Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
File:                     8JLOTWiFNFSE6Zp312Fm_HICIDM.mft (raw, json)
Hash identifier:          t0a6eYluNtn6C920UsAmNFoCZYKgpwOIv4G4ZeiCrg8=
Subject key identifier:   26:12:33:E4:81:4E:2D:5A:1C:95:72:68:BD:91:6B:85:7F:F6:8D:0E
Authority key identifier: F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33
Certificate issuer:       /CN=f092ce4d6885345484e99a77d76166fc72022033
Certificate serial:       0198D54E201D94D648A8FB54ACC24A519E6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 05:02:03 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:03 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:03 +0000
Files and hashes:         1: 8JLOTWiFNFSE6Zp312Fm_HICIDM.crl (hash: cEYasCoJWzgo4xPgzhI26h6CM3S5hTWGf8UAlHB6CY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:20:1d:94:d6:48:a8:fb:54:ac:c2:4a:51:9e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f092ce4d6885345484e99a77d76166fc72022033
        Validity
            Not Before: Aug 23 05:02:03 2025 GMT
            Not After : Aug 24 05:02:03 2025 GMT
        Subject: CN=261233e4814e2d5a1c957268bd916b857ff68d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:19:0f:ae:88:3b:cc:b8:b5:16:58:9c:a2:
                    d6:ad:90:0f:79:6d:a4:06:7b:ca:2b:5a:9a:ec:4a:
                    10:17:e8:ff:70:5b:1b:0e:d0:0c:fb:c0:4e:8b:d1:
                    47:7a:b8:ff:b6:2c:f2:d2:ec:1f:65:f0:28:f3:40:
                    5a:c7:94:51:a4:40:ea:06:94:6f:24:21:b1:a1:e0:
                    d6:c5:ab:d5:25:4b:6a:d8:70:30:58:20:d4:cb:29:
                    f1:b7:7f:e1:56:ac:fd:28:c2:ea:86:ba:7f:fb:0a:
                    36:52:31:dc:df:e1:60:b4:96:6e:06:ee:d5:09:f0:
                    28:c6:09:c8:0b:82:bd:a0:b2:29:53:83:1b:0a:2d:
                    c7:15:b7:33:da:47:a9:7a:ff:5c:de:85:56:dc:df:
                    11:b5:c5:b3:8d:d7:4f:c4:60:b5:b5:99:da:0a:fa:
                    5a:00:41:08:04:f6:26:e7:fa:0d:a6:f7:98:e9:d8:
                    fb:ef:d4:09:5e:a7:9e:1d:fd:cf:63:80:9e:01:15:
                    76:9e:64:c5:77:c2:ec:dd:37:dd:ab:6e:5a:e1:93:
                    24:83:f5:b1:59:5a:05:d7:83:96:41:c2:7b:6e:27:
                    cc:15:bb:37:31:c0:de:a8:70:ae:f0:89:ee:c3:ad:
                    98:34:97:19:96:ef:0d:e7:d2:aa:9c:50:49:ab:7b:
                    22:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:12:33:E4:81:4E:2D:5A:1C:95:72:68:BD:91:6B:85:7F:F6:8D:0E
            X509v3 Authority Key Identifier:
                keyid:F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:13:6f:ab:d6:2d:12:99:d5:fc:27:23:cc:a3:02:a5:6e:79:
         46:00:5c:d8:53:7a:5c:bc:15:bd:fc:ce:58:3d:f1:ff:ff:8c:
         34:fc:a1:1c:33:e4:dc:48:a2:3f:ba:f6:72:d9:ee:7d:ac:bf:
         5c:64:33:66:d6:74:82:2c:91:cc:dc:b6:37:c1:ec:91:09:07:
         8d:95:8c:e3:dd:7e:cc:bf:1c:c3:d6:7b:44:ac:12:46:45:80:
         52:06:9a:94:c0:7e:51:38:a5:9d:ab:fe:36:e1:13:f0:a6:6c:
         41:bb:2c:5f:76:eb:8a:fc:89:15:85:85:b6:52:2f:8d:58:55:
         97:3f:5e:78:25:73:9b:cf:3d:f0:33:4f:d8:c6:ab:a0:6d:c9:
         f5:93:ff:14:94:89:5c:57:da:01:df:12:30:07:df:71:64:18:
         4e:f5:da:5d:4b:35:73:28:54:80:41:d0:ca:1f:78:b4:cf:94:
         56:cf:89:74:b7:70:30:d1:46:4a:52:d9:52:24:39:38:fc:74:
         8a:79:34:7f:d7:86:9a:58:11:4c:8f:3e:3a:f4:f8:6a:e3:24:
         aa:30:fd:9a:19:a5:8c:20:b7:29:ae:c4:f2:d1:21:77:8c:e5:
         86:6d:e0:67:3c:08:4a:e9:d8:88:99:b0:13:6c:50:9c:76:57:
         39:86:8f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:59 2025 by rpki-client