Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
File:                     02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft (raw, json)
Hash identifier:          EvVuxQz3cDTgR+96Csl1LrQuNltK38gWUTyZOhHHgFE=
Subject key identifier:   89:FE:6E:7D:B0:33:83:D2:AE:D0:AD:72:FF:4C:FB:3E:57:BF:EC:BD
Authority key identifier: D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54
Certificate issuer:       /CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
Certificate serial:       019769CF2E15F36EF3F519AECB8E67FA56E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
Manifest number:          0641
Signing time:             Fri 13 Jun 2025 15:01:14 +0000
Manifest this update:     Fri 13 Jun 2025 15:01:14 +0000
Manifest next update:     Sat 14 Jun 2025 15:01:14 +0000
Files and hashes:         1: 02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl (hash: eeXrJCDguznjW0bppPKA6fbCeKap9LUANMhulllomHQ=)
                          2: W26ZqjqHqJjDL39ur5MOByNqIds.roa (hash: 0jU+Z1p1KvFeE69GaV/1hkIxIM6ZLT+t/K51maZsks4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:cf:2e:15:f3:6e:f3:f5:19:ae:cb:8e:67:fa:56:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
        Validity
            Not Before: Jun 13 15:01:14 2025 GMT
            Not After : Jun 14 15:01:14 2025 GMT
        Subject: CN=89fe6e7db03383d2aed0ad72ff4cfb3e57bfecbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0b:f4:da:bf:fd:ff:99:dd:24:1b:d3:9f:4d:
                    98:51:81:2a:14:00:dc:fa:14:bf:b5:d9:f3:07:98:
                    52:f0:53:0b:18:26:2c:ed:79:3c:3e:96:e9:90:c9:
                    76:3a:6b:fc:f1:b9:8e:e2:77:33:a9:fe:91:fc:ba:
                    e9:0e:95:cc:46:6c:e5:bb:e2:12:9d:31:2e:42:f4:
                    3d:8c:62:21:28:62:69:31:cf:36:1e:0d:f0:85:2a:
                    ee:68:3d:5e:14:05:04:02:ac:aa:0c:1e:d6:f8:29:
                    0a:26:6a:a4:aa:42:0e:ae:d7:4b:d8:13:eb:be:e9:
                    0b:ca:f3:c1:21:84:67:78:5a:c8:0f:f2:7f:c8:06:
                    bc:01:28:42:4a:d0:aa:a6:af:e4:36:c1:8d:a6:fd:
                    b9:5e:f4:74:67:5c:03:2f:88:fe:fb:de:3c:48:73:
                    85:20:5e:7c:6c:d3:dd:b0:0b:33:04:86:b5:2a:4f:
                    21:aa:9a:5d:fb:e6:44:14:22:1e:ca:f7:f5:9b:df:
                    4a:74:13:90:5e:6c:a0:3c:33:de:1f:3f:c5:13:24:
                    59:64:e6:6e:3a:16:27:02:b0:26:62:88:91:44:49:
                    44:5d:38:be:fa:ba:0e:ca:d3:ba:f0:df:d5:bc:5a:
                    f7:d8:c0:3b:1e:2b:ea:9a:0b:b2:ba:63:a5:52:68:
                    55:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FE:6E:7D:B0:33:83:D2:AE:D0:AD:72:FF:4C:FB:3E:57:BF:EC:BD
            X509v3 Authority Key Identifier:
                keyid:D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:b5:36:06:b0:8a:88:4f:6e:4e:0a:af:2d:84:66:6f:a7:c8:
         f5:8e:7f:de:0c:9c:70:0e:e3:ba:be:f6:01:36:35:e2:81:c8:
         5f:26:51:13:a4:95:5c:a2:e3:7f:cb:c1:1e:5a:f5:b8:89:d1:
         40:fc:ff:59:34:5f:92:57:21:a7:80:63:ea:9a:95:bd:78:4b:
         93:f9:3b:f5:86:02:08:3a:aa:b5:3b:1c:16:b6:0c:70:c6:30:
         b5:38:b6:ce:89:35:9e:d6:dc:3c:04:b3:16:73:cd:d2:3a:56:
         d3:42:40:c9:c7:59:a9:8e:37:03:b9:c5:5c:44:80:26:ee:cb:
         94:c6:b2:cb:8a:2b:46:2a:af:42:0f:94:92:38:16:52:58:9a:
         fb:5e:b2:31:8a:08:41:47:00:38:55:c8:b5:5e:56:81:31:d1:
         5a:25:ca:8c:99:f6:6b:d1:e0:9a:6e:53:c5:31:90:0a:99:23:
         94:89:a6:90:f4:7f:a7:4e:31:64:9d:4c:d0:da:ad:77:27:5f:
         0a:c2:92:da:0e:62:bb:bd:b6:22:f6:cf:f5:77:49:58:28:69:
         16:b6:1d:78:64:b3:cd:b0:6c:75:6a:85:44:78:b0:28:3e:23:
         41:87:cf:88:df:e3:3c:da:31:97:91:10:f5:08:00:45:71:84:
         70:c0:1b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:27 2025 by rpki-client