Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
File:                     88q2j7sMl5R2WUvfxWwZIEK43t8.mft (raw, json)
Hash identifier:          KXjpYclqg1/+W1vdcw3EnmvcCQpNCJpIi6zfCr0/AVI=
Subject key identifier:   24:1B:D4:2F:32:90:8F:9E:0A:FA:AA:56:A3:DA:B1:1A:76:81:0D:80
Authority key identifier: F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF
Certificate issuer:       /CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
Certificate serial:       0197C9F14BD36D42B182FBC8854EC7E58AE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
Manifest number:          1103
Signing time:             Wed 02 Jul 2025 07:02:03 +0000
Manifest this update:     Wed 02 Jul 2025 07:02:03 +0000
Manifest next update:     Thu 03 Jul 2025 07:02:03 +0000
Files and hashes:         1: 88q2j7sMl5R2WUvfxWwZIEK43t8.crl (hash: LbLz/7DNaaFKSqMokpN+7DnRSMghweMFViPBr2sLGLU=)
                          2: uhzHg_0oTjSNISZWz69g2JwlZBI.roa (hash: SYDZB0vXv8S1CegMsOsTpWapvWlbrYaUA5uYqL/hcv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 07:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:f1:4b:d3:6d:42:b1:82:fb:c8:85:4e:c7:e5:8a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3cab68fbb0c979476594bdfc56c192042b8dedf
        Validity
            Not Before: Jul  2 07:02:03 2025 GMT
            Not After : Jul  3 07:02:03 2025 GMT
        Subject: CN=241bd42f32908f9e0afaaa56a3dab11a76810d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a4:9c:35:4e:96:2c:08:f0:c6:7b:a1:68:e5:
                    8c:48:22:d8:ff:e6:2b:d5:ed:6f:48:9c:05:18:13:
                    35:35:9c:0d:13:25:9d:1f:6e:f0:db:c7:80:48:ae:
                    91:39:af:95:04:46:37:ea:8b:b2:ea:3d:3c:65:a6:
                    8e:a6:c1:4e:24:c2:43:a8:2e:eb:a2:a1:31:9a:ec:
                    59:5b:f6:2a:55:e1:02:fb:ad:4d:a4:9b:43:d8:14:
                    a1:2b:22:3e:32:87:b4:f3:44:a7:30:bd:66:ec:35:
                    59:70:d4:5a:ff:d5:e4:93:ad:61:21:ff:db:f7:3d:
                    73:9a:58:38:70:c8:7b:d6:ab:0d:c1:6b:44:10:2d:
                    74:8e:bd:95:8e:1f:5b:93:31:c9:cd:cc:a7:53:b0:
                    a8:39:fd:04:f3:3f:9e:2f:52:e9:b4:08:c9:0a:eb:
                    ee:60:cf:db:87:38:ca:e7:26:45:6b:d5:ad:02:58:
                    4f:d9:5c:5e:7a:9c:58:44:7d:a2:5d:92:49:2a:4a:
                    a2:a0:75:ed:1f:7b:14:1a:cd:c9:48:ec:65:2a:72:
                    5b:59:ba:08:50:14:04:1a:88:2f:5a:ad:95:11:8b:
                    23:62:36:15:35:90:f4:8a:f0:08:0a:96:6a:de:ca:
                    6a:5b:c3:bf:2c:6f:a2:5c:8e:e3:96:19:14:f8:2e:
                    57:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1B:D4:2F:32:90:8F:9E:0A:FA:AA:56:A3:DA:B1:1A:76:81:0D:80
            X509v3 Authority Key Identifier:
                keyid:F3:CA:B6:8F:BB:0C:97:94:76:59:4B:DF:C5:6C:19:20:42:B8:DE:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88q2j7sMl5R2WUvfxWwZIEK43t8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/a44335-414f-4479-a7fe-aa4a81a2eb23/1/88q2j7sMl5R2WUvfxWwZIEK43t8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0e:41:21:39:65:8d:4f:47:1e:c5:bb:12:e0:8f:1c:9a:2a:
         59:2e:f7:9d:5e:33:55:4f:17:cf:f3:9b:03:60:59:90:77:ed:
         be:d0:9e:18:09:ec:79:f3:1c:06:c4:9b:20:fe:7b:12:a5:87:
         e7:c0:22:5a:a0:e9:fe:00:dc:40:50:42:3d:08:07:43:96:4e:
         e8:3c:ec:6a:0a:93:eb:15:5e:78:4d:01:b1:5c:94:74:ca:be:
         e8:23:d3:25:d3:ea:fd:0c:85:22:c5:3a:74:23:de:c8:fa:23:
         06:ff:58:d0:7a:40:19:cb:66:0d:fe:3b:76:fe:e0:df:d5:41:
         12:d1:89:07:a2:6b:04:3c:22:af:a1:8f:4c:7b:c6:ee:fb:5c:
         bc:cb:7a:65:67:df:88:aa:f0:ed:fd:6f:c8:77:58:99:db:56:
         6d:c2:7a:10:35:95:21:80:af:ff:a2:23:d2:02:7a:a1:8f:14:
         b3:cf:d7:d4:87:d5:b3:f4:54:16:42:47:34:e1:f8:cc:94:b7:
         b3:95:e5:1a:1f:6c:26:16:e4:d5:7e:a5:84:f3:8f:30:d9:0c:
         c4:7c:7f:c4:1d:64:ab:74:60:63:0b:cd:61:20:e4:ee:e0:48:
         8f:f8:44:ee:34:9d:d1:4b:c4:0c:d5:82:7d:ab:ff:a6:52:c9:
         49:1a:e4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:05:45 2025 by rpki-client