Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
File:                     02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft (raw, json)
Hash identifier:          SuefwXH6n9YUA/k4o3Nu8JiR4qEWHU8hPem0rbPy+rg=
Subject key identifier:   2D:A8:E5:A5:76:B0:A9:C5:28:C2:28:78:0D:02:00:09:8E:A9:7A:47
Authority key identifier: D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54
Certificate issuer:       /CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
Certificate serial:       0198D4DFF0BA0CE50EFDD299F4D04935F46A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
Manifest number:          06FD
Signing time:             Sat 23 Aug 2025 03:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:42 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:42 +0000
Files and hashes:         1: 02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl (hash: BRHLpY1hBUCwod3E0wqAB/I8BNJZG9R1cuF+e6FUSkY=)
                          2: W26ZqjqHqJjDL39ur5MOByNqIds.roa (hash: 0jU+Z1p1KvFeE69GaV/1hkIxIM6ZLT+t/K51maZsks4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:f0:ba:0c:e5:0e:fd:d2:99:f4:d0:49:35:f4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36483e667c9fce8f80f5aaa5ac6e916bc54e654
        Validity
            Not Before: Aug 23 03:01:42 2025 GMT
            Not After : Aug 24 03:01:42 2025 GMT
        Subject: CN=2da8e5a576b0a9c528c228780d0200098ea97a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:60:a2:65:e0:10:82:cb:d0:93:ae:a9:cf:
                    aa:b9:b1:42:19:86:fd:b6:00:9c:fc:be:d6:bb:d8:
                    0b:80:b1:e7:5d:27:b6:6d:b9:8c:0e:a7:fc:ac:af:
                    27:d5:da:3d:ec:52:28:ae:08:52:90:06:9c:2c:9b:
                    01:16:31:62:95:78:88:9b:b9:bc:fa:ec:b8:e5:5d:
                    d1:2b:5e:e9:c3:b9:29:6d:55:ae:7d:b0:76:b8:da:
                    ed:2b:46:30:eb:0e:2c:f7:e5:31:af:98:83:01:46:
                    6d:c4:44:28:aa:fa:86:9d:3f:60:1a:1c:9a:f2:6d:
                    09:92:6a:36:ce:4e:81:99:13:7b:59:e6:f3:a5:12:
                    ca:cd:8e:bd:31:a0:26:b9:82:24:36:1a:8a:b1:5d:
                    53:e1:40:e0:5c:5c:a5:2f:25:05:45:d3:54:0c:52:
                    18:f9:3b:36:ca:d0:46:8f:6b:f2:01:11:40:54:a2:
                    47:bc:6c:df:f6:0f:2d:65:30:9e:8c:b5:ca:93:5b:
                    2e:42:a6:b9:e3:34:12:f8:f8:5d:1a:ef:dd:74:9b:
                    30:a6:90:45:77:b7:ad:0f:15:e7:9c:93:db:5a:50:
                    85:73:a9:1b:9b:41:4b:e2:e6:55:9b:fb:f9:e7:5d:
                    e0:76:0b:b9:a3:e5:91:13:af:c3:dc:3d:6b:07:40:
                    46:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A8:E5:A5:76:B0:A9:C5:28:C2:28:78:0D:02:00:09:8E:A9:7A:47
            X509v3 Authority Key Identifier:
                keyid:D3:64:83:E6:67:C9:FC:E8:F8:0F:5A:AA:5A:C6:E9:16:BC:54:E6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9e6996-2e89-4829-a37b-0734ffba8ca6/1/02SD5mfJ_Oj4D1qqWsbpFrxU5lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:be:dd:dd:90:2a:b2:19:c8:45:5a:bd:14:e3:6c:5c:a8:6f:
         da:05:12:f1:a5:51:60:0a:34:0a:e7:bc:e4:cd:c1:f8:73:95:
         94:e4:7a:23:25:22:ab:66:9f:4f:0c:dc:67:48:ce:af:f0:de:
         9d:f9:6c:df:22:2a:d8:f5:ee:fb:e8:d4:2f:29:99:ee:31:8c:
         2c:34:fd:de:3f:bc:dd:47:b8:b8:d0:d2:26:d7:65:e2:bb:ca:
         69:4d:f8:f1:7c:9e:fe:b6:5c:13:28:e1:3e:44:c2:2b:e1:8a:
         27:a7:e4:e0:61:d6:24:ee:a8:3b:a3:86:17:e3:3f:95:e8:04:
         52:e6:52:e4:5c:bc:8b:c0:3e:26:97:fe:26:2e:9d:b8:3c:fb:
         bc:8c:e3:ca:57:f1:ef:15:78:1f:40:27:97:2a:b2:ee:df:95:
         11:c7:8b:71:03:b6:9c:53:db:51:fd:35:3a:c6:9a:6a:d0:8d:
         34:4b:f3:99:1f:e4:43:82:74:f3:94:81:a7:78:09:7a:f7:38:
         b1:0e:06:e9:e2:8b:17:15:b2:8d:3e:03:cc:43:5b:cb:05:c0:
         4b:8d:9a:13:d4:43:ef:8d:6f:7e:dc:dc:b7:5b:c0:ae:ea:09:
         03:82:b8:7a:fa:dc:e4:73:d7:30:78:60:b8:4a:27:ea:cd:37:
         c6:12:4c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:58 2025 by rpki-client