Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
File:                     ni19W4LIN4uiFTlDzpSCzkzUlRs.mft (raw, json)
Hash identifier:          VuxhNAWLriZnXgALbiW2mhstlhUjR+7kIlAP69mO6cw=
Subject key identifier:   FB:6E:7D:1C:D3:7F:18:3B:58:9B:3F:3F:3E:3F:F9:58:E9:F2:4F:C9
Authority key identifier: 9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
Certificate issuer:       /CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Certificate serial:       01988430D8C1783334C823A584C0DD12C3CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
Manifest number:          12C2
Signing time:             Thu 07 Aug 2025 11:00:50 +0000
Manifest this update:     Thu 07 Aug 2025 11:00:50 +0000
Manifest next update:     Fri 08 Aug 2025 11:00:50 +0000
Files and hashes:         1: WTmdMFPzU41Yj6CYfdDHa3cKmOo.roa (hash: ZRrWNdq+lRZfywzlRdTcVIMqLndtMkQtQ6MhxjI8HvM=)
                          2: ni19W4LIN4uiFTlDzpSCzkzUlRs.crl (hash: EGgkTMqAPoaqePjRk2mpMeXBxC67x3u9h4GPo/kSJJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:84:30:d8:c1:78:33:34:c8:23:a5:84:c0:dd:12:c3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
        Validity
            Not Before: Aug  7 11:00:50 2025 GMT
            Not After : Aug  8 11:00:50 2025 GMT
        Subject: CN=fb6e7d1cd37f183b589b3f3f3e3ff958e9f24fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a9:02:21:40:27:92:56:f8:8b:27:72:77:ac:
                    e5:1f:44:75:ae:34:e7:09:33:47:72:56:7c:e5:0f:
                    b7:62:f5:7e:37:78:40:bf:9a:fd:5e:71:a7:d6:a9:
                    90:8d:b7:0f:87:53:df:6b:7d:89:76:da:30:95:3c:
                    1c:f5:31:7c:ba:56:0d:0a:58:29:fc:a0:09:96:8e:
                    f6:f7:72:fd:1d:2b:90:b9:8a:c5:c9:68:fa:22:23:
                    81:64:02:81:85:81:ac:65:f6:1e:e9:c3:e8:cf:9f:
                    9d:53:1c:7d:3a:c6:5e:e6:88:96:29:4f:eb:ca:ad:
                    6d:78:3a:bc:03:4f:dc:14:d9:ec:ec:3f:0e:7f:cf:
                    89:9c:84:77:59:23:8f:90:e1:3e:b3:09:00:d9:f7:
                    d2:8e:7e:e5:ed:c9:c2:c9:87:f2:0a:83:4d:6b:21:
                    4a:49:79:74:80:cb:65:16:e9:46:66:d9:2b:a7:43:
                    c0:56:4d:58:d0:14:22:d3:80:0e:cf:68:23:89:42:
                    34:4b:ee:ee:47:ca:08:4f:50:6d:54:41:8f:33:4a:
                    a8:81:5c:45:7a:d6:2a:4a:ec:bf:6f:ab:5f:24:91:
                    14:0c:29:64:9c:e6:90:97:c3:b0:1f:b1:16:be:6f:
                    6b:89:b1:8e:a0:b4:af:29:64:51:09:40:27:04:f7:
                    fd:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:6E:7D:1C:D3:7F:18:3B:58:9B:3F:3F:3E:3F:F9:58:E9:F2:4F:C9
            X509v3 Authority Key Identifier:
