Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b11584-19e9-453f-84c7-56c2a44d1878/1/r89alhpnpvrt_v2PKluD8mg3WYQ.mft
File:                     r89alhpnpvrt_v2PKluD8mg3WYQ.mft (raw, json)
Hash identifier:          ieLUYe6S0+pT041MyuA2g6dvGBIdBJSP1w4FbMSK5Vg=
Subject key identifier:   9F:E7:BC:BA:F1:C2:D3:21:F1:D8:4D:7F:D4:CA:64:0C:0F:39:67:CC
Authority key identifier: AF:CF:5A:96:1A:67:A6:FA:ED:FE:FD:8F:2A:5B:83:F2:68:37:59:84
Certificate issuer:       /CN=afcf5a961a67a6faedfefd8f2a5b83f268375984
Certificate serial:       0198D54EBF8195431917EDEED553625099ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r89alhpnpvrt_v2PKluD8mg3WYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b11584-19e9-453f-84c7-56c2a44d1878/1/r89alhpnpvrt_v2PKluD8mg3WYQ.mft
Manifest number:          02BB
Signing time:             Sat 23 Aug 2025 05:02:44 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:44 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:44 +0000
Files and hashes:         1: r89alhpnpvrt_v2PKluD8mg3WYQ.crl (hash: OxmH+b6tAtFwK81x9HI2AryTPtpY88jjadTwVcJcY68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b11584-19e9-453f-84c7-56c2a44d1878/1/r89alhpnpvrt_v2PKluD8mg3WYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b11584-19e9-453f-84c7-56c2a44d1878/1/r89alhpnpvrt_v2PKluD8mg3WYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r89alhpnpvrt_v2PKluD8mg3WYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:bf:81:95:43:19:17:ed:ee:d5:53:62:50:99:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afcf5a961a67a6faedfefd8f2a5b83f268375984
        Validity
            Not Before: Aug 23 05:02:44 2025 GMT
            Not After : Aug 24 05:02:44 2025 GMT
        Subject: CN=9fe7bcbaf1c2d321f1d84d7fd4ca640c0f3967cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:55:85:4d:6e:4a:2c:8d:a0:fb:71:50:d3:81:
                    ba:ad:e8:ae:22:a1:de:6e:cc:a0:67:0a:56:f8:99:
                    8f:de:b0:90:a5:11:0a:c0:8a:83:8b:3c:b3:d1:29:
                    12:48:b2:fe:5a:8c:06:1e:db:68:5e:3b:dd:6a:2a:
                    cd:50:9e:69:cb:a8:c3:2c:a0:d3:f8:3f:99:33:38:
                    f9:e2:c7:cd:86:35:0c:86:1a:ce:c7:44:6c:b1:a3:
                    40:43:06:98:c2:45:26:b4:66:20:18:3d:44:e0:43:
                    af:b4:30:be:61:cc:a7:5e:13:87:8d:e5:79:73:c9:
                    0f:e2:3f:6c:d7:4e:ea:ea:04:b8:8e:20:4f:7d:1c:
                    f8:e7:ad:de:c8:f6:68:97:20:dc:52:b4:ef:6c:c0:
                    09:14:26:72:ff:5e:dd:55:2f:28:40:13:64:ac:50:
                    5f:0a:38:96:a4:06:ac:9b:74:58:73:64:5c:40:87:
                    1e:f3:b2:8b:b2:e7:14:94:cc:ff:e3:4d:ae:8d:f4:
                    36:b8:33:14:b7:6a:c4:a6:91:56:c8:26:9e:b4:27:
                    a1:7d:84:80:b9:31:c0:c0:4f:a0:37:b5:4d:af:ea:
                    c9:27:91:bb:88:e4:15:36:23:65:90:49:e7:1f:62:
                    6d:33:04:9e:2e:e9:3d:b5:1e:e3:03:a9:7f:9c:d9:
                    c2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E7:BC:BA:F1:C2:D3:21:F1:D8:4D:7F:D4:CA:64:0C:0F:39:67:CC
            X509v3 Authority Key Identifier:
                keyid:AF:CF:5A:96:1A:67:A6:FA:ED:FE:FD:8F:2A:5B:83:F2:68:37:59:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r89alhpnpvrt_v2PKluD8mg3WYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b11584-19e9-453f-84c7-56c2a44d1878/1/r89alhpnpvrt_v2PKluD8mg3WYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b11584-19e9-453f-84c7-56c2a44d1878/1/r89alhpnpvrt_v2PKluD8mg3WYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:38:76:63:81:bf:cd:e2:23:86:2e:04:42:33:9d:fe:86:a3:
         63:61:62:55:91:6d:b8:e1:e6:cc:67:19:7d:bb:6e:71:d2:0f:
         29:55:46:d6:ec:b0:08:1c:bd:d3:f7:3e:b6:be:d5:71:ca:79:
         e7:8f:c1:2f:da:8b:cc:cf:00:11:a6:03:ff:43:45:13:10:b1:
         cd:f1:cf:a3:36:1b:9b:69:89:4e:5f:ce:79:58:dc:c6:a6:36:
         52:df:80:6e:db:25:4b:c4:3e:02:22:ca:aa:90:b2:3f:30:a2:
         18:e9:cd:2c:b1:bc:0a:6e:9a:d4:71:c3:2a:dc:2f:0b:75:9b:
         7c:a0:b2:62:7b:92:18:c5:23:a0:b5:fc:c9:95:1c:d6:c8:85:
         d3:b7:f5:8e:40:7b:e1:32:ce:f8:e0:0c:55:1d:9d:97:e6:c7:
         e2:14:5b:ed:6f:ef:2d:65:20:ad:87:a5:3e:81:dc:df:68:a7:
         e4:1b:56:27:a2:ea:15:46:e3:b2:2a:dd:79:f5:af:91:ac:ec:
         86:20:48:da:8c:9b:76:d4:ad:c5:f2:67:2d:e6:f8:84:6a:fc:
         87:18:a6:b0:cf:b9:53:fb:05:f7:83:da:62:76:1a:03:6d:cf:
         de:59:9e:9c:34:6c:b6:fd:f9:ec:43:4f:a8:46:7c:21:d9:61:
         97:48:c6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:00 2025 by rpki-client