Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File:                     L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier:          1AcYBh//T9g10G7SgQoa4eQC6GDyZQUcxjtzRAEXTAY=
Subject key identifier:   D9:E1:86:C2:44:AB:49:C7:C7:46:3F:67:99:F1:0D:F6:CE:2F:B4:88
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer:       /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial:       0198D583897E35E7CE1195F7FD96E93E9DF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number:          075E
Signing time:             Sat 23 Aug 2025 06:00:23 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:23 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:23 +0000
Files and hashes:         1: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: OpWHzV+bOoCCfzjExPbdkUwxKxBhf+UjLsRIjjlUCOo=)
                          2: jCfDa1o9-67BNQODivTRRldEbdY.roa (hash: 8Y6qhIf9Ka0kdUNg/SnNbfjipainSlycgW7SSV7AHSU=)
                          3: om141KzkG2-4eMZ-f0PthIkpE80.roa (hash: cw3Iskxz7drppI2oVPr2KEtsT6+wW7KALNNnzpIfPOQ=)
                          4: vA4JTCZBPjorS9CM--5uNxgqUOI.roa (hash: C8BQR0NQXngOUVQVK+k99B0pWs9mjN+aAreX6gH4h2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:89:7e:35:e7:ce:11:95:f7:fd:96:e9:3e:9d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
        Validity
            Not Before: Aug 23 06:00:23 2025 GMT
            Not After : Aug 24 06:00:23 2025 GMT
        Subject: CN=d9e186c244ab49c7c7463f6799f10df6ce2fb488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:af:f1:c9:e2:d4:e9:22:c7:9e:18:71:ff:
                    eb:88:63:8a:23:a9:6a:a8:11:32:0b:53:32:07:6e:
                    ce:cc:cb:53:fb:13:da:34:0a:da:c7:f8:9f:6f:01:
                    62:29:ca:0c:a7:b1:df:3d:52:3f:78:98:c3:72:47:
                    46:cf:d6:f1:89:8a:37:a5:5a:36:b6:2a:f9:e8:94:
                    92:9a:17:ed:89:f6:a6:64:6c:fe:94:6a:85:43:c9:
                    f0:3d:2c:74:2a:ec:89:04:c6:34:4e:99:5a:49:93:
                    87:19:79:79:53:f6:a7:b9:2c:9e:b1:cf:25:46:2b:
                    d0:72:a1:99:48:93:47:81:12:ba:0f:3b:31:12:04:
                    47:24:85:58:1c:37:b0:27:55:4f:ce:a9:1d:1f:1f:
                    6b:8c:f8:fb:3f:f2:dc:7a:0a:2f:ba:d2:08:59:89:
                    7d:e3:96:d9:0a:e8:5f:0f:50:e7:62:16:0a:ea:cc:
                    f6:e6:af:bb:19:0c:34:43:9a:cb:a6:ea:2b:d9:53:
                    1e:b4:b6:9a:2d:89:e1:b5:09:1b:7e:12:8f:0b:83:
                    31:55:49:c2:a6:5d:76:fa:db:86:fd:9b:cc:be:1e:
                    d7:9f:45:b7:00:02:1d:50:b6:97:97:49:2e:4a:e8:
                    84:13:62:15:7f:27:ef:3b:15:03:f5:9e:86:f7:56:
                    03:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E1:86:C2:44:AB:49:C7:C7:46:3F:67:99:F1:0D:F6:CE:2F:B4:88
            X509v3 Authority Key Identifier:
                keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ae:b0:1b:53:5a:8c:45:25:57:a4:01:25:7d:2e:8b:a9:b2:
         38:7a:96:2c:18:7b:15:4d:f8:6d:ec:16:ca:f1:e8:65:43:d0:
         93:dd:35:dc:b5:3b:20:77:ea:5c:4a:77:ab:ee:61:31:5d:65:
         36:c2:31:99:22:0a:e4:a3:2d:e6:6a:eb:ce:df:97:d8:4f:79:
         bd:cb:24:79:5a:09:ff:f6:8a:e9:07:80:3c:1a:ff:a9:9a:15:
         b2:20:73:1b:ac:2b:72:ea:70:84:a1:dc:1a:90:26:01:66:72:
         53:48:bd:3b:5f:22:4b:ed:f5:30:71:19:3a:c0:b0:d9:8d:6a:
         df:c6:4e:f0:93:0d:f0:c9:3d:00:a1:70:bd:4e:8a:8f:44:6f:
         54:7b:8b:f5:4d:a3:3a:88:45:76:e2:53:8d:d8:a7:97:4d:b5:
         ef:02:54:d4:e5:0d:08:14:2f:02:c8:a6:1c:30:22:c9:fb:f2:
         3e:ed:25:c9:69:86:67:bb:13:32:89:17:a4:28:86:c9:72:c7:
         f7:de:68:73:ee:96:39:3b:d7:1b:1b:e5:e0:50:98:8a:bb:83:
         20:a5:7f:3c:55:11:70:3c:a1:67:30:74:1e:a5:6a:b8:10:60:
         02:f2:b7:eb:5c:5b:9b:a3:e1:bb:e3:dc:38:3e:17:47:dc:09:
         7a:69:18:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:54 2025 by rpki-client