Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
File:                     02v9kovMtCrZxGilUqtzk_3YcJU.mft (raw, json)
Hash identifier:          AGK93FfeYd+0neYBgV6GzFxgdCbXluHofbVPYp32ICw=
Subject key identifier:   B2:15:E0:AC:50:6B:CE:13:CA:FF:B7:49:18:74:61:35:23:FD:69:8F
Authority key identifier: D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95
Certificate issuer:       /CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
Certificate serial:       0199616BE332CD9AA5049C02111E5CD928F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
Manifest number:          0A52
Signing time:             Fri 19 Sep 2025 10:01:24 +0000
Manifest this update:     Fri 19 Sep 2025 10:01:24 +0000
Manifest next update:     Sat 20 Sep 2025 10:01:24 +0000
Files and hashes:         1: 02v9kovMtCrZxGilUqtzk_3YcJU.crl (hash: v+PZXlZgsC5WJ/qIfRenfIGNM5fiL82PBEPAl4DCW9c=)
                          2: MHr8PGZP4WdCJVRk1ABwnxF7Fcg.roa (hash: 6TKkNt/HHcapeVfZJIi0l5UGXRs34MQGe7K+m4zvMs4=)
                          3: glUIEM3aMRzTUWeLJXm7pNU7Hcc.roa (hash: dnZcMSrdJKJGGZKaN5OJM5oZr/gbEmBmefYKs8aAaDo=)
                          4: sUMt2I0qsDCXGGhD6_L1M2esRvU.roa (hash: P9ByjtRUC161Qd26Fzc7AA5m4JXTB5Ed5GY59AzQlSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:61:6b:e3:32:cd:9a:a5:04:9c:02:11:1e:5c:d9:28:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36bfd928bccb42ad9c468a552ab7393fdd87095
        Validity
            Not Before: Sep 19 10:01:24 2025 GMT
            Not After : Sep 20 10:01:24 2025 GMT
        Subject: CN=b215e0ac506bce13caffb7491874613523fd698f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:20:72:9d:18:63:77:3d:27:69:34:16:a0:f0:
                    1d:d7:43:87:6e:1c:53:d3:a0:3f:ae:14:6b:22:c3:
                    e8:c1:97:dc:2f:33:a0:73:df:12:77:44:cb:02:fd:
                    9e:e0:99:05:2f:27:38:55:8a:2a:47:ff:54:34:50:
                    31:26:d5:41:f3:84:cb:df:e5:b5:e3:19:ff:25:82:
                    23:7d:03:a3:69:24:7d:be:0a:e9:0c:b2:a1:e8:79:
                    5f:0d:bc:71:c3:8e:d9:f2:59:8e:49:d2:aa:c4:b1:
                    a7:67:52:10:28:6f:a8:12:76:3e:65:93:f1:1b:37:
                    43:4b:52:73:b8:34:34:b2:01:76:3f:5e:53:88:55:
                    f7:8d:a8:9d:0c:63:65:7c:e4:36:9e:1c:d0:d2:e4:
                    ec:9f:d6:bb:b6:f6:0c:8a:2a:01:44:3c:0c:e1:a0:
                    c1:c3:ff:28:ee:99:cd:ee:65:ab:af:ae:b5:ab:89:
                    05:e5:80:09:44:ad:b5:6d:e0:a9:a1:87:9f:6e:57:
                    ed:95:92:7d:ae:a2:72:81:f2:5c:65:a1:8c:da:c6:
                    0b:5a:20:d9:66:6f:53:ae:63:02:7b:df:21:17:70:
                    77:9c:b1:c0:08:07:39:04:4e:15:dc:8e:91:b4:19:
                    9e:03:8a:3d:a3:4d:69:c8:ea:f4:e4:14:e4:42:5a:
                    0b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:15:E0:AC:50:6B:CE:13:CA:FF:B7:49:18:74:61:35:23:FD:69:8F
            X509v3 Authority Key Identifier:
                keyid:D3:6B:FD:92:8B:CC:B4:2A:D9:C4:68:A5:52:AB:73:93:FD:D8:70:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02v9kovMtCrZxGilUqtzk_3YcJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c7aa2a-090c-4f77-9d69-a74e4a887804/1/02v9kovMtCrZxGilUqtzk_3YcJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:01:50:fc:a3:78:92:af:40:89:9d:00:f7:28:7c:58:9e:82:
         a9:3b:88:8d:3e:7c:4c:65:84:ae:55:05:6d:1c:88:1d:b7:89:
         45:7b:f5:33:f6:2b:b3:fe:4d:03:69:77:88:9c:30:07:64:fe:
         f7:18:06:0c:18:8e:e6:a8:2c:6e:86:73:ae:d5:13:80:9e:44:
         4b:ed:e1:33:9c:2d:4a:b1:f0:63:2f:0e:a5:56:ec:23:99:aa:
         0f:87:59:c9:37:52:25:b5:e6:67:da:c1:72:48:49:e4:f6:4c:
         ce:24:5c:e5:3d:ea:84:99:a2:b7:3d:be:c3:5d:e9:c4:4d:70:
         23:07:10:87:ad:41:e1:1c:8e:1c:df:74:cb:09:9e:07:ad:78:
         dd:00:44:41:8c:51:21:25:49:27:f0:e8:dc:b1:b9:77:1b:e7:
         ae:b2:63:7e:5f:1d:e7:4f:74:b3:f0:42:68:cc:e8:3e:f7:b7:
         f9:58:df:f1:d4:47:53:da:24:90:b2:2b:d5:8c:6d:3a:59:51:
         13:24:b1:07:f5:ce:8a:f3:68:1f:25:bc:73:c9:9b:f1:47:3c:
         25:68:9b:b8:b6:bd:7d:70:b3:d3:98:da:3a:7e:b7:43:85:41:
         c3:af:13:fe:d0:3a:b9:da:6e:d2:b4:7f:8a:6a:f0:1a:1f:bf:
         2c:7b:4d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:56:59 2025 by rpki-client