                keyid:9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:94:42:8d:54:b2:1d:1c:64:e5:bf:4b:df:a9:37:eb:cf:7c:
         24:62:a5:3b:b4:de:ba:ad:06:85:6f:1d:02:50:60:63:a0:5a:
         45:c9:84:c7:f8:58:5a:f1:58:52:24:a9:0d:58:43:aa:0c:db:
         06:2c:17:e1:02:c8:51:59:45:7e:09:05:5b:b8:8d:64:ec:f2:
         e5:38:bf:76:0f:2f:d8:b7:c2:50:73:3e:a4:cf:fb:8c:4a:51:
         22:12:62:45:dd:57:24:37:d0:f1:4c:26:94:31:1c:d1:51:8d:
         17:11:0d:db:61:95:09:e9:ef:ca:e1:ac:f5:80:62:af:77:e4:
         42:29:75:7c:41:3c:86:2b:be:aa:07:00:fe:d4:62:b6:ef:5f:
         bc:ef:5a:e2:b3:ad:d7:52:9e:1a:06:b0:c5:14:63:b9:09:48:
         11:86:81:05:eb:1f:3d:d0:1f:96:e2:c7:b7:06:e5:d1:0d:0f:
         7e:42:f0:0b:be:39:89:48:54:21:45:4f:65:bc:28:20:dc:b6:
         2b:2a:64:02:66:5e:04:8f:91:85:a7:38:0a:13:1f:d7:0d:7c:
         84:71:c7:aa:0a:be:e5:48:b9:d1:c7:37:e6:9a:0b:32:f2:f5:
         07:a4:14:22:e9:b0:4b:7f:3c:ac:d1:98:70:1f:50:ee:f0:bb:
         b3:28:0c:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiEMNjBeDM0yCOlhMDdEsPNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMmQ3ZDViODJjODM3OGJhMjE1Mzk0M2NlOTQ4MmNlNGNk
NDk1MWIwHhcNMjUwODA3MTEwMDUwWhcNMjUwODA4MTEwMDUwWjAzMTEwLwYDVQQD
EyhmYjZlN2QxY2QzN2YxODNiNTg5YjNmM2YzZTNmZjk1OGU5ZjI0ZmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5akCIUAnklb4iydyd6zlH0R1rjTn
CTNHclZ85Q+3YvV+N3hAv5r9XnGn1qmQjbcPh1Pfa32JdtowlTwc9TF8ulYNClgp
/KAJlo7293L9HSuQuYrFyWj6IiOBZAKBhYGsZfYe6cPoz5+dUxx9OsZe5oiWKU/r
yq1teDq8A0/cFNns7D8Of8+JnIR3WSOPkOE+swkA2ffSjn7l7cnCyYfyCoNNayFK
SXl0gMtlFulGZtkrp0PAVk1Y0BQi04AOz2gjiUI0S+7uR8oIT1BtVEGPM0qogVxF
etYqSuy/b6tfJJEUDClknOaQl8OwH7EWvm9ribGOoLSvKWRRCUAnBPf9gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtufRzTfxg7WJs/Pz4/+Vjp8k/JMB8GA1UdIwQY
MBaAFJ4tfVuCyDeLohU5Q86Ugs5M1JUbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmkxOVc0TElONHVpRlRsRHpwU0N6a3pVbFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jYThkOTgtZTdhNC00YmRjLThjOTAt
YjI5NjA2ZDUxZjlkLzEvbmkxOVc0TElONHVpRlRsRHpwU0N6a3pVbFJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9jYThkOTgtZTdhNC00YmRjLThjOTAtYjI5NjA2ZDUxZjlk
LzEvbmkxOVc0TElONHVpRlRsRHpwU0N6a3pVbFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpRCjVSy
HRxk5b9L36k36898JGKlO7Teuq0GhW8dAlBgY6BaRcmEx/hYWvFYUiSpDVhDqgzb
BiwX4QLIUVlFfgkFW7iNZOzy5Ti/dg8v2LfCUHM+pM/7jEpRIhJiRd1XJDfQ8Uwm
lDEc0VGNFxEN22GVCenvyuGs9YBir3fkQil1fEE8hiu+qgcA/tRitu9fvO9a4rOt
11KeGgawxRRjuQlIEYaBBesfPdAfluLHtwbl0Q0PfkLwC745iUhUIUVPZbwoINy2
KypkAmZeBI+Rhac4ChMf1w18hHHHqgq+5Ui50cc35poLMvL1B6QUIumwS388rNGY
cB9Q7vC7sygMfg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 14:36:00 2025 by rpki-client