat 23 Aug 2025 07:02:01 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:01 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:01 +0000
Files and hashes:         1: lISBYokoMa3VoH1DAuf8__UvAv0.crl (hash: icGaCMPYFtb1vW7HCTelXNX3M9P8hePM3SXuqpxPKl0=)
                          2: pCjnVrP5FgTyxJCdVibTZfXsdQ0.roa (hash: 7mj8lx9tw06nsGTLuJVm0o+Fdl9vi8xRzCyfVBayZ+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:f7:21:19:42:22:57:d1:50:bc:f2:65:51:dd:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94848162892831add5a07d4302e7fcfff52f02fd
        Validity
            Not Before: Aug 23 07:02:01 2025 GMT
            Not After : Aug 24 07:02:01 2025 GMT
        Subject: CN=04c045a1a2228d74d84e28a7c317aea798dbd1ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:2f:0a:16:db:83:4e:36:95:c0:2a:99:3f:
                    25:59:17:a2:c8:41:29:1a:4f:30:f6:f3:a5:ef:9f:
                    ef:86:c7:f9:9f:9e:4d:3e:55:6f:36:87:36:93:f9:
                    16:fc:2f:d3:08:cb:43:02:f1:7f:54:f6:80:a5:14:
                    91:76:71:ac:99:84:d8:28:8a:28:bc:a6:9e:49:eb:
                    37:aa:47:5c:38:85:ec:0f:f1:23:4d:01:99:10:c9:
                    06:a9:64:3c:94:88:e6:e5:af:46:da:3b:01:71:a6:
                    bf:f0:e6:f1:e9:3e:cf:d6:0f:72:5a:fa:f7:b0:bd:
                    80:9a:fd:78:c1:b1:b5:ca:2b:60:a4:3e:e2:92:80:
                    b3:51:31:f0:7f:62:a7:3e:52:db:59:7e:7c:53:97:
                    1b:1a:cd:fa:1b:63:c2:fc:f1:f0:cc:a6:84:b0:22:
                    b4:a0:57:f1:e9:24:da:ec:0a:4b:5a:ce:29:bb:70:
                    3a:ab:74:6a:b4:92:a2:86:33:f1:f1:81:95:51:4d:
                    70:59:31:5e:7b:7f:54:98:01:b1:02:2f:16:66:82:
                    78:19:df:f8:ef:68:b4:7b:a1:bb:82:3d:3d:fd:e0:
                    20:0f:01:f9:df:b3:80:56:d9:e0:0c:4f:e7:c2:21:
                    d6:0d:74:9a:ed:dc:54:a5:7e:bd:d6:0f:f7:7e:f4:
                    b9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C0:45:A1:A2:22:8D:74:D8:4E:28:A7:C3:17:AE:A7:98:DB:D1:AD
            X509v3 Authority Key Identifier:
                keyid:94:84:81:62:89:28:31:AD:D5:A0:7D:43:02:E7:FC:FF:F5:2F:02:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lISBYokoMa3VoH1DAuf8__UvAv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/087353-76a0-4068-96df-119c3e7479d9/1/lISBYokoMa3VoH1DAuf8__UvAv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:e2:e0:9c:8a:c4:63:2a:69:0e:59:89:73:31:86:e0:00:a9:
         06:9d:09:04:49:ed:45:d0:41:d4:e2:b7:88:92:5f:7d:bb:f4:
         c0:cb:7c:96:51:a2:b9:df:36:b0:f8:c4:5e:b7:2d:6c:14:68:
         5f:bb:b0:fd:60:5c:1c:f7:df:93:a4:7b:d9:8e:a2:09:2d:8c:
         f3:1e:b1:c0:aa:f6:d4:89:69:bd:1d:de:7d:2a:b6:f3:76:82:
         05:6c:66:fd:91:34:66:9c:8a:e6:b5:8e:df:cc:0c:21:a3:ce:
         84:9c:bd:4f:d8:14:4a:66:0a:8b:45:2b:24:a5:47:3f:9d:f4:
         9f:02:f3:18:4f:a8:30:02:cf:e1:28:1f:32:91:dc:f2:73:10:
         fa:e9:87:56:71:af:30:2a:84:4c:ca:7b:bc:0e:18:6a:86:ef:
         03:61:e9:a9:b2:28:f8:5d:0c:44:bf:2d:26:b6:e1:16:e5:19:
         aa:a2:2a:42:45:e1:27:b1:19:a4:82:88:f9:77:bb:5c:f0:e5:
         e6:9f:57:a3:5f:49:6c:18:9a:69:9c:c9:91:47:08:12:33:74:
         0b:12:5f:73:27:06:cf:a7:f4:ee:50:f2:85:01:b3:bb:76:32:
         f4:86:bc:15:f0:60:e3:ab:e3:62:ae:87:99:b0:be:8a:ed:a8:
         56:b8:66:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:48 2025 by rpki-client