Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File:                     idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier:          ocGmN/uFY+EePWecIId+HbIQ30SVh6JXUxHXPnvel+s=
Subject key identifier:   89:A9:D8:F2:57:B5:C3:02:10:BF:36:27:ED:B8:05:0A:28:CF:79:0D
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       019834CC1AC307C2766A0A7DD7229561F312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number:          1625
Signing time:             Wed 23 Jul 2025 01:00:48 +0000
Manifest this update:     Wed 23 Jul 2025 01:00:48 +0000
Manifest next update:     Thu 24 Jul 2025 01:00:48 +0000
Files and hashes:         1: NiGYqg5TAswBXGUoDDk3K-vSfzg.roa (hash: oBryaxq11NqGZi9VWM48AWdrC2u99cuTtHQY7Z60FIs=)
                          2: WRU5bJ9s6-cCMUxuHnt7rIdZ1Bg.roa (hash: OqboybhTqeUl9b9SecOseaZfDnk1cvhEpGeclcmitv4=)
                          3: XfXS8ijvqtsMHkla-Me1RcI7IwA.roa (hash: 2RtkbeEIEVw4twW1PRZ/J8F/rTi3ZGd/QdB8lfuZFqE=)
                          4: bjCT3AVcMSsUvzlUV22vDpDgm88.roa (hash: x4ngTz88Z2Xqe2E3hfhNz2+VZin5gGJSvgjTiP2om64=)
                          5: fkq-oahmsSqrVUTtF-STfDckmnU.roa (hash: mVtrIUuQCxsrmw0YepuR3MHRKtv6BfBxn8f0qa7KMLk=)
                          6: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: UWKO8OC4lcAlYZUu1kPd460vqloTU/yY4DznFwzZXiw=)
                          7: u7Bic-zzMP1Iys3M73ZkiMffy74.roa (hash: PFfJrw/TlR3YpR2p/4mJqLKX4yyUo6fGvlNS1uayrpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:34:cc:1a:c3:07:c2:76:6a:0a:7d:d7:22:95:61:f3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Jul 23 01:00:48 2025 GMT
            Not After : Jul 24 01:00:48 2025 GMT
        Subject: CN=89a9d8f257b5c30210bf3627edb8050a28cf790d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2d:e3:3d:f4:7b:33:9d:92:ca:bd:41:ac:be:
                    b6:ff:de:17:36:ba:f6:f5:ca:f3:28:55:6f:a8:80:
                    6d:85:5d:81:ed:bf:b3:d0:b5:0c:f4:f8:13:54:56:
                    21:91:6d:8b:66:40:40:72:23:6e:09:5d:46:f4:71:
                    0d:eb:79:39:da:74:c6:7a:c8:20:ba:10:f6:dd:aa:
                    02:b0:5f:a9:46:53:6e:ef:7c:5e:1c:4f:cc:f8:dc:
                    9b:b4:2d:d7:7a:69:1d:91:6b:8c:b0:53:ed:26:ef:
                    29:a1:35:41:c6:b9:c9:ab:1c:9c:2a:12:9a:00:b0:
                    18:cb:21:b9:a5:5c:65:a0:ce:6a:fc:21:79:02:b5:
                    5f:2c:06:df:91:44:4e:3d:15:d2:53:86:f5:94:b3:
                    01:c1:47:40:ab:bf:24:c3:22:37:14:90:b1:4e:13:
                    46:78:92:14:b9:58:2d:e4:b8:77:7a:a7:dc:d0:be:
                    ca:d7:ec:0b:63:fa:6d:0d:4d:76:03:28:f8:f7:96:
                    1d:ee:77:2b:e8:e1:57:47:a6:e7:2a:0a:cf:0b:4d:
                    76:64:b2:cf:bb:19:14:ce:3a:3a:ac:31:45:bc:87:
                    be:db:cf:d1:ca:e9:16:0f:b5:16:ce:0c:0d:cd:e6:
                    c6:a0:33:ec:07:d0:30:78:54:6f:3f:64:c8:b5:d7:
                    b7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A9:D8:F2:57:B5:C3:02:10:BF:36:27:ED:B8:05:0A:28:CF:79:0D
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:8f:c3:0f:96:6e:1b:bf:db:a1:f4:91:4a:07:21:5f:54:67:
         f5:e1:6d:61:fb:8d:c1:82:ed:ea:21:4e:4b:2c:07:6b:4d:ef:
         d6:37:58:3d:df:12:fe:82:ca:ee:0b:20:ca:5c:ea:de:1d:42:
         ec:b7:8d:51:b7:66:df:e2:c8:80:db:97:d5:0d:b4:c7:6a:42:
         b9:da:e2:46:c5:fa:7f:a8:f3:8c:91:09:56:14:5c:02:3f:81:
         5b:75:6e:3e:95:2b:43:7e:f4:32:89:77:e3:81:b1:e5:d9:f0:
         9e:19:c2:ab:ac:a5:c2:a4:c7:ec:b6:23:5c:3d:8b:7b:e5:c7:
         89:18:94:26:bc:39:c4:14:10:aa:4f:c1:32:14:a4:df:e4:bc:
         49:15:ca:e9:1d:3b:3e:d8:81:9c:73:2f:ec:85:9a:d3:4a:09:
         b3:09:cf:52:50:ed:d4:53:fd:45:d3:86:2b:05:6e:78:6a:24:
         c1:a7:c2:0c:8d:b6:8b:c1:ec:8a:19:86:41:3c:f8:df:c8:0c:
         49:2f:47:47:2e:cb:fa:d9:b7:30:01:89:b8:6b:05:dc:51:65:
         55:37:f8:21:b6:68:7f:b8:71:c9:8f:5c:13:0a:29:69:f3:c3:
         80:31:87:91:03:7c:fd:b8:73:d9:96:01:03:81:df:fa:8b:e9:
         f2:21:39:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 07:59:20 2025 by rpki-client