Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
File:                     89hcR9C31txd3aCFcrZFTBBZUSw.mft (raw, json)
Hash identifier:          ADFBOFp3AiELNbMc08Ykp2UjTeWrjNjdXf69a1gYyQg=
Subject key identifier:   95:CD:5C:BE:A8:FD:19:33:EC:7F:D1:C4:45:A4:22:3F:D4:71:24:BE
Authority key identifier: F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C
Certificate issuer:       /CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
Certificate serial:       019849D377E7243D4CA59028EE1788D0969C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
Manifest number:          0B6E
Signing time:             Sun 27 Jul 2025 03:00:51 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:51 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:51 +0000
Files and hashes:         1: 89hcR9C31txd3aCFcrZFTBBZUSw.crl (hash: IYc4zhFhTPlihiWHjcH5kOdNwXMZq4ewq8S8NcK4Mks=)
                          2: RArCPfG6cBnbfBAKLbWfL49ZMls.roa (hash: uc8AJAayCJr6PnC8hA44mAQSr2RQBPC/srP3fioA29o=)
                          3: Wi2RTxfTTcg3jIA6VNCxJhuXtSc.roa (hash: PN/Hitc4mDcgZ6vgsBJIh+lNS02EoNv2xNjb7IleUCM=)
                          4: iI96ltGCU8Eh-fXmAqschYb7j1E.roa (hash: Z5PSdW/OzuN6TE7LbGMzYDGBpKQ5aABS0hIggAHbUHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:77:e7:24:3d:4c:a5:90:28:ee:17:88:d0:96:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3d85c47d0b7d6dc5ddda08572b6454c1059512c
        Validity
            Not Before: Jul 27 03:00:51 2025 GMT
            Not After : Jul 28 03:00:51 2025 GMT
        Subject: CN=95cd5cbea8fd1933ec7fd1c445a4223fd47124be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:43:03:35:67:68:e1:fc:b7:6a:fd:91:99:65:
                    66:d3:57:0b:dc:1f:4b:39:48:ba:79:4e:5d:f5:18:
                    1b:75:4e:8a:56:69:66:69:5b:60:88:8d:33:0c:59:
                    1c:b7:a0:5c:4f:ab:4d:43:90:21:d1:eb:70:2f:4d:
                    a9:ec:1d:aa:db:e0:4c:6a:b7:88:c9:22:ed:ea:f5:
                    45:d3:7a:cb:46:46:f5:46:66:c6:9c:d7:e4:50:44:
                    5b:f4:b7:ec:5f:07:96:39:a5:66:ec:98:8c:c3:40:
                    b8:70:3e:da:88:47:5c:4e:88:78:e8:f3:88:5d:a3:
                    e2:5f:f6:ed:b9:1e:3b:47:22:3c:e5:ef:33:24:44:
                    83:bf:b4:ab:0c:af:0a:8e:62:fc:62:c2:e3:f8:ad:
                    0b:32:77:5b:8a:80:9d:3b:78:34:9c:1a:27:d4:df:
                    16:34:e7:0d:65:28:b6:75:54:f4:9c:c7:f3:57:37:
                    7d:63:d4:98:22:85:a1:a2:fb:3c:92:db:fb:28:a7:
                    85:c8:aa:3b:47:d5:dd:e4:6f:67:a8:c4:84:aa:9c:
                    e3:f4:d4:17:e0:00:ff:62:d4:a1:32:c1:da:24:6e:
                    ba:ce:53:91:f0:61:ad:22:ed:5a:b7:4c:b0:0e:e8:
                    21:44:9c:70:98:07:ea:57:c2:f4:49:42:69:a4:4e:
                    5c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CD:5C:BE:A8:FD:19:33:EC:7F:D1:C4:45:A4:22:3F:D4:71:24:BE
            X509v3 Authority Key Identifier:
                keyid:F3:D8:5C:47:D0:B7:D6:DC:5D:DD:A0:85:72:B6:45:4C:10:59:51:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89hcR9C31txd3aCFcrZFTBBZUSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/26fb11-2d00-4e7b-b297-5212db9754f4/1/89hcR9C31txd3aCFcrZFTBBZUSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ee:a2:0b:6c:2d:35:ae:05:ce:2f:3e:43:af:75:3a:b5:9d:
         42:ea:c3:c7:16:66:27:6a:72:d1:e7:30:be:89:8e:f3:7a:a2:
         5f:9b:80:74:e0:ce:e8:7b:78:55:c7:36:b2:97:99:e3:61:99:
         92:40:4e:9f:68:a1:c6:83:97:15:00:99:b3:58:69:6c:89:a5:
         a2:0d:b5:5e:d0:b1:90:80:99:12:a0:69:9b:26:12:74:fa:2b:
         66:14:56:c1:0f:e2:38:6b:0e:23:b6:5a:d2:c4:0e:4c:e2:ab:
         81:5d:85:7b:9f:87:8a:60:f3:f4:a3:14:5f:2c:da:70:a3:8c:
         f3:ea:3d:7f:77:bd:c5:c3:d7:77:36:56:f5:93:3c:4b:16:7a:
         03:8e:ea:f3:b3:5f:aa:42:7c:62:5a:fc:b4:01:3f:7e:5c:cc:
         c7:73:73:67:30:d1:94:46:7b:4a:b4:04:6e:77:0c:e7:65:5c:
         0e:2d:df:8a:ba:ec:6a:3c:c9:7b:e7:a0:47:94:81:4f:f9:23:
         6c:46:3e:6b:ee:a8:c9:29:7f:b8:8d:26:54:f2:32:94:fd:f1:
         7c:42:b4:a1:a7:cd:f8:c5:93:d3:a9:01:44:18:1e:d4:f9:5d:
         48:67:b3:61:63:a4:ba:86:f0:0f:85:a5:81:1a:3f:68:fa:80:
         5c:b5:ef:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:52:20 2025 by rpki-client