Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
File:                     iloI9Bw3MCfggbXByoqAC_GFXZ8.mft (raw, json)
Hash identifier:          DACDpZMGnesfbfUom6PxGuZHppasZwWaavKdoEtbJyc=
Subject key identifier:   0C:C2:89:18:68:00:63:02:94:58:16:54:EF:8B:8E:71:C2:08:35:21
Authority key identifier: 8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F
Certificate issuer:       /CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
Certificate serial:       01983FF46A90A1627490D73C5FB47875EC64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
Manifest number:          09C4
Signing time:             Fri 25 Jul 2025 05:00:39 +0000
Manifest this update:     Fri 25 Jul 2025 05:00:39 +0000
Manifest next update:     Sat 26 Jul 2025 05:00:39 +0000
Files and hashes:         1: iloI9Bw3MCfggbXByoqAC_GFXZ8.crl (hash: vs7hfZ1EJpH1lLGjHe6HmK2vLkS6qNVrpoIuT1d6e+s=)
                          2: yECgV0Zjm63pdebLZV2oJguqmFo.roa (hash: TFpt7mIhig+6+4covOB47Kn/9EddQnuc9xQ22XL602I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3f:f4:6a:90:a1:62:74:90:d7:3c:5f:b4:78:75:ec:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a5a08f41c373027e081b5c1ca8a800bf1855d9f
        Validity
            Not Before: Jul 25 05:00:39 2025 GMT
            Not After : Jul 26 05:00:39 2025 GMT
        Subject: CN=0cc289186800630294581654ef8b8e71c2083521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d2:2d:c8:76:b7:af:35:b8:f1:ff:1b:6e:5e:
                    1a:8d:7b:f9:1a:0a:06:d2:35:d4:4f:01:84:ac:98:
                    41:f7:1d:bc:74:27:72:57:02:62:35:0b:53:3a:9c:
                    f5:e4:ee:52:6e:f4:42:a6:27:d0:09:3f:ca:05:a6:
                    9a:63:73:94:3f:7c:73:b2:d6:86:30:f6:f8:2e:0a:
                    0d:b1:48:ed:a9:82:e6:6e:e1:96:84:d7:cb:1f:53:
                    bb:f2:89:80:3a:4a:a2:88:f2:35:05:ae:f3:eb:59:
                    e4:da:f2:a3:5b:02:77:80:63:ac:84:2b:ab:f5:6d:
                    79:4b:15:06:ef:07:d4:77:eb:95:72:aa:b5:49:95:
                    bb:01:a0:ce:6b:64:2d:1b:0b:1e:dc:3b:83:1e:45:
                    a5:db:8c:f5:12:3b:69:17:2c:6a:64:a8:d5:ba:cb:
                    b2:27:5f:02:4e:7e:e3:5d:bd:70:b2:b8:3e:c1:bc:
                    8e:9d:9f:dc:64:fa:06:32:5b:9e:e4:9e:50:98:32:
                    2a:0e:9b:b6:0e:a6:9d:67:de:bd:69:d0:14:3d:d0:
                    10:6e:28:56:d0:3a:a0:87:0f:e7:d7:b8:ca:2d:f5:
                    63:81:18:f8:43:25:df:35:3c:a9:3f:c4:c9:7b:54:
                    49:ad:36:98:34:58:1e:da:a5:89:aa:2d:f7:ae:09:
                    8c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C2:89:18:68:00:63:02:94:58:16:54:EF:8B:8E:71:C2:08:35:21
            X509v3 Authority Key Identifier:
                keyid:8A:5A:08:F4:1C:37:30:27:E0:81:B5:C1:CA:8A:80:0B:F1:85:5D:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iloI9Bw3MCfggbXByoqAC_GFXZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ec2482-c651-4a2d-aaee-8a56b0f50731/1/iloI9Bw3MCfggbXByoqAC_GFXZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:42:f9:d6:71:aa:74:dd:6e:7f:3f:8f:94:a2:33:cc:62:91:
         c1:b3:69:b9:0a:bf:a1:a4:b5:e1:4a:1e:0c:23:c3:c8:7d:fc:
         b2:96:b6:8c:f3:95:1b:59:c4:56:9f:27:19:bf:e6:e8:84:87:
         42:a0:5f:61:cc:7f:de:0c:ce:d5:ee:20:ef:03:cd:b6:17:c4:
         f1:35:93:3d:64:3d:85:57:24:b3:5e:ee:1f:fc:fe:76:79:18:
         9e:b9:33:eb:57:19:f3:33:61:01:5c:da:41:23:1e:49:3a:0c:
         35:da:db:f3:a9:20:a8:6c:a4:c9:e3:a5:08:03:fe:b6:66:be:
         f1:9d:7f:1c:c5:75:bc:ab:5f:f2:b1:f3:eb:2e:26:f2:cb:dc:
         27:03:57:8b:cd:a0:95:02:bd:10:3e:9a:95:f7:ec:65:e4:f3:
         b3:aa:3a:e8:16:e3:17:90:69:8f:f2:3e:f4:43:41:db:8b:73:
         21:2a:a8:aa:2d:37:bf:df:07:aa:99:0a:38:ab:ec:e5:9e:37:
         ec:01:e7:b6:75:23:9f:c3:81:1f:ce:db:0c:66:6d:98:e7:f9:
         2a:46:a6:0b:80:26:ad:3f:5c:ae:6f:50:a9:e9:68:ea:69:d3:
         5c:2e:6f:2e:78:d1:76:58:86:da:7b:5f:04:98:f5:21:1a:9e:
         3f:69:fa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:43:32 2025 by rpki-client