Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
File:                     L89hnM7Pg29WpyAQ6C-33SQEAvk.mft (raw, json)
Hash identifier:          tDPW8jZN/JBop1jxdXcmx4cH0gXGUv51gFc9xzNusnY=
Subject key identifier:   DB:61:B8:A6:35:39:9B:55:FE:BC:38:7A:E4:73:7D:76:4D:D0:13:80
Authority key identifier: 2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9
Certificate issuer:       /CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
Certificate serial:       0197B7B301A375BC53CA00E1E4BBCDCEF997
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
Manifest number:          06CA
Signing time:             Sat 28 Jun 2025 18:00:51 +0000
Manifest this update:     Sat 28 Jun 2025 18:00:51 +0000
Manifest next update:     Sun 29 Jun 2025 18:00:51 +0000
Files and hashes:         1: L89hnM7Pg29WpyAQ6C-33SQEAvk.crl (hash: wTX7UBdL6LqTKyb6wsm9RDue9zBtyRCGGXnzjcLgojo=)
                          2: jCfDa1o9-67BNQODivTRRldEbdY.roa (hash: 8Y6qhIf9Ka0kdUNg/SnNbfjipainSlycgW7SSV7AHSU=)
                          3: om141KzkG2-4eMZ-f0PthIkpE80.roa (hash: cw3Iskxz7drppI2oVPr2KEtsT6+wW7KALNNnzpIfPOQ=)
                          4: vA4JTCZBPjorS9CM--5uNxgqUOI.roa (hash: C8BQR0NQXngOUVQVK+k99B0pWs9mjN+aAreX6gH4h2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:01:a3:75:bc:53:ca:00:e1:e4:bb:cd:ce:f9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fcf619ccecf836f56a72010e82fb7dd240402f9
        Validity
            Not Before: Jun 28 18:00:51 2025 GMT
            Not After : Jun 29 18:00:51 2025 GMT
        Subject: CN=db61b8a635399b55febc387ae4737d764dd01380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:37:ce:28:92:b7:5a:c8:4e:f4:5f:4b:60:3e:
                    cf:0d:bb:94:c9:63:36:30:12:e4:dc:e2:47:09:3b:
                    d2:14:c3:44:94:49:ee:90:b4:8c:29:14:c9:48:9b:
                    88:33:f1:d2:04:fb:e3:c8:c5:68:c0:71:04:70:2b:
                    35:2c:9e:01:be:33:63:bb:bf:45:94:10:dc:de:de:
                    2b:62:e9:57:42:00:6d:77:86:9b:79:68:e8:91:04:
                    44:8a:94:c6:35:5a:f2:d2:e3:e4:33:53:65:36:2d:
                    89:b4:c0:27:b9:71:aa:26:a2:58:ed:7f:27:17:f4:
                    8c:27:2c:8f:8c:11:8c:e9:8f:9e:6d:20:4e:4c:05:
                    f1:ab:3f:d4:0d:54:c5:7b:3a:c8:b5:3c:49:f9:3a:
                    72:18:9d:ca:24:bb:65:22:a6:e5:8f:b8:c5:85:1b:
                    0a:58:c4:c1:79:38:18:0f:03:87:ae:e2:46:70:0b:
                    4c:2d:7d:4c:a9:62:31:da:35:23:80:2c:7d:da:95:
                    70:40:d2:cb:56:22:e7:03:71:e4:16:49:b8:b3:0a:
                    22:86:45:95:95:7b:2c:48:5e:5c:e9:59:b0:cc:92:
                    f9:08:9d:71:ee:5e:e8:e4:fa:87:df:43:5f:fb:3e:
                    31:4a:9e:04:0f:cb:22:0a:9b:40:dd:df:63:45:fc:
                    f1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:61:B8:A6:35:39:9B:55:FE:BC:38:7A:E4:73:7D:76:4D:D0:13:80
            X509v3 Authority Key Identifier:
                keyid:2F:CF:61:9C:CE:CF:83:6F:56:A7:20:10:E8:2F:B7:DD:24:04:02:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L89hnM7Pg29WpyAQ6C-33SQEAvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c5dc73-9be2-4503-8281-4b350eacc86b/1/L89hnM7Pg29WpyAQ6C-33SQEAvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d2:4a:b5:98:45:5e:30:e0:8a:8a:84:19:9f:43:d3:b9:62:
         fb:92:e1:cb:87:c5:24:93:66:af:10:1e:fe:d0:1f:3e:c9:5f:
         9d:63:4d:e0:0d:e2:eb:93:99:69:da:21:ca:51:7e:cf:10:13:
         52:7f:cb:b0:f2:c6:a0:ab:4d:da:8d:d5:b0:81:3a:0b:d8:a2:
         41:a7:8a:fe:44:80:91:23:e9:e7:9a:ae:59:7f:80:53:69:e7:
         9a:4e:b6:dd:29:a2:2b:e2:a1:4f:a4:8d:9a:bc:8b:c0:8a:82:
         09:60:65:ab:f9:e3:1d:2f:3d:63:5b:2a:6f:6d:f7:ef:35:d5:
         f5:70:30:da:bc:26:15:6b:5b:36:46:09:c7:74:0b:91:c2:19:
         01:9c:f5:70:df:4e:bc:19:a3:20:3c:a2:64:94:0a:7d:36:62:
         c0:f0:71:a2:28:cf:c2:c2:26:5e:72:68:f6:b3:5d:4e:64:5e:
         5f:6d:71:9a:be:28:cc:53:88:60:bc:c3:aa:a7:24:a3:c1:2a:
         b9:81:fe:5d:32:7b:95:44:0e:95:02:9a:b3:65:6a:7b:cb:24:
         88:78:b0:5d:38:94:81:78:fd:fb:4f:47:cf:49:54:21:00:41:
         30:25:01:5b:51:17:be:c8:c8:ee:79:82:56:4c:63:ad:4d:15:
         49:11:12:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:24 2025 by rpki-client