Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
File:                     ni19W4LIN4uiFTlDzpSCzkzUlRs.mft (raw, json)
Hash identifier:          z0ibYjbyhXOCync2MbRyR7lqbeb7/AmmRBMjdb+H/sw=
Subject key identifier:   86:9E:BE:65:35:34:A4:BF:2D:FA:8A:66:66:03:BE:15:3B:4D:A4:07
Authority key identifier: 9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
Certificate issuer:       /CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Certificate serial:       01984A411A79F4457C112852DAED039B905C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
Manifest number:          12A4
Signing time:             Sun 27 Jul 2025 05:00:37 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:37 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:37 +0000
Files and hashes:         1: WTmdMFPzU41Yj6CYfdDHa3cKmOo.roa (hash: ZRrWNdq+lRZfywzlRdTcVIMqLndtMkQtQ6MhxjI8HvM=)
                          2: ni19W4LIN4uiFTlDzpSCzkzUlRs.crl (hash: NgW9JKKtjIHd7jojBWp1E3zhqDJnqlolzTPLJJNPi70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:1a:79:f4:45:7c:11:28:52:da:ed:03:9b:90:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
        Validity
            Not Before: Jul 27 05:00:37 2025 GMT
            Not After : Jul 28 05:00:37 2025 GMT
        Subject: CN=869ebe653534a4bf2dfa8a666603be153b4da407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:40:84:cc:b6:6c:69:0e:4d:57:50:b4:b9:57:
                    f2:a7:af:02:4a:5f:c9:cb:7e:53:a5:f8:73:1c:59:
                    6e:bb:12:c9:60:b8:cc:b0:f5:57:0b:95:e0:94:4f:
                    0d:89:ee:05:5d:b1:33:76:34:8e:37:5e:e5:cb:b8:
                    6f:2c:93:10:78:04:64:a8:89:c4:e7:cc:98:ce:c8:
                    71:c2:6c:9a:36:20:1a:cc:60:58:c0:2a:e7:95:b4:
                    3e:22:b6:41:47:19:95:1d:0a:6f:ea:89:98:a2:07:
                    ce:99:6f:16:7e:bd:72:3c:a1:e4:91:97:89:3f:ae:
                    69:1a:e5:91:d1:aa:90:59:c0:f1:c8:b9:00:1e:99:
                    71:3d:33:88:f5:97:d8:f1:52:1f:b5:33:9d:b5:2d:
                    80:a5:84:99:f8:35:2a:fe:d0:cf:c5:82:84:55:1b:
                    2c:1b:ee:a8:bd:be:38:5f:d4:ab:40:51:6a:07:70:
                    d3:0e:24:01:8b:03:be:bc:f4:fb:e3:0b:4d:92:b0:
                    49:39:21:0a:96:cb:b6:ce:ac:24:f0:c6:26:ec:5a:
                    3e:ef:e6:b8:0e:b1:ec:ca:be:38:19:aa:6a:97:22:
                    80:4a:4f:a3:9d:c5:48:46:9c:f8:fa:67:c3:b9:c1:
                    a5:f8:86:c0:06:c2:98:3a:c6:bf:3a:d5:22:ce:b4:
                    5e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9E:BE:65:35:34:A4:BF:2D:FA:8A:66:66:03:BE:15:3B:4D:A4:07
            X509v3 Authority Key Identifier:
                keyid:9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a1:d7:ad:77:75:90:f7:f0:a0:32:f9:ef:91:a1:4e:ea:8e:
         0a:3c:6a:e0:bd:15:71:ad:a1:b1:83:53:71:89:ec:f4:ab:be:
         27:50:0c:17:c6:30:3a:5a:5d:67:2e:47:82:45:6d:be:b3:54:
         aa:6e:9d:61:d5:cb:ed:0b:a4:fc:9d:53:a7:07:2d:57:83:48:
         8a:d0:9b:c0:9c:0d:e1:82:0b:dc:04:36:7d:ca:cd:7d:19:34:
         c4:2f:ee:c6:9b:05:d7:d0:80:39:ed:12:90:7e:68:96:19:72:
         9d:de:86:19:3d:0c:b0:24:37:28:a3:d9:3f:a2:21:08:27:7d:
         d3:c3:62:85:7c:1f:ab:ed:5e:89:24:85:66:d2:02:5b:ba:f4:
         df:fb:9a:72:79:bf:a8:e3:e4:77:03:d6:a6:25:ea:ff:52:07:
         a2:43:d9:46:dc:95:f5:9d:de:5f:61:38:74:63:cc:bb:47:3c:
         94:6e:e4:e4:15:d9:e6:ee:f6:a0:01:f6:bf:07:e1:64:b2:25:
         a7:4c:c2:b7:d5:de:92:61:57:23:00:3b:a5:a8:a1:1a:af:b4:
         d2:b7:b5:a3:d3:81:53:b6:30:0c:15:40:6a:3e:08:f9:8e:18:
         f3:38:50:3e:bd:bc:dc:4f:44:64:ce:39:9a:bd:3f:86:73:58:
         db:13:e6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:36:37 2025 by rpki-client