Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
File:                     8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft (raw, json)
Hash identifier:          4155qsok9wYLZCOFWWaxZIObqyRNNcsErDVXrPp8eN4=
Subject key identifier:   06:CB:19:27:50:D7:A9:63:3D:35:6C:CB:32:7C:D4:D5:94:A6:24:9B
Authority key identifier: F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C
Certificate issuer:       /CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
Certificate serial:       01984AE5A2AAC6BE9556D33F1BA5B6C02FD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
Manifest number:          1502
Signing time:             Sun 27 Jul 2025 08:00:19 +0000
Manifest this update:     Sun 27 Jul 2025 08:00:19 +0000
Manifest next update:     Mon 28 Jul 2025 08:00:19 +0000
Files and hashes:         1: 8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl (hash: r5dM4H7wTIka5lNRnZ3+6F8RXCdR17fEAoPtHkDJPXw=)
                          2: d2hoUpvor7BPW8nmpz4xnZjE2u4.roa (hash: hIY/GtYHLCsuos0GvnTm5ot49GmbZ9W7yYzcGZgrlOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:e5:a2:aa:c6:be:95:56:d3:3f:1b:a5:b6:c0:2f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2a959dc16715c8a54c8094267b8e491fe321d2c
        Validity
            Not Before: Jul 27 08:00:19 2025 GMT
            Not After : Jul 28 08:00:19 2025 GMT
        Subject: CN=06cb192750d7a9633d356ccb327cd4d594a6249b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fd:aa:94:47:f5:3c:e9:f8:06:1e:21:c1:2c:
                    fb:fe:78:7e:99:c0:25:e1:2e:51:0a:fb:67:98:4c:
                    6a:ee:e9:f7:ae:fb:3e:a8:22:6a:53:d1:ee:03:a8:
                    f7:eb:71:c6:4d:8a:30:de:ef:1c:97:95:a6:b5:16:
                    f4:09:5c:ee:7d:ff:10:7d:cb:9f:f2:f6:0a:ce:28:
                    1d:4e:46:a4:0d:63:8d:8b:2a:e3:7d:b6:9a:75:f4:
                    5e:5a:64:d1:5b:96:b9:43:02:b1:28:f2:a6:77:b7:
                    13:20:52:2c:fa:61:d4:9a:91:a4:e8:9b:12:e3:bc:
                    19:db:52:56:86:9f:14:e5:ae:8e:17:b2:5b:0c:88:
                    b6:ec:e9:2a:0e:db:c6:fc:65:3a:8e:53:83:df:d1:
                    31:f3:2f:c4:ca:51:b6:58:4a:a5:b0:09:16:0e:0b:
                    fd:2b:69:66:a9:96:99:e7:97:ba:10:73:28:9e:09:
                    a2:63:f9:f5:b4:cd:e8:e2:7a:98:25:b2:d3:bd:b0:
                    e6:c5:3b:76:ee:1e:fc:66:cf:b8:1a:02:3b:37:9e:
                    d6:7e:47:44:d8:30:78:8d:3e:1e:15:43:60:59:83:
                    35:87:84:45:35:89:a4:80:8f:62:51:09:72:15:c9:
                    cc:cf:95:f6:08:71:d0:f5:81:9e:c5:66:7f:d3:a7:
                    6a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CB:19:27:50:D7:A9:63:3D:35:6C:CB:32:7C:D4:D5:94:A6:24:9B
            X509v3 Authority Key Identifier:
                keyid:F2:A9:59:DC:16:71:5C:8A:54:C8:09:42:67:B8:E4:91:FE:32:1D:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/88a383-030c-4545-9e9c-4ebeec7e8275/1/8qlZ3BZxXIpUyAlCZ7jkkf4yHSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c3:a0:8b:0c:e2:a2:d8:94:8a:b8:fd:71:a6:66:bc:d4:06:
         9b:bd:df:4b:8c:dc:a2:96:46:c6:e1:f3:cb:56:91:39:6f:ef:
         a8:b5:8f:3f:97:09:c9:ce:f3:fc:60:aa:23:a3:e7:44:d0:11:
         6b:a7:8c:55:c6:8a:0b:12:b7:f5:ab:d4:c6:c4:21:d5:a9:73:
         c8:be:84:8c:ec:42:e2:5a:51:1a:fa:58:3e:7b:94:a6:0f:36:
         d2:4d:cf:76:65:8a:ed:35:23:4b:dd:1b:bb:b0:53:2d:5e:79:
         32:29:bb:ab:eb:21:9a:ad:a9:54:4a:db:e6:fa:73:3c:2f:d0:
         aa:6c:f0:66:90:25:97:6a:49:c0:b6:3c:dd:95:ac:2d:38:25:
         cd:fe:ec:a2:f6:f2:65:3c:ec:3c:bc:7a:61:e0:5e:62:1f:95:
         18:73:7a:a3:25:bb:22:e5:18:f2:fb:e9:75:69:71:1f:a2:88:
         cc:7a:40:cf:89:c1:85:cf:99:40:4e:89:3d:bb:0a:4d:6f:b2:
         bc:8f:f0:dc:72:b0:fa:60:f3:e8:14:fb:2f:59:9b:21:ed:b4:
         d6:49:c7:e4:50:88:40:fb:42:35:c9:b6:75:a0:6e:da:04:c2:
         e5:a8:21:a2:15:73:35:48:bf:b1:61:2d:3d:20:28:fa:5a:ab:
         b8:da:65:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:54:29 2025 by rpki-client