Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
File:                     02vm8HVADTBaFt3mkOJcvZRkXL4.mft (raw, json)
Hash identifier:          PLM6820RlHh2BgE0Env6jNZJ88VAPRx0UsBsmcDn4Nk=
Subject key identifier:   32:5F:33:7A:39:15:97:DD:44:89:31:F4:ED:68:93:91:E2:CE:A2:A8
Authority key identifier: D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
Certificate issuer:       /CN=d36be6f075400d305a16dde690e25cbd94645cbe
Certificate serial:       01984B545FDD067B460856EF7A1A4B8264E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
Manifest number:          1553
Signing time:             Sun 27 Jul 2025 10:01:17 +0000
Manifest this update:     Sun 27 Jul 2025 10:01:17 +0000
Manifest next update:     Mon 28 Jul 2025 10:01:17 +0000
Files and hashes:         1: 02vm8HVADTBaFt3mkOJcvZRkXL4.crl (hash: F7jDF1bpwkYJjMnRPwzswUUoY4yuEb2ZPgKiY37Iq28=)
                          2: bTRllN3rhV7rnjQJp0rvDHo40Gs.roa (hash: Bx0kFO6OMs0rFfJ2IZkuiIUT2mg/0ptdVSDBzsrl1H8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:54:5f:dd:06:7b:46:08:56:ef:7a:1a:4b:82:64:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36be6f075400d305a16dde690e25cbd94645cbe
        Validity
            Not Before: Jul 27 10:01:17 2025 GMT
            Not After : Jul 28 10:01:17 2025 GMT
        Subject: CN=325f337a391597dd448931f4ed689391e2cea2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7b:1d:f1:4e:e2:97:54:36:da:ea:5d:62:59:
                    91:c6:46:4e:a1:1d:e0:ad:4f:9a:a3:9a:c2:28:f4:
                    be:1b:fa:91:b6:63:e7:49:a3:67:0c:28:99:bd:6b:
                    00:e4:17:37:38:4b:fc:21:06:63:c0:97:9e:1e:01:
                    75:77:3a:bb:44:28:46:b1:46:2e:f0:e7:a9:31:a8:
                    06:52:3c:78:77:03:b2:dc:c3:07:81:ca:e0:77:5a:
                    3e:6f:3f:f0:37:01:06:3f:6e:dc:0e:f5:df:cd:3d:
                    8d:01:93:31:19:fc:8f:ab:67:c3:a8:28:10:88:dd:
                    b5:fc:7c:66:f2:51:2c:29:7d:81:07:f9:45:3f:17:
                    b7:f4:41:67:1c:7e:61:b6:82:77:ad:f4:10:3c:f8:
                    80:8e:12:74:8a:18:61:b5:c8:c2:44:80:ba:d9:85:
                    ca:00:b2:61:ec:10:52:db:15:26:06:db:77:b0:4d:
                    84:8b:0c:e9:0e:30:79:78:65:5e:5a:15:db:84:e4:
                    e7:36:7f:ed:a2:01:18:23:9f:34:a0:69:3f:e6:7b:
                    89:02:ac:3f:9e:e9:fb:1d:76:42:7f:fd:88:3f:a7:
                    84:d3:5d:01:4d:c9:1f:9e:c7:c1:ed:95:f3:57:95:
                    4e:16:92:c8:d4:da:4a:e5:2e:e4:2c:d0:bc:44:6c:
                    c6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5F:33:7A:39:15:97:DD:44:89:31:F4:ED:68:93:91:E2:CE:A2:A8
            X509v3 Authority Key Identifier:
                keyid:D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:9a:df:5c:b8:ff:41:ef:93:90:f0:f7:41:c9:15:a9:df:ab:
         97:9b:f7:c5:e0:c7:8d:7d:4a:6d:31:48:51:af:5d:c2:5a:6c:
         cc:a0:50:63:e8:6d:3f:09:5e:1e:22:85:22:39:92:da:fb:01:
         6f:33:50:fa:00:06:fd:58:b8:5d:13:6e:fb:8d:0e:92:79:32:
         83:e8:3c:d2:07:a9:88:1e:37:62:ff:2c:af:ff:bd:93:64:c4:
         7b:36:70:68:f4:4e:a5:fd:1e:32:50:b0:19:26:b7:b2:33:f8:
         e6:25:47:57:e4:4e:5b:9e:ee:1d:f0:0f:86:2c:56:28:b6:7b:
         3f:65:e0:e0:4f:d4:7b:a1:2f:63:48:a7:45:76:fc:8a:24:f3:
         62:57:82:2c:e5:79:79:1f:d7:7d:96:cb:bc:19:3a:48:1a:b0:
         b4:cb:ae:6a:52:b8:1e:a6:d4:a1:3e:09:e5:fe:49:a2:be:6f:
         22:2d:90:d8:4f:bb:0d:bd:c2:30:b8:44:7a:df:7e:85:44:37:
         74:43:a6:f2:77:49:19:7e:c5:35:48:c0:a9:0d:00:a6:a4:e0:
         8c:81:6c:a0:c6:e9:c5:99:4e:6b:58:b3:a9:cd:9b:5e:d7:8b:
         ce:f8:86:26:fb:10:f3:90:73:4f:4f:83:a6:e9:d4:a9:a9:b0:
         6a:63:8f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:32:11 2025 by rpki-client