Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
File:                     FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json)
Hash identifier:          OC5cwIdRMcVrKvHTNrnIKUkxbaFL1Asbbmr0cRVNOLQ=
Subject key identifier:   D6:0B:80:67:B4:4B:09:1B:FB:A8:DB:69:58:82:4D:A8:79:4D:1B:87
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Certificate issuer:       /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial:       019931FF0F8FC91FC7D1B8AAD16B39F96B7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
Manifest number:          0C70
Signing time:             Wed 10 Sep 2025 05:00:23 +0000
Manifest this update:     Wed 10 Sep 2025 05:00:23 +0000
Manifest next update:     Thu 11 Sep 2025 05:00:23 +0000
Files and hashes:         1: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: 5wzi7TZN/0zkS37gU/VdPkJ6CwykvqVM3UOBXnO0HAc=)
                          2: T8jVRfNtgOkoesNchTYMyWBMejA.roa (hash: odUOdpKN+tr75AiaB4U/yYO30gvxGiZ+PPW0U2k0wWk=)
                          3: _oI5hyBnCt55tCVsP54xRvG07cg.roa (hash: siBfTW9OHIW7tDQ3Efjyi7KuTusgOUvikxuMwP5Dkrs=)
                          4: h09V_pfLhbG06t0gQbFrPM7mXKs.roa (hash: 5yQRSQYWk0Fc992YjmOb7t6zzDvUZZ6yh9Kn/c45gMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:ff:0f:8f:c9:1f:c7:d1:b8:aa:d1:6b:39:f9:6b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
        Validity
            Not Before: Sep 10 05:00:23 2025 GMT
            Not After : Sep 11 05:00:23 2025 GMT
        Subject: CN=d60b8067b44b091bfba8db6958824da8794d1b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:ba:26:f5:24:16:65:76:62:92:28:6b:50:
                    8e:20:1b:69:4d:7b:c8:26:40:bb:ae:18:27:b7:d8:
                    8d:f0:0e:14:d4:40:39:a9:c6:46:2a:a1:da:06:52:
                    45:9e:1e:e5:51:a4:0a:a4:e0:bb:89:f6:bc:bd:c5:
                    8b:29:e6:43:14:87:5d:9c:10:a4:d3:dd:9c:5d:57:
                    df:49:a9:6e:f3:d4:c8:87:b6:d4:dc:34:ca:f0:9e:
                    e8:29:22:cf:93:72:be:ef:5e:60:d2:d6:38:fb:9a:
                    0b:ab:7f:c1:ab:cb:ac:64:bd:a8:8a:5b:e6:52:68:
                    ad:ce:4b:75:cf:04:a1:fc:fc:1f:1d:b2:d3:6e:8e:
                    0e:d1:68:0f:8e:b9:84:de:30:2b:f7:6c:62:ab:87:
                    37:f9:c3:2d:3b:ec:89:f3:98:7e:47:90:1a:66:6d:
                    fa:bc:6c:2d:85:a6:80:a4:29:bf:44:db:4f:bc:65:
                    d6:36:fa:67:11:9a:28:67:b8:d1:c5:1e:9d:b1:91:
                    03:57:cf:21:75:f5:e1:c5:59:23:af:bd:fd:ab:74:
                    5a:33:a1:83:5d:6f:6f:2b:41:75:85:9e:a6:bb:b9:
                    21:d8:9f:44:56:40:d2:4c:de:3f:91:65:6d:19:8e:
                    1f:c7:d8:07:b7:db:3b:79:cd:c7:38:fc:96:58:4a:
                    fa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0B:80:67:B4:4B:09:1B:FB:A8:DB:69:58:82:4D:A8:79:4D:1B:87
            X509v3 Authority Key Identifier:
                keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:54:df:07:a7:4f:ca:52:3f:14:f4:c1:30:86:36:d9:11:81:
         1c:22:6a:1f:78:ae:f4:50:6a:21:ed:7d:1c:03:19:94:c5:84:
         21:25:c0:71:19:6c:df:16:f7:d0:ac:c9:24:3d:2f:ed:21:64:
         ad:44:df:cd:9b:c2:24:a4:f7:13:d9:5a:f6:dd:47:f8:67:82:
         47:9a:83:58:63:d5:85:f5:9d:ef:1c:ab:bf:4b:8c:08:cb:c2:
         f0:1a:a7:33:5d:22:f6:60:f1:b8:56:d8:ca:ff:e5:d4:1b:a4:
         3f:17:82:68:9c:11:c7:7d:86:1d:5e:19:56:22:46:bb:8d:5c:
         05:13:10:3a:77:77:fa:3c:c6:b0:bc:0a:7a:96:ec:49:a0:2f:
         9e:c6:c6:14:1f:dd:bf:4b:5b:6d:13:af:4b:5c:a6:41:5b:ef:
         a4:da:07:89:5e:be:72:31:c9:53:c5:73:4c:1b:b2:bf:82:a0:
         4f:a0:b5:03:73:0a:74:10:50:8e:01:7d:b6:4f:b5:10:63:10:
         b9:ae:0e:87:94:27:0d:e5:46:20:2f:33:26:45:e3:e5:08:73:
         ab:f1:23:f0:cd:32:35:6a:b5:46:76:da:74:ca:77:c5:f2:38:
         09:1e:fc:2f:80:f1:d1:6a:5d:7c:ff:33:be:62:8f:09:e7:48:
         75:41:1e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 06:27:19 2025 by rpki-client