Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
File:                     IszPoSLTuug6vlRBwKGcm-E_VIs.mft (raw, json)
Hash identifier:          itswEQY4+PvAqOumjlfOe0uZKaP9MUnDoIOuuDEYqZ0=
Subject key identifier:   05:BE:7E:45:16:B2:1C:CC:B8:57:E5:A8:D0:61:8C:40:45:FE:0E:15
Authority key identifier: 22:CC:CF:A1:22:D3:BA:E8:3A:BE:54:41:C0:A1:9C:9B:E1:3F:54:8B
Certificate issuer:       /CN=22cccfa122d3bae83abe5441c0a19c9be13f548b
Certificate serial:       0199225524BE22F364F0FC22BE71298FADCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
Manifest number:          0D18
Signing time:             Sun 07 Sep 2025 04:00:29 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:29 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:29 +0000
Files and hashes:         1: IszPoSLTuug6vlRBwKGcm-E_VIs.crl (hash: 9Io6hQVsP5XpnfjvhE5XEZEPCvw2BCSpwqqMS4Jg9NQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:24:be:22:f3:64:f0:fc:22:be:71:29:8f:ad:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22cccfa122d3bae83abe5441c0a19c9be13f548b
        Validity
            Not Before: Sep  7 04:00:29 2025 GMT
            Not After : Sep  8 04:00:29 2025 GMT
        Subject: CN=05be7e4516b21cccb857e5a8d0618c4045fe0e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:01:92:85:dc:9e:19:c1:74:8b:6d:dd:16:f9:
                    33:57:06:a1:ec:b6:0a:ee:58:70:4f:e3:4c:63:38:
                    65:bf:50:4e:5c:ae:34:ab:76:c2:5c:73:eb:af:24:
                    48:8b:3b:a4:73:a6:6c:a8:b5:7e:8e:30:74:2b:54:
                    ea:da:e4:7b:3a:41:53:bd:9f:13:fb:0b:1d:de:99:
                    29:5e:f7:53:96:15:b1:c1:35:2a:20:49:a5:16:0e:
                    2a:32:87:ff:33:0f:dd:6c:a3:8d:67:8c:15:e2:40:
                    f4:45:86:d2:8e:bf:11:c8:ae:f5:69:1b:83:c2:e8:
                    75:92:57:e4:57:9d:7c:e5:b3:c2:df:94:81:86:af:
                    55:1d:ff:c6:08:f3:89:e5:6c:02:6c:07:49:61:32:
                    17:9e:4b:8e:36:8d:fd:c2:22:83:13:34:06:d3:f5:
                    7c:84:17:59:89:7d:e8:a5:7d:79:0d:31:6b:c8:02:
                    05:00:b6:b3:d1:82:85:08:c1:57:eb:d4:a8:a8:71:
                    4c:cd:29:dd:b1:6e:06:df:f0:8c:ad:97:98:07:59:
                    f8:4a:0c:e1:ce:39:aa:d1:eb:39:76:3d:3f:8b:6e:
                    2b:ac:6c:9d:9b:83:08:1a:11:e4:e1:4e:aa:d8:41:
                    b6:03:eb:d3:da:9c:ad:51:7d:67:04:15:59:81:0e:
                    cc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BE:7E:45:16:B2:1C:CC:B8:57:E5:A8:D0:61:8C:40:45:FE:0E:15
            X509v3 Authority Key Identifier:
                keyid:22:CC:CF:A1:22:D3:BA:E8:3A:BE:54:41:C0:A1:9C:9B:E1:3F:54:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f7:74:cb:18:6e:a0:79:29:40:d8:4b:8e:d5:0e:10:04:4e:
         1b:35:8a:b3:38:b9:0c:46:03:a6:84:b5:be:3b:0f:2e:a5:8e:
         31:a9:0c:17:6a:05:b6:22:f1:f7:84:a2:ea:23:35:61:9b:7d:
         8a:39:51:7a:db:c5:7a:a0:e0:41:9c:94:0e:a3:40:2a:00:64:
         cb:88:4a:79:8d:7b:cf:e7:42:c9:de:9c:f5:30:96:3a:7f:da:
         c2:09:ec:12:50:38:1d:b2:71:a4:e6:30:de:cb:21:5b:f4:c0:
         af:14:5a:5d:49:56:2f:b8:91:cd:2c:b1:f5:85:a3:0d:7f:3a:
         9e:91:77:3a:ee:eb:af:11:e0:15:2b:fa:ef:83:fb:b5:af:b0:
         1f:b0:65:85:e7:5e:4a:5a:c8:3f:ad:fc:1f:ec:50:f5:ff:10:
         af:40:df:a9:0f:41:68:ed:88:6f:4b:a3:03:8c:db:23:e5:72:
         7e:93:f5:8b:a4:c2:fc:b0:a8:94:24:16:e7:be:fb:a9:36:7e:
         b4:68:bd:69:52:cc:ee:f8:1a:1e:1f:91:06:f0:df:63:95:28:
         33:b0:c4:bb:e3:a9:79:7e:ad:8c:a0:fa:08:8e:b4:74:f6:d5:
         a1:34:9b:fa:d2:df:c6:df:df:de:cf:d5:0d:aa:84:8a:0f:ec:
         a4:5a:5b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:23 2025 by rpki-client