Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
File:                     Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft (raw, json)
Hash identifier:          xBmAXeSt0x/TOoI5am/CAn0S9xbo6dfivi21Ke/mu9g=
Subject key identifier:   62:35:65:D9:D1:CE:73:4F:B8:81:3B:54:C4:8E:DF:90:EC:93:E5:EE
Authority key identifier: 23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E
Certificate issuer:       /CN=233adc97f9826262007f46286591830df58fc55e
Certificate serial:       0198D6CDD4C5180E9D42A71FA9478A6EA350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
Manifest number:          0A75
Signing time:             Sat 23 Aug 2025 12:01:10 +0000
Manifest this update:     Sat 23 Aug 2025 12:01:10 +0000
Manifest next update:     Sun 24 Aug 2025 12:01:10 +0000
Files and hashes:         1: Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl (hash: IpkpZ7uZcVJTPCcz0I1VEjvVDN220uJFIMMYkm4a2Mw=)
                          2: R7UR19A8DA5u7WHUKAJI549nkdo.roa (hash: 4PQK0W7UKUZhH5u+a1D7FV7JRsd1931HwX1XToed8Vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:d4:c5:18:0e:9d:42:a7:1f:a9:47:8a:6e:a3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233adc97f9826262007f46286591830df58fc55e
        Validity
            Not Before: Aug 23 12:01:10 2025 GMT
            Not After : Aug 24 12:01:10 2025 GMT
        Subject: CN=623565d9d1ce734fb8813b54c48edf90ec93e5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7c:9f:e9:23:5c:8a:9e:13:55:5c:e1:64:51:
                    1c:e0:b0:97:f8:f3:57:79:0f:4c:e9:5a:fc:29:3e:
                    0a:0d:a5:c1:6c:30:65:5d:b6:cb:9c:7d:8b:88:0f:
                    7e:6b:47:3d:d5:ab:bc:18:92:bd:58:04:41:c2:68:
                    fd:4d:16:47:a3:db:14:db:9a:91:46:51:bb:a7:59:
                    6d:c7:8c:b2:9c:56:96:60:de:68:e6:fb:05:98:89:
                    bb:f7:d0:08:e8:e9:4d:e3:0b:de:cf:bf:e7:b4:e2:
                    b9:4a:79:e3:5f:e2:54:6d:09:ab:7e:79:10:53:6a:
                    34:1f:c1:b7:98:fa:ab:53:3f:b3:79:03:9d:0f:d9:
                    41:3d:95:33:5d:74:1e:65:bb:25:6a:b1:87:54:bf:
                    ae:70:dd:1f:b5:f1:ce:57:fd:42:01:72:36:73:ac:
                    da:19:e1:14:9a:f6:cc:c8:a6:38:7c:d3:75:48:d5:
                    76:ac:00:7f:cf:c4:9a:aa:2a:ae:5c:86:38:e8:cf:
                    22:a4:36:b2:12:b2:5b:c7:6d:69:dd:34:75:d2:5d:
                    c3:29:d7:8c:4d:27:cc:e9:a8:61:27:8f:b7:76:1d:
                    bf:4c:44:3a:42:33:76:ee:ab:4c:d2:b7:a8:16:e8:
                    c8:43:bd:b0:14:2f:ad:3b:18:cb:a9:b5:1b:17:58:
                    b1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:35:65:D9:D1:CE:73:4F:B8:81:3B:54:C4:8E:DF:90:EC:93:E5:EE
            X509v3 Authority Key Identifier:
                keyid:23:3A:DC:97:F9:82:62:62:00:7F:46:28:65:91:83:0D:F5:8F:C5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Izrcl_mCYmIAf0YoZZGDDfWPxV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/889667-c5e2-4341-b5eb-455a12bc8302/1/Izrcl_mCYmIAf0YoZZGDDfWPxV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:e5:89:67:e7:a2:f2:16:a4:29:73:23:0f:81:d7:44:e0:37:
         48:b2:1f:2e:14:5d:f5:9d:85:9f:70:6e:d2:59:3e:c4:36:dc:
         82:08:c9:7e:b8:6b:01:24:62:4b:00:2d:9b:da:ea:65:36:80:
         61:2f:f8:c5:32:90:7a:e1:3a:5d:35:ea:c8:7c:e0:ab:1f:bc:
         8f:d1:3b:d5:c0:e6:50:05:ff:1f:c9:47:e0:5b:c9:30:0b:44:
         ab:28:3c:61:ba:19:ee:d8:04:9d:a8:8a:2f:df:78:8c:80:32:
         85:47:8d:8d:2b:96:bf:75:50:45:01:e4:b2:8a:31:b1:84:4b:
         4e:71:11:f6:d4:9a:8d:16:be:c7:50:4d:49:8c:f5:0d:fd:93:
         a5:a1:8a:80:63:50:59:94:52:a7:9f:30:85:06:3d:87:04:bf:
         17:33:05:8f:aa:75:5a:84:3d:b0:ae:7a:32:bd:ec:89:3e:f6:
         2f:43:fe:9d:bb:32:00:ff:6a:f2:9f:3d:63:bc:75:65:bb:80:
         17:12:7f:a6:77:74:ac:71:52:bc:77:9f:61:b6:8d:b2:e4:99:
         ec:b4:38:b0:da:f2:f6:2b:2e:71:d3:e4:89:99:4f:75:5a:02:
         4a:96:e1:a5:d0:f6:15:ab:b2:e2:b7:3d:3b:5f:3b:92:51:b7:
         b7:8d:1d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:38:44 2025 by rpki-client