Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
File:                     02fRY1tGs8InSyh1Bbu9fZFdyvU.mft (raw, json)
Hash identifier:          wa5fVYvoJEVJz0E84TftRLlnEMFfIAwl0uCyjD6s8WY=
Subject key identifier:   68:A1:AA:56:DB:9A:4E:02:E8:B6:F7:DD:B8:07:66:D4:AB:04:1C:97
Authority key identifier: D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5
Certificate issuer:       /CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
Certificate serial:       0196AF8D9505C4389B82884AC26E61F2F89C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
Manifest number:          152F
Signing time:             Thu 08 May 2025 11:00:13 +0000
Manifest this update:     Thu 08 May 2025 11:00:13 +0000
Manifest next update:     Fri 09 May 2025 11:00:13 +0000
Files and hashes:         1: 02fRY1tGs8InSyh1Bbu9fZFdyvU.crl (hash: 9CfP2tcsMlniec+rITjpCcN5IeTknAG53rjan8CDd/Y=)
                          2: FxHUQG3qdwh_Io72-qooMYusypM.roa (hash: 6TiBJA+vFO4OcdT2PwhLRo55PhguPodqdNqueOVwTtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:af:8d:95:05:c4:38:9b:82:88:4a:c2:6e:61:f2:f8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d367d1635b46b3c2274b287505bbbd7d915dcaf5
        Validity
            Not Before: May  8 11:00:13 2025 GMT
            Not After : May  9 11:00:13 2025 GMT
        Subject: CN=68a1aa56db9a4e02e8b6f7ddb80766d4ab041c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f4:ce:25:ca:0a:dc:03:4d:de:7e:78:83:f5:
                    be:79:c0:6c:73:f0:a5:ad:eb:2b:47:bb:23:b8:1c:
                    a2:5b:db:71:5b:8e:c2:c9:f0:14:73:e6:b6:07:fe:
                    5f:bb:80:94:ec:0c:77:8e:f1:54:34:e5:80:1a:ec:
                    6a:a0:db:dc:91:81:2f:61:72:75:6f:88:e0:1f:68:
                    3c:0d:69:9e:66:11:f6:c8:ff:97:89:58:0c:8d:7d:
                    fd:2b:71:54:91:3b:93:c5:70:85:f1:a7:f9:4c:69:
                    97:50:5d:cf:3c:5d:33:e4:1c:1c:f2:d4:df:9f:2b:
                    88:97:2e:72:93:f0:8b:a1:a3:b4:c1:ac:a6:db:3a:
                    cd:ec:a2:2a:2e:4d:9a:72:ca:eb:c6:82:84:8d:6b:
                    97:e7:52:1b:30:7b:a6:41:b0:9e:a9:20:5f:5a:02:
                    42:3c:f3:b5:54:2c:61:7d:d0:f2:72:13:d1:fd:90:
                    11:86:71:fa:91:3b:a5:1f:12:38:5d:ae:1a:09:00:
                    0f:cb:c0:a2:79:dc:f3:fb:86:53:18:8e:f3:70:7a:
                    a8:cd:a8:a0:b9:96:d8:cc:cd:d1:6d:a9:01:55:32:
                    b6:d5:f8:f3:88:a6:7f:b8:c3:23:79:f5:51:44:aa:
                    66:ec:aa:8b:56:6c:c5:f7:3e:50:49:b8:b7:0d:a2:
                    4a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A1:AA:56:DB:9A:4E:02:E8:B6:F7:DD:B8:07:66:D4:AB:04:1C:97
            X509v3 Authority Key Identifier:
                keyid:D3:67:D1:63:5B:46:B3:C2:27:4B:28:75:05:BB:BD:7D:91:5D:CA:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02fRY1tGs8InSyh1Bbu9fZFdyvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8a8b4c-8f12-4c8d-8be4-69b8d6b53e8c/1/02fRY1tGs8InSyh1Bbu9fZFdyvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:32:9a:e0:5e:67:1e:45:fa:b4:32:b1:a5:7b:0d:b9:ad:a8:
         65:17:05:2d:1c:1f:e3:f2:b0:06:d1:5d:fe:91:53:24:70:5e:
         1b:4b:b6:dd:1a:82:ab:77:55:ae:f6:a9:d1:20:5c:bf:29:5b:
         6c:13:58:f5:e1:cc:d7:6d:a0:bc:89:b8:d5:61:37:d7:80:a4:
         d4:ab:93:6f:f9:8a:9a:74:9c:ea:90:38:24:7a:28:96:11:eb:
         6a:31:09:5d:e2:70:ad:6d:58:0f:51:b3:ec:30:db:fe:3c:00:
         f2:67:0b:c2:0b:43:00:e8:ca:23:48:2a:66:eb:ac:37:90:87:
         3c:26:5e:1e:7e:9a:60:ca:0a:48:dc:7a:c5:c1:64:7f:9e:e8:
         61:97:1c:f2:75:92:14:fa:9a:95:78:26:e4:1e:f9:aa:90:5d:
         8f:c6:07:24:15:4c:4a:77:37:62:b4:ea:e9:41:d2:ca:2d:27:
         d1:ce:04:4a:c0:cd:53:e6:14:09:b8:09:6e:e6:e3:05:08:a4:
         ab:ea:bd:b8:ce:6f:a0:cc:0c:de:d4:17:6c:db:9d:54:6a:16:
         23:9d:da:43:17:55:ce:17:0a:b1:b5:53:80:b7:05:ac:52:c7:
         85:28:08:ad:6a:7a:43:f7:e2:91:4b:c9:21:83:73:ef:af:9c:
         ea:3f:79:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:58:54 2025 by rpki-client