Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
File:                     ilUt2GldSD1Hzkz4RbkGsXUnalw.mft (raw, json)
Hash identifier:          wXDd6+lwAnJD8VEpXXtZ8v07EG/HxOb7bxM+4+nc2zU=
Subject key identifier:   C8:C3:A6:A3:4E:6D:92:88:7F:99:74:FD:C7:7A:D5:06:22:33:30:AF
Authority key identifier: 8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C
Certificate issuer:       /CN=8a552dd8695d483d47ce4cf845b906b175276a5c
Certificate serial:       019922FAC785B3171EE6D093D5CB932EEC8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
Manifest number:          0B
Signing time:             Sun 07 Sep 2025 07:01:24 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:24 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:24 +0000
Files and hashes:         1: ilUt2GldSD1Hzkz4RbkGsXUnalw.crl (hash: cd4CJXyZdzBsMovTB+JYsCj968hsYMXra4QydD9E3RA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:c7:85:b3:17:1e:e6:d0:93:d5:cb:93:2e:ec:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a552dd8695d483d47ce4cf845b906b175276a5c
        Validity
            Not Before: Sep  7 07:01:24 2025 GMT
            Not After : Sep  8 07:01:24 2025 GMT
        Subject: CN=c8c3a6a34e6d92887f9974fdc77ad506223330af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:83:55:63:4f:31:ff:2b:a3:15:10:cb:67:
                    24:f2:77:7c:6c:d4:44:4f:0b:1b:56:1e:22:b4:47:
                    fc:bb:0e:23:1e:b1:be:a0:76:c1:06:c0:0a:10:d6:
                    8e:38:3c:ab:17:7d:f0:7b:6a:0a:da:0f:1a:c9:a1:
                    a6:c5:24:de:4c:e8:06:c8:f2:31:14:09:da:70:41:
                    e1:76:5b:de:dc:0e:01:fc:21:80:3c:ab:15:10:d1:
                    1b:38:23:2a:08:47:df:95:36:57:4c:83:c5:18:39:
                    98:1f:18:34:4d:3b:4c:e6:fc:60:d1:cd:72:27:5f:
                    62:f2:42:47:ca:7c:4f:bc:47:53:c5:16:5c:be:6f:
                    6c:7e:22:81:1b:26:9b:e9:4e:c9:bf:e9:60:1e:65:
                    f0:01:0a:66:e7:96:18:4f:1a:ad:99:89:27:74:63:
                    ac:5b:26:64:88:45:b5:41:9f:6c:7a:c5:00:99:80:
                    a0:e5:fb:ff:86:dd:b3:9a:68:90:4d:29:90:7e:15:
                    28:ba:0c:9c:19:35:24:67:9c:f2:a3:bf:7c:6f:0a:
                    20:69:3c:de:ea:9c:38:bf:5e:93:5d:a5:1f:88:49:
                    0b:46:d2:ca:89:64:c7:51:4b:e6:18:dd:26:b4:d9:
                    24:d2:b5:3e:36:6e:d8:77:e6:0d:84:6f:7f:a2:a4:
                    03:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C3:A6:A3:4E:6D:92:88:7F:99:74:FD:C7:7A:D5:06:22:33:30:AF
            X509v3 Authority Key Identifier:
                keyid:8A:55:2D:D8:69:5D:48:3D:47:CE:4C:F8:45:B9:06:B1:75:27:6A:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilUt2GldSD1Hzkz4RbkGsXUnalw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/420621-98b9-4961-a230-29b3f0272b9f/1/ilUt2GldSD1Hzkz4RbkGsXUnalw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:66:6a:76:67:b1:97:94:b5:b7:ba:4b:bb:9b:3f:41:cd:a3:
         8b:ad:49:5e:6c:02:6f:3e:8f:cc:77:84:6e:92:83:3d:ff:b5:
         ed:a2:9c:cc:bf:ae:e4:cb:59:31:d2:cb:b4:3f:eb:ab:28:dc:
         f0:9e:7c:27:be:29:64:f0:22:75:1f:c2:b3:02:7b:a3:a4:41:
         ad:b4:fa:77:55:ce:c9:27:24:85:58:ad:f4:59:cd:0b:8e:1c:
         6f:a4:e2:5f:8b:33:40:ae:ca:b9:ed:19:e9:aa:4e:bb:be:15:
         b2:fc:66:7b:69:03:32:f2:47:f4:9e:ac:2d:71:2f:03:cf:3c:
         0b:39:97:ab:83:64:06:43:6c:1d:b8:3d:c3:60:71:f6:83:53:
         ab:e2:ad:23:6e:f7:19:64:13:1c:94:05:7b:aa:9b:5b:f9:bb:
         e9:65:b6:83:de:df:21:a0:ec:9f:97:32:72:80:aa:e9:b4:3e:
         3d:16:35:fe:fc:a3:ce:14:20:af:8d:8f:f5:04:8d:53:5c:35:
         c9:2b:26:9b:b8:a7:51:21:f5:d9:49:6b:39:64:07:7d:08:d2:
         ba:b6:62:fd:b8:0c:40:a9:e8:fd:a3:17:36:1b:78:40:3c:14:
         46:15:7c:f5:2b:b6:64:a7:73:68:a1:9a:4e:87:2c:d8:43:07:
         3b:65:c0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:23 2025 by rpki-client