Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
File:                     iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft (raw, json)
Hash identifier:          Mru4Mm2jtRyrTOS86hDAw0N4nBRQ6Ws7kJy8qv1kf9A=
Subject key identifier:   80:BE:17:B7:B0:0D:34:C4:DA:4B:31:50:F5:B4:EE:15:07:FB:05:60
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Certificate issuer:       /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial:       01992255263E3C72CF8D99329AAD42C69797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
Manifest number:          166E
Signing time:             Sun 07 Sep 2025 04:00:29 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:29 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:29 +0000
Files and hashes:         1: iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl (hash: IqOdvA1sDUSwPr/uYIpSAbPvuhOPIIDGvxlMK9F1xU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:26:3e:3c:72:cf:8d:99:32:9a:ad:42:c6:97:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
        Validity
            Not Before: Sep  7 04:00:29 2025 GMT
            Not After : Sep  8 04:00:29 2025 GMT
        Subject: CN=80be17b7b00d34c4da4b3150f5b4ee1507fb0560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:37:2d:d1:0f:b3:cc:af:02:6e:cc:3d:e4:5f:
                    c2:89:ae:a9:6d:02:9f:35:16:98:0d:a3:15:1f:d2:
                    59:66:a5:5b:50:a3:35:83:0f:b9:a1:49:25:3b:3f:
                    3a:59:fa:ee:8d:31:2e:72:08:57:8f:55:ad:d4:d0:
                    63:3c:41:87:07:07:47:b5:82:57:94:d5:75:62:c6:
                    ec:6f:0d:db:8d:4b:fd:63:be:ed:eb:bd:17:89:c5:
                    63:b4:93:14:02:b1:67:ab:34:97:41:3c:ac:80:a5:
                    f5:4c:33:6e:3b:67:5f:a6:4b:fc:91:fb:14:9c:a2:
                    56:1e:ac:d6:d5:68:9a:8c:b5:db:8a:e6:0e:a8:76:
                    9b:55:dc:c2:12:14:49:e9:df:8c:cb:c7:d2:64:dc:
                    82:39:d8:b2:f7:0d:10:04:f7:6a:e2:96:e3:d4:29:
                    fa:e3:f0:0c:b9:34:c2:f1:9b:08:bd:ba:38:fd:72:
                    a9:66:df:09:fd:1c:a9:83:35:95:cd:52:ef:a1:96:
                    b0:b9:fe:03:90:ee:02:0e:a5:3a:3d:ca:86:bb:d7:
                    0f:e9:4e:ee:7f:b3:a3:d6:1b:ef:1c:9c:48:0f:ed:
                    f7:f3:e0:d9:d8:38:b0:12:a1:d1:8d:69:30:6d:63:
                    68:c9:89:44:44:20:94:ab:eb:53:ab:42:81:03:7d:
                    d9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BE:17:B7:B0:0D:34:C4:DA:4B:31:50:F5:B4:EE:15:07:FB:05:60
            X509v3 Authority Key Identifier:
                keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:c6:2e:62:11:fc:3b:fb:5f:19:7b:36:62:96:db:9a:5c:7c:
         c0:75:74:60:e1:70:42:36:9b:c7:28:97:c3:4d:90:13:cc:5e:
         af:9a:c2:d5:14:bf:2f:5e:8e:29:49:33:15:a7:2d:ab:9c:4d:
         e1:db:38:68:15:b3:90:44:b0:2a:ef:c5:49:fc:47:db:aa:46:
         82:5b:3b:86:29:5d:9e:09:cd:d9:aa:f3:fc:75:af:67:53:ce:
         e5:e5:1b:e8:4c:64:5c:98:3e:eb:22:59:a7:23:e3:9d:45:1a:
         4f:7c:19:47:43:f3:8e:f9:4f:24:4b:7c:de:78:fb:be:88:2b:
         7b:9f:05:4a:17:20:b2:c1:21:57:99:26:95:b7:77:a6:7d:7e:
         6d:ce:a2:14:a6:0b:0d:b3:dd:ff:db:8a:35:12:8e:20:ac:be:
         60:6f:b0:34:22:a6:5c:06:10:ee:7c:81:3d:f9:41:3b:97:5c:
         03:19:6a:44:ed:0f:5b:ae:90:2f:00:bd:6d:a3:12:5c:a7:26:
         9b:01:2d:f2:87:d2:e8:04:8e:1c:b8:83:be:d6:ce:b3:d1:43:
         31:99:e1:16:2d:38:ae:83:38:c8:b3:ab:91:74:0f:8f:68:5a:
         b5:9d:5a:0e:43:05:c9:d6:f3:0f:65:11:dd:78:25:ba:5a:bf:
         25:89:d4:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:32:47 2025 by rpki-client