Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
File:                     itC83pWbIDJiNJG_MnmtRanKC-g.mft (raw, json)
Hash identifier:          5LrTK7lFmq2UPjrS+qbC3Pw6wIl7KdyjsurEvodmkeM=
Subject key identifier:   E3:35:23:09:21:09:F1:84:F8:69:D0:87:2E:C7:E7:39:00:D1:43:91
Authority key identifier: 8A:D0:BC:DE:95:9B:20:32:62:34:91:BF:32:79:AD:45:A9:CA:0B:E8
Certificate issuer:       /CN=8ad0bcde959b2032623491bf3279ad45a9ca0be8
Certificate serial:       0199FCFD75E138DFFE149E190F23D78698CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
Manifest number:          0183
Signing time:             Sun 19 Oct 2025 15:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:33 +0000
Files and hashes:         1: itC83pWbIDJiNJG_MnmtRanKC-g.crl (hash: WILJ/VJRmeSBgepW/vAuvRElQklnPNbcGTx2YK1AEPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:75:e1:38:df:fe:14:9e:19:0f:23:d7:86:98:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad0bcde959b2032623491bf3279ad45a9ca0be8
        Validity
            Not Before: Oct 19 15:01:33 2025 GMT
            Not After : Oct 20 15:01:33 2025 GMT
        Subject: CN=e33523092109f184f869d0872ec7e73900d14391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4e:f4:d0:f3:b9:56:38:a6:78:24:92:c2:e4:
                    d3:c8:b8:79:fe:74:1b:60:11:55:2b:c2:53:9e:a4:
                    3b:80:8b:9b:d3:b6:72:88:8a:bb:d8:26:84:2c:58:
                    21:e2:94:e7:f1:76:0e:79:d3:b2:4b:43:2a:80:36:
                    46:31:2f:4e:1e:73:f9:a0:d0:52:f7:3c:c4:76:2d:
                    b6:94:21:c1:6e:ed:c3:08:99:57:7e:71:c1:29:35:
                    27:84:6f:b5:44:b1:a1:b5:ab:83:af:f5:02:9e:5b:
                    23:dd:17:bb:54:7f:32:21:e4:91:01:80:cc:14:1a:
                    08:81:16:76:2c:89:67:f7:68:f8:2a:7f:7e:c1:b4:
                    e5:fe:20:c5:fb:65:90:21:fd:17:f8:62:8a:2e:ba:
                    10:3c:ad:c4:d2:85:c5:e6:25:00:1d:ff:a5:11:d3:
                    1d:a1:8b:6d:c5:23:e6:87:27:b5:8c:b0:98:f6:9a:
                    1b:92:72:0d:ff:bc:48:70:e6:37:a3:bf:fd:2d:c7:
                    c4:3b:da:cd:ce:d1:d1:91:cc:7d:38:42:b4:44:dc:
                    2e:4d:82:4f:be:13:a9:a1:8c:55:19:1e:f1:cb:b2:
                    dc:49:f8:95:8e:9e:d5:91:91:34:30:60:bd:ab:dc:
                    84:95:69:e5:c0:5c:00:e0:47:87:da:27:a7:20:1e:
                    69:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:35:23:09:21:09:F1:84:F8:69:D0:87:2E:C7:E7:39:00:D1:43:91
            X509v3 Authority Key Identifier:
                keyid:8A:D0:BC:DE:95:9B:20:32:62:34:91:BF:32:79:AD:45:A9:CA:0B:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d8:e8:9e:fa:b6:25:1e:ad:0d:fc:5c:3e:1e:57:0e:4a:94:
         30:64:3e:1e:37:5c:83:a3:db:78:05:25:0a:58:2d:dd:00:3b:
         d3:3f:6e:09:4d:da:65:ce:be:30:f1:d4:5d:89:2a:9e:19:31:
         e1:eb:f2:c7:a4:aa:e2:a3:7c:da:c9:12:80:81:f9:e0:c5:56:
         bf:03:af:bf:fb:b4:b7:c3:35:b8:cc:3a:47:8e:0d:99:3e:88:
         19:32:f8:64:34:16:c5:e9:41:39:f7:90:7e:ad:6a:ac:66:80:
         88:e3:17:dd:b8:fb:b8:f3:8c:56:5b:9f:0d:0e:c0:83:14:ee:
         ef:72:16:8d:3e:39:60:f2:a3:f7:a6:0f:8e:f6:29:28:50:94:
         95:06:48:27:0f:bd:cf:a3:a6:5b:48:73:25:5b:45:76:4d:3c:
         a6:ab:2e:fd:b5:34:9b:63:a6:4a:b4:e5:5d:b0:a5:e3:3b:95:
         c4:9a:e5:b5:12:86:26:85:33:77:a7:3d:d9:e0:09:a0:d1:0b:
         de:05:21:80:cc:8e:20:62:c2:c0:b2:cf:7f:d3:28:6a:1b:54:
         33:39:b6:9f:1a:35:0e:e8:dd:e2:e3:e6:b9:2b:62:6a:a7:7e:
         64:b0:da:c4:48:41:12:b3:69:24:b4:40:51:c9:f4:38:7e:fc:
         a1:2e:bb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:29:51 2025 by rpki-client