Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
File:                     02mL6QLAb-q19ar3KeC7w3u8NBw.mft (raw, json)
Hash identifier:          EZfMawLhy1R14AEHlPGJJsbN1rYqwgS7ciaEfjyXmuU=
Subject key identifier:   D0:CE:F9:29:F9:26:4F:74:9A:15:5C:49:10:1E:5C:8E:BE:F6:6E:B9
Authority key identifier: D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C
Certificate issuer:       /CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
Certificate serial:       0198D583B59DD5416C33CA2E529D4B3D0D6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 06:00:35 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:35 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:35 +0000
Files and hashes:         1: 02mL6QLAb-q19ar3KeC7w3u8NBw.crl (hash: XFg9MyxZlb+qkXLUfE8nzQfUg87cMXV7OstrjnHoPJI=)
                          2: 8wRwksgEoG333HypQIIwjmT0nX4.roa (hash: HiR8D2zkzsAnyOZuw2MTERQhKjFGkf9qzkInu3daTko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:b5:9d:d5:41:6c:33:ca:2e:52:9d:4b:3d:0d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3698be902c06feab5f5aaf729e0bbc37bbc341c
        Validity
            Not Before: Aug 23 06:00:35 2025 GMT
            Not After : Aug 24 06:00:35 2025 GMT
        Subject: CN=d0cef929f9264f749a155c49101e5c8ebef66eb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:73:99:1d:f3:e4:d1:0e:49:52:ad:19:cd:d1:
                    11:11:c6:d4:4f:43:9f:70:8e:c5:7e:6e:5e:0f:4f:
                    5d:28:e1:e0:9a:65:fd:35:3a:81:49:37:33:e8:40:
                    31:c0:da:73:76:d3:1a:9f:dd:20:23:a3:01:bc:2f:
                    54:ce:66:37:62:72:53:67:16:3f:b7:f1:db:f9:f3:
                    78:f0:e6:99:db:08:49:51:20:ca:db:a6:60:62:5b:
                    58:d9:1b:44:4d:22:c4:b2:2b:64:9f:fd:97:7b:c0:
                    9d:aa:76:69:fd:29:7c:f1:68:2a:bd:c4:73:d1:53:
                    7e:63:e4:c4:c3:1a:96:df:3b:47:86:2c:05:82:68:
                    e5:ab:40:e7:a8:b8:63:dc:e4:7c:9e:86:5f:52:85:
                    7d:50:70:16:c5:6e:e8:77:62:4b:87:65:7d:26:27:
                    be:bd:75:10:93:6b:ad:07:a5:0e:fc:56:9b:be:4a:
                    19:49:a6:df:7d:ad:0e:f2:a7:bf:27:63:0f:6d:29:
                    ec:82:30:e3:5b:f9:d7:83:75:09:9f:fd:3c:ee:2a:
                    e9:c0:c3:8c:85:8f:22:4f:fc:c2:c5:c2:37:09:48:
                    3c:9b:28:60:97:5a:64:d1:57:00:8f:74:71:d3:90:
                    fa:c2:13:3c:87:f9:08:50:3f:ff:22:74:8b:63:76:
                    11:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CE:F9:29:F9:26:4F:74:9A:15:5C:49:10:1E:5C:8E:BE:F6:6E:B9
            X509v3 Authority Key Identifier:
                keyid:D3:69:8B:E9:02:C0:6F:EA:B5:F5:AA:F7:29:E0:BB:C3:7B:BC:34:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02mL6QLAb-q19ar3KeC7w3u8NBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/8fce7f-77de-4278-bafe-ddc32521d790/1/02mL6QLAb-q19ar3KeC7w3u8NBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e1:4a:9b:5a:43:39:9d:cf:30:28:64:88:2e:7d:2f:73:40:
         5b:2e:6a:7e:fb:99:6d:05:90:dd:14:3a:8f:bb:31:8e:ac:a3:
         5e:ce:99:70:72:3d:34:1b:bf:b6:5d:1f:f8:e3:f7:77:da:47:
         53:82:43:4a:7e:e7:44:da:79:eb:46:29:bf:f5:14:ef:af:f7:
         11:d9:2f:0a:cc:37:3d:fe:5d:21:45:9e:da:67:84:b7:9f:f3:
         8e:b2:05:38:31:39:ec:1b:71:f2:3e:1d:69:d8:98:5f:ff:f6:
         4d:7a:90:fc:f5:d9:ab:3e:7f:02:e7:9a:be:38:3d:a8:c3:90:
         d6:95:63:e1:18:71:81:2d:4f:eb:f0:00:a5:b6:23:85:f4:aa:
         c9:11:3c:9f:87:51:66:74:15:44:41:2a:39:20:b8:8e:52:4b:
         df:ca:3f:b5:37:81:81:1b:c3:5e:7c:09:43:28:1b:40:3e:e9:
         03:d0:69:b7:b5:5a:26:4e:16:43:f6:ac:c5:1a:b6:ea:9a:bc:
         81:b2:bb:a5:fa:a2:a3:8d:ed:cb:1e:ea:96:dc:6f:95:34:66:
         71:80:a4:f7:05:8a:0a:41:bb:1e:f6:39:49:e8:a9:19:b9:5b:
         a6:ff:4e:e4:d0:35:8f:18:45:80:75:ad:03:16:53:fb:15:4f:
         55:3c:96:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:50:53 2025 by rpki-client