Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
File:                     i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft (raw, json)
Hash identifier:          Dkl9MpwPV3Lvq8RSf5g6kOrcZaKo7aB2IuoNrRd4C1E=
Subject key identifier:   79:BD:ED:CA:D7:FD:CB:69:3B:65:E1:5E:BA:2C:03:09:60:E5:F9:4E
Authority key identifier: 8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
Certificate issuer:       /CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Certificate serial:       0198D5BBDEDB8B1C73A9B4BD1567C01EDDEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
Manifest number:          024B
Signing time:             Sat 23 Aug 2025 07:01:55 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:55 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:55 +0000
Files and hashes:         1: i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl (hash: oXd/J9bsXOuwpwwNaBqrwR1PZroW8b+LvGyEUnmiNws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:de:db:8b:1c:73:a9:b4:bd:15:67:c0:1e:dd:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b69149881976ee273c511043e580b7d1d1ba7c4
        Validity
            Not Before: Aug 23 07:01:55 2025 GMT
            Not After : Aug 24 07:01:55 2025 GMT
        Subject: CN=79bdedcad7fdcb693b65e15eba2c030960e5f94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5b:ff:2a:cc:a0:7d:bb:c8:21:b4:74:21:60:
                    af:3f:ad:70:3b:f1:a1:72:cb:b1:35:68:cb:1a:ab:
                    06:77:23:b1:9b:0f:f7:6a:e5:59:cd:1d:bf:a0:ab:
                    18:c6:87:2c:c1:9a:72:bc:90:87:03:89:2a:92:ca:
                    f1:f3:37:a3:15:15:47:a1:81:d2:a0:21:1e:78:cd:
                    6f:cd:f4:e0:50:b6:c1:04:66:8a:f4:91:c0:54:43:
                    c0:4b:dc:c2:95:58:84:59:67:4b:f2:de:da:e5:df:
                    79:c8:72:ad:12:82:b1:b6:8e:7b:98:6d:da:9e:13:
                    98:cb:6b:e1:c3:ca:a7:03:08:4c:3a:a1:d3:89:c8:
                    ae:d0:ad:8a:98:0b:c1:3e:38:58:58:e2:bc:b6:55:
                    65:62:cc:c4:eb:b1:80:76:4b:50:e6:29:c5:a7:87:
                    ab:c5:53:ed:7c:36:d8:0b:fd:36:67:c5:2b:c1:e3:
                    a0:4a:de:7c:3c:44:9b:2a:bf:a6:6c:9c:4c:84:b7:
                    88:05:cb:fd:cf:9b:34:31:51:ee:56:ef:8d:26:3e:
                    45:15:c6:d3:b9:21:db:08:08:ab:c8:a9:64:46:a6:
                    27:6b:40:c5:16:3d:67:d0:e3:2d:fc:02:4c:5f:18:
                    76:14:59:3c:01:f2:25:2b:85:fd:8a:32:b6:ae:ef:
                    36:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BD:ED:CA:D7:FD:CB:69:3B:65:E1:5E:BA:2C:03:09:60:E5:F9:4E
            X509v3 Authority Key Identifier:
                keyid:8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:ce:c6:bc:1a:b2:5e:92:f2:a0:b6:a8:c7:5a:1b:fd:1f:98:
         34:7b:79:20:82:0f:d8:57:c4:fb:39:7d:1c:62:6f:a6:68:bb:
         8e:ec:fc:e3:da:01:1e:f5:1e:d5:d8:82:b2:9b:d3:3d:2e:3a:
         4f:23:3d:d7:fb:97:4f:57:80:bc:45:4e:4d:8d:fa:8a:b3:96:
         91:02:81:94:b6:89:c8:c6:83:e8:2a:28:9a:fe:25:5e:16:33:
         ff:3b:de:17:e5:ef:66:fb:4d:75:a6:e4:6e:f8:c8:d6:17:1e:
         1b:15:7f:86:7d:91:c1:ea:97:9e:00:d2:32:d8:94:8c:a1:8e:
         f0:a6:83:a1:4c:1b:e1:66:15:84:5e:59:5d:4e:b7:95:03:58:
         ea:b3:06:19:af:f0:d2:57:7a:3f:19:29:07:f4:eb:c9:e3:97:
         1e:13:f2:1b:32:b7:ff:ba:31:05:4b:12:d5:6c:ec:16:19:0c:
         44:63:57:89:2f:7b:23:94:b3:fe:67:66:9f:ca:f3:16:79:41:
         53:1b:30:a7:3d:b3:ba:93:a8:ca:d1:b4:6b:dd:29:a2:06:18:
         53:2b:d0:70:e2:9a:5a:f7:34:68:f8:dd:84:05:31:32:da:62:
         33:39:d4:f0:40:71:59:8c:ed:98:3f:26:94:bd:31:4c:7a:8a:
         ce:f1:4c:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu97bixxzqbS9FWfAHt3vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiNjkxNDk4ODE5NzZlZTI3M2M1MTEwNDNlNTgwYjdkMWQx
YmE3YzQwHhcNMjUwODIzMDcwMTU1WhcNMjUwODI0MDcwMTU1WjAzMTEwLwYDVQQD
Eyg3OWJkZWRjYWQ3ZmRjYjY5M2I2NWUxNWViYTJjMDMwOTYwZTVmOTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lv/KsygfbvIIbR0IWCvP61wO/Gh
csuxNWjLGqsGdyOxmw/3auVZzR2/oKsYxocswZpyvJCHA4kqksrx8zejFRVHoYHS
oCEeeM1vzfTgULbBBGaK9JHAVEPAS9zClViEWWdL8t7a5d95yHKtEoKxto57mG3a
nhOYy2vhw8qnAwhMOqHTiciu0K2KmAvBPjhYWOK8tlVlYszE67GAdktQ5inFp4er
xVPtfDbYC/02Z8UrweOgSt58PESbKr+mbJxMhLeIBcv9z5s0MVHuVu+NJj5FFcbT
uSHbCAiryKlkRqYna0DFFj1n0OMt/AJMXxh2FFk8AfIlK4X9ijK2ru82pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHm97crX/ctpO2XhXrosAwlg5flOMB8GA1UdIwQY
MBaAFItpFJiBl27ic8URBD5YC30dG6fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYt
OTYyMDMyMmU0ZjE1LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yOTIzZGEtMmY5MS00ZmYxLWI3ZmYtOTYyMDMyMmU0ZjE1
LzEvaTJrVW1JR1hidUp6eFJFRVBsZ0xmUjBicDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiM7GvBqy
XpLyoLaox1ob/R+YNHt5IIIP2FfE+zl9HGJvpmi7juz849oBHvUe1diCspvTPS46
TyM91/uXT1eAvEVOTY36irOWkQKBlLaJyMaD6Coomv4lXhYz/zveF+XvZvtNdabk
bvjI1hceGxV/hn2RweqXngDSMtiUjKGO8KaDoUwb4WYVhF5ZXU63lQNY6rMGGa/w
0ld6PxkpB/TryeOXHhPyGzK3/7oxBUsS1WzsFhkMRGNXiS97I5Sz/mdmn8rzFnlB
Uxswpz2zupOoytG0a90pogYYUyvQcOKaWvc0aPjdhAUxMtpiMznU8EBxWYztmD8m
lL0xTHqKzvFM2A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:32:46 2025 by rpki-client