Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
File:                     IszPoSLTuug6vlRBwKGcm-E_VIs.mft (raw, json)
Hash identifier:          KIRqpEO273BdEzMRMYlcX3I1Ys3g6J+nGu1qyr+RG28=
Subject key identifier:   81:F6:C2:C2:6A:DD:5B:56:28:61:A3:AA:CD:67:8F:42:2A:05:83:E5
Authority key identifier: 22:CC:CF:A1:22:D3:BA:E8:3A:BE:54:41:C0:A1:9C:9B:E1:3F:54:8B
Certificate issuer:       /CN=22cccfa122d3bae83abe5441c0a19c9be13f548b
Certificate serial:       01974931178C72C6C4028AD629FC807FDE65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
Manifest number:          0C23
Signing time:             Sat 07 Jun 2025 07:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:43 +0000
Files and hashes:         1: IszPoSLTuug6vlRBwKGcm-E_VIs.crl (hash: J2J2XO89NtloTtfhbV/jvRHKeXMkjyTleVzIilP/b8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:17:8c:72:c6:c4:02:8a:d6:29:fc:80:7f:de:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22cccfa122d3bae83abe5441c0a19c9be13f548b
        Validity
            Not Before: Jun  7 07:00:43 2025 GMT
            Not After : Jun  8 07:00:43 2025 GMT
        Subject: CN=81f6c2c26add5b562861a3aacd678f422a0583e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:35:6a:7a:bb:ef:14:9e:3e:e8:d3:3d:c1:6c:
                    f8:cb:37:e4:a0:93:35:23:f4:d6:46:40:26:8a:4f:
                    4d:ca:0b:dd:9e:de:10:d9:71:4b:25:61:a2:87:a9:
                    e3:3d:65:59:b2:42:66:9a:71:6e:80:4c:63:c8:9e:
                    44:32:2b:f4:74:ee:9c:1b:f4:e8:5c:06:6f:09:51:
                    af:9c:e2:58:29:fb:cc:42:a5:d7:ab:d9:14:7e:b6:
                    08:c2:af:44:22:74:ed:cf:0b:d3:b4:9c:76:ce:30:
                    8c:90:3a:20:17:0f:2d:2f:77:5f:21:2c:2b:2a:d8:
                    03:87:b5:6e:1f:94:78:d4:78:d4:6d:3c:98:3e:b6:
                    9b:dc:d9:c1:62:b8:84:05:aa:71:b9:f6:6d:1d:72:
                    8d:db:b1:77:db:bf:d4:f2:11:d6:f3:3b:8b:b9:77:
                    33:db:ca:8c:28:56:ea:08:26:f4:f8:e7:a9:19:35:
                    3e:36:19:46:ee:77:c4:57:5b:62:3c:6c:8a:69:d7:
                    9c:31:90:d6:71:b8:ec:0a:10:7c:8e:e1:cc:e5:c5:
                    58:32:f9:10:05:b8:96:fa:0b:1d:b9:9b:32:9e:37:
                    ee:00:4f:41:36:9f:61:2f:2b:e8:70:aa:9c:76:3a:
                    df:f7:eb:a6:16:19:08:46:c8:a8:3b:98:94:9c:c6:
                    19:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F6:C2:C2:6A:DD:5B:56:28:61:A3:AA:CD:67:8F:42:2A:05:83:E5
            X509v3 Authority Key Identifier:
                keyid:22:CC:CF:A1:22:D3:BA:E8:3A:BE:54:41:C0:A1:9C:9B:E1:3F:54:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IszPoSLTuug6vlRBwKGcm-E_VIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/696173-ddd3-4de2-ab67-c15afe579448/1/IszPoSLTuug6vlRBwKGcm-E_VIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f0:c6:37:71:aa:de:96:45:44:19:e6:36:79:29:c3:67:6f:
         48:61:5e:fb:bf:07:87:0d:a2:1f:a9:1a:fb:3c:89:89:4e:46:
         38:fd:1c:ed:f3:b3:e8:e1:1a:38:2f:3c:7e:fc:6f:f5:97:7d:
         fc:ec:c8:2e:be:55:b1:0a:50:b5:f0:64:25:36:a9:04:68:cb:
         5e:d6:d2:f5:d9:eb:26:f0:33:30:80:53:20:af:7b:cf:4d:35:
         dd:e4:51:95:69:64:d8:54:34:58:b8:1e:bb:1e:b7:f5:18:b2:
         e1:94:74:40:08:9d:10:46:c0:18:95:52:ba:f9:77:3c:18:82:
         54:60:44:b7:3e:b9:1e:8c:41:91:85:bf:e0:60:7c:cf:92:4b:
         86:f0:8b:d3:ba:ab:a2:b7:52:56:35:21:eb:b9:0a:4c:b7:9d:
         cb:6e:2b:8b:86:51:dd:2e:64:9d:3b:9a:13:dc:d4:77:57:98:
         6c:81:4e:1c:f5:0f:1f:04:29:e2:68:4f:e3:e2:3f:e7:0f:b2:
         59:70:e0:0c:62:1e:10:82:27:41:04:bd:3e:3d:c6:a0:72:6f:
         73:ab:bf:bf:3f:7c:f7:96:d7:ef:95:23:c1:d1:1b:aa:95:83:
         3e:4b:e9:66:33:f8:47:12:65:43:c2:7c:eb:4d:c8:28:65:ff:
         fe:66:1e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:47:24 2025 by rpki-client