Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
File:                     ni19W4LIN4uiFTlDzpSCzkzUlRs.mft (raw, json)
Hash identifier:          plrvp9FChZe2jDALC0oCZRo3Bj4NpT/xzdebLDEVmH4=
Subject key identifier:   90:28:16:3E:9E:77:2B:5C:82:72:FE:5A:BB:37:49:C0:F9:7B:E3:59
Authority key identifier: 9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
Certificate issuer:       /CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Certificate serial:       019749685629AFACDA9273E53F02696EDFAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
Manifest number:          121F
Signing time:             Sat 07 Jun 2025 08:01:03 +0000
Manifest this update:     Sat 07 Jun 2025 08:01:03 +0000
Manifest next update:     Sun 08 Jun 2025 08:01:03 +0000
Files and hashes:         1: WTmdMFPzU41Yj6CYfdDHa3cKmOo.roa (hash: ZRrWNdq+lRZfywzlRdTcVIMqLndtMkQtQ6MhxjI8HvM=)
                          2: ni19W4LIN4uiFTlDzpSCzkzUlRs.crl (hash: 7oPmgOgQS9XyfifjeqSevRsw+ZvwlACxXKAJDadZW2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:56:29:af:ac:da:92:73:e5:3f:02:69:6e:df:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
        Validity
            Not Before: Jun  7 08:01:03 2025 GMT
            Not After : Jun  8 08:01:03 2025 GMT
        Subject: CN=9028163e9e772b5c8272fe5abb3749c0f97be359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:28:87:22:3d:75:f9:a6:b5:f8:a5:fd:1d:
                    34:2f:3c:f6:77:88:b5:27:06:38:a0:7c:bc:5a:9c:
                    12:f9:60:89:d5:d3:a8:c6:07:5f:13:86:38:86:a0:
                    31:ba:1b:c4:40:1f:fe:d3:b3:85:9c:bf:cd:c5:a6:
                    24:4f:d4:ab:69:ca:ac:1e:27:6e:e4:82:b4:fd:ae:
                    ed:b7:0e:54:11:bc:11:52:ae:31:52:bf:a9:72:53:
                    9c:78:fc:57:ad:bb:dc:60:ba:2c:e5:f8:91:08:36:
                    e9:b6:2e:1f:0a:8c:49:b8:9f:28:71:70:69:17:e4:
                    cb:d5:19:a4:d1:6e:be:52:fb:63:94:ba:92:8c:65:
                    9d:cb:69:a7:7d:a9:03:b6:0c:cf:de:7c:24:eb:33:
                    c0:1f:d2:e1:1a:54:63:da:a7:7e:ae:48:8d:28:fe:
                    92:0e:22:01:20:2b:71:fc:8d:7d:b3:aa:10:11:f0:
                    b7:38:a5:36:a1:4f:73:42:50:35:5b:c7:c3:a5:ac:
                    58:12:08:59:ff:18:ab:8c:ac:9f:1a:10:2a:2a:88:
                    15:5c:a8:99:03:db:25:99:14:06:ad:bc:ab:72:51:
                    9f:fa:53:4a:4b:23:a0:ba:0a:fe:b1:8c:fc:08:56:
                    bd:62:14:ab:b0:4c:97:4d:cc:5a:a9:91:28:eb:b9:
                    d0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:28:16:3E:9E:77:2B:5C:82:72:FE:5A:BB:37:49:C0:F9:7B:E3:59
            X509v3 Authority Key Identifier:
                keyid:9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a3:27:8b:5c:8a:18:c5:09:c1:f8:f4:54:1f:ae:08:af:1e:
         f6:0c:8d:f1:a6:7c:a0:42:0e:ad:3d:20:68:a8:f9:d3:d7:d8:
         6f:85:3e:0d:42:48:1c:ec:e8:51:46:86:79:4b:05:e7:28:d9:
         ae:75:ae:e3:b1:c9:18:19:55:de:8f:4a:ca:29:0c:88:1f:2f:
         2f:90:65:8e:32:5c:07:c0:e5:25:d8:42:fd:9c:bb:98:20:34:
         43:08:59:44:4f:78:69:84:c8:9d:56:3a:f3:34:73:d2:f4:47:
         e4:89:a4:3f:ff:a8:67:4f:b0:c5:94:4c:e6:05:87:a2:a5:05:
         07:10:03:7b:fc:15:b2:26:2f:c8:f4:62:24:1e:c0:3b:1a:0e:
         a2:ad:4a:86:ba:76:5c:95:73:cc:69:7e:fd:8d:84:b4:c9:25:
         09:02:fe:af:a7:c3:bc:7d:16:10:1c:a3:82:99:20:f4:78:e8:
         fb:01:e7:b1:05:7c:93:5f:23:a0:91:41:c6:e5:c4:4e:90:a5:
         aa:91:ce:bd:75:c8:b5:05:82:9c:53:f7:4c:ea:f9:5e:70:fb:
         a5:68:d2:bf:8f:dc:3a:d5:6e:e0:1c:03:ac:55:5c:08:7b:a0:
         bb:f2:1c:5c:58:a1:e5:9c:b1:be:dd:a2:27:79:d6:f9:59:56:
         2a:14:4e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:53 2025 by rpki-client