Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
File:                     02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json)
Hash identifier:          rH0hSoyIufHCmRWleIGc4ACs8H+OkY8F1PUhtF8WBFw=
Subject key identifier:   B3:61:BA:BB:16:8D:32:6A:ED:46:23:18:2E:D6:66:2D:AD:E0:2C:51
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Certificate issuer:       /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial:       01983795F12A1A39AB5FD7167FFF3B58855C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
Manifest number:          15FA
Signing time:             Wed 23 Jul 2025 14:00:30 +0000
Manifest this update:     Wed 23 Jul 2025 14:00:30 +0000
Manifest next update:     Thu 24 Jul 2025 14:00:30 +0000
Files and hashes:         1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: bFYIWD/14YcJjMJwB8qttH4bTjZWFuVxP7IgOwD++pQ=)
                          2: FxHUQG3qdwh_Io72-qooMYusypM.roa (hash: 6TiBJA+vFO4OcdT2PwhLRo55PhguPodqdNqueOVwTtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:37:95:f1:2a:1a:39:ab:5f:d7:16:7f:ff:3b:58:85:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
        Validity
            Not Before: Jul 23 14:00:30 2025 GMT
            Not After : Jul 24 14:00:30 2025 GMT
        Subject: CN=b361babb168d326aed4623182ed6662dade02c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:a3:2a:b4:97:ff:90:ad:45:6c:35:11:87:
                    24:3e:65:e9:36:5f:e0:06:c4:46:20:a6:65:80:84:
                    4e:ae:63:17:7e:27:34:3a:b6:b1:6d:a2:58:d9:1b:
                    ca:b3:1a:d3:e3:a2:e2:79:8f:27:2e:75:aa:b0:fa:
                    36:41:bc:44:d6:4e:70:98:7d:b3:c0:a0:8d:e5:bf:
                    b3:3b:9a:40:dc:9e:61:a5:1f:a2:98:91:82:d0:9c:
                    e8:0c:8c:f9:d1:05:c2:fb:89:37:25:6f:a0:26:7b:
                    85:23:ae:74:91:5d:65:e3:74:47:49:e9:27:1b:33:
                    a6:c9:63:1f:ed:90:1f:90:59:bd:bb:b7:a2:4d:ab:
                    3b:ef:42:2d:77:16:3e:0e:c9:f0:c1:28:ba:92:b0:
                    f7:70:f7:3d:a7:64:98:78:a9:4d:39:e5:c4:8d:1c:
                    a9:26:8b:56:0c:3a:0a:8d:a0:c2:7e:8a:6e:5c:bc:
                    d8:f1:79:ca:76:1a:a7:2d:18:39:54:5d:e4:99:02:
                    c6:42:1a:05:e0:bc:04:3a:44:d9:51:63:24:10:e1:
                    c3:ad:76:cb:05:ca:de:bf:1f:68:55:27:0c:f6:cb:
                    b9:3f:92:7a:02:b1:9c:58:3c:ab:34:12:6f:a4:f4:
                    29:80:14:ac:d5:5c:5d:29:dd:c0:30:ea:6e:8c:9b:
                    c4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:61:BA:BB:16:8D:32:6A:ED:46:23:18:2E:D6:66:2D:AD:E0:2C:51
            X509v3 Authority Key Identifier:
                keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:98:3d:e8:1f:cf:f6:39:86:5e:6a:d7:cd:e4:65:1a:0d:30:
         ca:d7:bd:19:a4:67:30:c0:06:ed:1e:fd:2e:2d:95:fa:0e:ca:
         38:7a:50:82:98:f3:28:f2:db:fb:af:6a:de:8f:52:c7:6a:0f:
         f5:9e:a5:a4:fe:10:d8:68:86:c2:51:f8:6c:34:65:34:fc:51:
         c8:48:84:3e:9c:47:76:0f:80:44:41:c6:13:c4:19:e6:01:7b:
         89:d3:9d:0a:4d:5d:71:c0:ba:a2:96:23:20:02:ad:49:a6:b6:
         32:a6:c8:c0:62:b2:66:05:e5:fc:ef:57:6a:39:ad:bc:e1:e1:
         2b:57:64:49:2a:53:c8:73:e8:54:e4:5b:f7:7e:61:8e:86:b9:
         cb:10:d4:6c:b8:b7:a1:fb:0a:b3:b3:b1:61:d2:ad:7c:af:fc:
         81:59:b2:ab:57:3d:2a:00:69:2d:68:02:47:db:8a:74:58:c0:
         24:5e:bb:b0:48:04:a5:6a:02:e1:0b:5c:83:32:95:44:7d:06:
         c2:38:14:73:84:c9:c1:d0:2c:86:fc:68:08:fe:60:20:c6:2d:
         7d:96:44:f3:9b:d0:b1:ae:5d:da:a8:e5:72:56:de:b1:67:23:
         d5:3c:53:2d:23:f6:71:1b:0b:20:90:46:2a:0b:99:e3:b5:aa:
         d2:ef:8d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:47:08 2025 by rpki-client