Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
File:                     02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json)
Hash identifier:          rPpRFUmUoQwXOKVt51N1ApUSvxYs7tXNfIKhHpBinZ4=
Subject key identifier:   B7:A7:D0:C0:C0:E3:B9:AB:13:D1:A7:6E:7E:67:D7:97:83:1A:66:D4
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Certificate issuer:       /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial:       019873747D22378031793107A0FD4A4BB427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 05:01:10 +0000
Manifest this update:     Mon 04 Aug 2025 05:01:10 +0000
Manifest next update:     Tue 05 Aug 2025 05:01:10 +0000
Files and hashes:         1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: k2DQJihyOaK2pF2FXcfKJIlTj6f9H/xUn8mnvEbnPtA=)
                          2: FxHUQG3qdwh_Io72-qooMYusypM.roa (hash: 6TiBJA+vFO4OcdT2PwhLRo55PhguPodqdNqueOVwTtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:7d:22:37:80:31:79:31:07:a0:fd:4a:4b:b4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
        Validity
            Not Before: Aug  4 05:01:10 2025 GMT
            Not After : Aug  5 05:01:10 2025 GMT
        Subject: CN=b7a7d0c0c0e3b9ab13d1a76e7e67d797831a66d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a6:ba:e1:6c:df:bd:9f:2f:95:c3:13:ac:69:
                    fb:db:47:70:de:6c:b6:2e:21:4f:d2:aa:29:78:32:
                    13:8a:44:18:96:6b:6f:59:6f:2c:61:79:9d:12:31:
                    e3:35:64:3f:fd:b6:27:87:a9:f0:21:e6:d1:71:3e:
                    81:a9:ca:b8:a8:81:b1:f0:45:df:29:62:1a:1f:54:
                    da:97:6d:5d:72:06:ff:4e:b7:a0:70:8a:32:67:c6:
                    83:62:89:1b:08:25:08:ff:77:e4:26:41:9e:90:70:
                    88:40:b4:4f:6f:50:12:77:a3:53:22:6c:08:25:23:
                    1f:32:5d:1a:1c:17:e2:6a:33:28:26:97:97:3e:82:
                    d5:35:4c:11:81:aa:01:8a:21:62:1f:36:54:54:c7:
                    0b:a2:69:2b:0e:15:a7:a6:d7:34:ee:d3:b7:25:9f:
                    a7:ab:99:8e:7c:56:5b:59:54:b8:f4:a3:ac:e9:98:
                    28:b1:4a:14:a9:a2:77:17:c8:6f:d9:5b:38:77:e0:
                    c2:8c:83:65:40:5f:88:3e:a5:54:a2:6b:83:aa:6c:
                    f0:5f:8b:39:2e:0e:e8:43:7f:e3:7e:eb:d2:6e:46:
                    0c:ba:0f:5c:03:d2:5c:62:e1:cc:22:53:58:b5:33:
                    64:e1:65:50:7b:56:14:10:41:f3:21:2f:ae:1a:0d:
                    89:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A7:D0:C0:C0:E3:B9:AB:13:D1:A7:6E:7E:67:D7:97:83:1A:66:D4
            X509v3 Authority Key Identifier:
                keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c1:d0:98:77:8c:be:e4:d0:74:d8:a4:49:b3:9d:7a:b4:bc:
         e2:20:83:ef:b2:ec:2d:75:c0:4a:14:bd:99:68:56:37:a0:b6:
         ab:44:c2:4d:6a:60:43:79:3f:89:27:9d:3d:66:97:63:6a:ba:
         84:59:1f:8f:f2:65:9d:03:42:07:d5:9e:0c:3e:46:e8:21:2b:
         00:85:00:cf:f3:56:fa:b2:be:d0:0e:f0:f7:64:2f:50:77:71:
         24:2f:5b:83:f8:14:cc:12:97:91:25:65:6a:38:5e:a5:5e:0e:
         aa:c9:6c:64:9d:2b:74:19:fc:da:6b:f2:ab:9d:30:79:71:67:
         b7:e3:1f:3f:62:73:a9:4b:a6:e1:83:8c:a8:da:cb:8a:b1:b1:
         be:c7:6c:db:14:a5:f3:78:1c:fd:a3:3a:d7:28:3f:fd:cc:d7:
         82:5d:d4:68:93:5f:1f:2d:d0:cf:3e:e1:b1:68:62:fc:58:80:
         4e:bd:2a:3c:c3:de:0a:93:e7:47:14:c4:8d:d2:8c:35:5d:42:
         00:4d:e9:61:89:a2:43:94:0e:dc:cb:8e:46:27:88:3c:a9:ed:
         bb:9e:a0:c9:12:8e:b4:62:34:db:eb:72:f2:c9:c5:85:44:05:
         b2:e2:ab:76:36:d1:21:3c:78:9f:6c:ee:d3:3d:90:56:f3:2a:
         76:4e:ed:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:08 2025 by rpki-client