Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
File:                     02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json)
Hash identifier:          r00Kj28lbV0Nsl7BobuPJyU/DsfnRYO0ZyMPJBGk85I=
Subject key identifier:   6F:60:87:84:FD:34:29:B9:0B:E9:A4:E4:1E:47:8B:84:7E:6D:96:1C
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Certificate issuer:       /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial:       0197481E7F47CD0FED321726F09B77D78231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
Manifest number:          157E
Signing time:             Sat 07 Jun 2025 02:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 02:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:47 +0000
Files and hashes:         1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: GLSJYHDzsB8XYl6MTupaRGSTQ5exOMsMyPhgQfduwdc=)
                          2: FxHUQG3qdwh_Io72-qooMYusypM.roa (hash: 6TiBJA+vFO4OcdT2PwhLRo55PhguPodqdNqueOVwTtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:1e:7f:47:cd:0f:ed:32:17:26:f0:9b:77:d7:82:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
        Validity
            Not Before: Jun  7 02:00:47 2025 GMT
            Not After : Jun  8 02:00:47 2025 GMT
        Subject: CN=6f608784fd3429b90be9a4e41e478b847e6d961c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:63:12:66:f9:cd:27:51:8a:b9:a3:e9:61:
                    d1:ea:2b:5e:1b:d9:9e:ff:b7:54:93:30:10:fc:ed:
                    c9:28:c7:9b:d4:9c:a1:05:1f:3f:a1:8d:5d:af:3c:
                    88:d1:7d:32:d7:b1:48:75:24:b4:ea:6f:6b:8a:e7:
                    1b:3e:21:e7:ed:2c:a6:ef:99:e2:d3:fe:00:ee:4f:
                    cf:af:f7:63:8c:42:2b:7c:95:c9:3c:2a:76:cc:4f:
                    b1:7c:1b:57:c5:7b:ee:bd:db:4b:fb:e3:a3:8b:c7:
                    31:dd:1a:a5:8c:b8:20:e6:a1:39:e3:8a:ea:19:2c:
                    3e:72:88:ab:c4:45:d8:67:94:39:13:de:59:10:12:
                    4a:e5:9b:52:5c:a2:83:b4:7e:3c:52:38:f7:78:d4:
                    f9:3e:5a:35:f6:ac:a1:24:95:91:3e:bb:a3:01:dd:
                    5a:aa:76:2a:46:23:c6:40:b6:50:10:1e:25:58:c7:
                    53:fd:cd:e9:35:0b:e2:ec:86:83:7f:7d:2e:19:f9:
                    10:8e:19:f5:22:21:aa:ca:eb:67:0f:24:03:2d:c5:
                    40:94:04:1e:a3:af:67:5d:14:41:cd:97:3c:b7:28:
                    f2:dd:6b:28:f7:d4:c2:31:c4:2d:63:e9:e9:d3:f4:
                    b0:33:4b:f8:1f:81:90:c9:fa:88:f0:c8:a8:ed:74:
                    be:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:60:87:84:FD:34:29:B9:0B:E9:A4:E4:1E:47:8B:84:7E:6D:96:1C
            X509v3 Authority Key Identifier:
                keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:00:8a:57:0d:b3:b6:9d:a5:f2:48:e8:f4:c1:51:fc:e5:22:
         d7:4d:31:9e:ac:d4:16:0c:b6:c0:c7:47:37:cd:05:ef:a5:21:
         8e:f5:40:30:20:6c:ef:0a:1d:38:56:07:c1:22:72:3e:c8:1b:
         83:ae:63:b5:21:d9:4f:91:c1:02:68:cf:43:4c:a1:9a:cf:25:
         b2:48:6d:8f:8d:4d:75:2c:79:f5:f4:0e:22:78:34:d7:ae:3c:
         9d:e6:51:fe:9d:03:89:6f:46:25:03:2e:99:4c:df:58:35:9d:
         39:aa:1d:cc:db:15:8c:ac:35:96:fb:f0:ce:f3:69:93:aa:d9:
         cb:ec:ea:15:62:57:d3:9d:f7:2e:52:1b:fc:dd:47:57:c3:28:
         33:98:3b:37:3f:c2:be:2c:4b:d1:27:16:93:20:67:0e:e1:f4:
         16:30:ad:44:d7:82:96:8b:a9:41:68:dd:76:91:18:5a:aa:95:
         7b:f6:ba:66:19:f7:82:dd:90:e3:15:22:7d:9c:a9:d1:e0:84:
         25:3f:ac:d9:2d:b3:4e:97:4a:1b:33:b3:d3:eb:79:5b:39:e5:
         7a:ec:50:96:78:8e:64:98:86:9a:9b:04:90:5f:9a:9e:ab:ec:
         eb:a0:d2:05:9f:21:eb:d7:36:fe:b9:1e:7e:6e:24:f7:8f:f0:
         6c:8d:4c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:14:02 2025 by rpki-client