Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
File:                     99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft (raw, json)
Hash identifier:          SiPLMc3I6UZqJel07dE1Sf+gmPwrst+OBIgI4e525Y4=
Subject key identifier:   97:E6:3A:FA:9B:C1:14:7D:A3:06:C6:10:C3:36:40:FC:42:A8:97:54
Authority key identifier: F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
Certificate issuer:       /CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Certificate serial:       01987D8BF13D03C2B2974BECD21204F44DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
Manifest number:          0D64
Signing time:             Wed 06 Aug 2025 04:02:59 +0000
Manifest this update:     Wed 06 Aug 2025 04:02:59 +0000
Manifest next update:     Thu 07 Aug 2025 04:02:59 +0000
Files and hashes:         1: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl (hash: oSS8CklFb6FPkB4lKLW32xJsETidu5aR1YaZ3zS3bww=)
                          2: LSE36n14OlFyT2JPffWytn2VECM.roa (hash: aCXHANC+PKr6N/DP0npU9YHvABAfrys/iPm1LqbDFCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8b:f1:3d:03:c2:b2:97:4b:ec:d2:12:04:f4:4d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d535083fb140ddab453abf821f5db3a6f461a4
        Validity
            Not Before: Aug  6 04:02:59 2025 GMT
            Not After : Aug  7 04:02:59 2025 GMT
        Subject: CN=97e63afa9bc1147da306c610c33640fc42a89754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:68:ee:ab:aa:60:5c:9e:96:65:27:c2:ef:7c:
                    52:91:b3:77:2d:c1:a2:52:5a:f8:65:7f:c5:67:2e:
                    8b:44:64:20:80:fe:1e:8d:82:46:02:03:99:99:9f:
                    5c:1c:f3:c6:b5:c8:ce:ad:c0:60:c0:54:ea:6c:7a:
                    a4:79:1b:45:51:0c:62:7f:43:96:86:a1:2f:0e:5d:
                    82:2d:40:ac:13:e0:0d:4e:97:6b:0a:0b:fb:ef:a8:
                    f0:47:f9:74:5e:3b:be:4e:e2:de:ef:14:91:1c:e9:
                    9d:45:8e:66:39:77:77:00:0e:91:bc:18:fc:af:24:
                    92:4f:a0:57:8c:49:93:d4:1e:13:38:a9:fc:c9:ec:
                    da:48:15:82:04:d6:66:c0:5b:53:55:e3:37:70:67:
                    6d:d3:2e:e8:53:94:8f:0c:f9:e6:59:4d:58:39:73:
                    8e:38:f4:47:c0:2e:df:c2:0d:55:4b:e4:48:e2:6b:
                    8e:6f:3f:81:2b:39:32:06:a1:e6:c9:66:ba:98:6a:
                    5f:67:54:d2:f8:d1:d0:1e:90:85:94:07:26:f5:c0:
                    f3:0b:ad:12:e3:6c:9c:66:b6:ca:c5:34:e0:98:ff:
                    28:b3:d2:d1:5e:b0:bb:6b:73:c1:5e:08:27:a5:4e:
                    e3:75:aa:09:9a:89:bb:8f:6f:43:56:4e:44:2e:df:
                    f0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E6:3A:FA:9B:C1:14:7D:A3:06:C6:10:C3:36:40:FC:42:A8:97:54
            X509v3 Authority Key Identifier:
                keyid:F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:69:f3:27:1e:42:43:a9:98:33:66:54:b6:32:1e:06:55:af:
         66:45:dc:ff:e5:6d:7a:93:46:0d:f5:18:d8:26:34:39:e8:5a:
         1a:ba:2b:ee:ab:91:f7:aa:e6:ad:cf:10:f1:33:cb:3f:31:9a:
         6c:62:c8:f1:de:c4:2d:87:03:d4:73:02:be:de:3b:64:18:eb:
         5d:9a:a9:6a:59:10:0e:45:77:48:d8:5b:82:79:c0:cc:98:db:
         6e:62:9b:be:b7:3a:16:62:ff:74:5d:3b:59:86:f2:b9:ca:a1:
         04:75:72:86:e7:1d:3f:38:19:3e:8c:8a:c2:53:3a:6c:c7:94:
         e6:e3:e8:ad:06:04:9b:a3:31:53:62:31:5b:c0:ce:16:9c:3f:
         d1:e6:1b:7b:3c:be:80:a1:7b:9f:55:d5:50:f7:63:44:b9:0e:
         d7:be:94:81:77:84:31:c4:43:f6:37:bb:43:0f:b1:3d:bb:15:
         f8:09:4c:af:88:7f:7e:70:c2:64:69:3c:a0:58:ce:00:b3:c7:
         89:03:df:00:3a:0f:9a:ab:25:d9:35:3f:6f:15:5c:a8:f6:4a:
         ec:35:d9:a7:16:9a:9a:78:e9:05:9b:b1:6a:57:c1:26:9d:d4:
         df:1d:01:e0:a5:0f:61:02:23:a2:d7:c6:b7:0a:c5:3b:7c:8f:
         b6:7a:8c:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9i/E9A8Kyl0vs0hIE9E32MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZDUzNTA4M2ZiMTQwZGRhYjQ1M2FiZjgyMWY1ZGIzYTZm
NDYxYTQwHhcNMjUwODA2MDQwMjU5WhcNMjUwODA3MDQwMjU5WjAzMTEwLwYDVQQD
Eyg5N2U2M2FmYTliYzExNDdkYTMwNmM2MTBjMzM2NDBmYzQyYTg5NzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2juq6pgXJ6WZSfC73xSkbN3LcGi
Ulr4ZX/FZy6LRGQggP4ejYJGAgOZmZ9cHPPGtcjOrcBgwFTqbHqkeRtFUQxif0OW
hqEvDl2CLUCsE+ANTpdrCgv776jwR/l0Xju+TuLe7xSRHOmdRY5mOXd3AA6RvBj8
rySST6BXjEmT1B4TOKn8yezaSBWCBNZmwFtTVeM3cGdt0y7oU5SPDPnmWU1YOXOO
OPRHwC7fwg1VS+RI4muObz+BKzkyBqHmyWa6mGpfZ1TS+NHQHpCFlAcm9cDzC60S
42ycZrbKxTTgmP8os9LRXrC7a3PBXggnpU7jdaoJmom7j29DVk5ELt/wpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfmOvqbwRR9owbGEMM2QPxCqJdUMB8GA1UdIwQY
MBaAFPfVNQg/sUDdq0U6v4IfXbOm9GGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85M2NlNjItNmYzZC00OTNjLWJmNmYt
NWNkODg1NDg5ZjgyLzEvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85M2NlNjItNmYzZC00OTNjLWJmNmYtNWNkODg1NDg5Zjgy
LzEvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2nzJx5C
Q6mYM2ZUtjIeBlWvZkXc/+VtepNGDfUY2CY0OehaGror7quR96rmrc8Q8TPLPzGa
bGLI8d7ELYcD1HMCvt47ZBjrXZqpalkQDkV3SNhbgnnAzJjbbmKbvrc6FmL/dF07
WYbyucqhBHVyhucdPzgZPoyKwlM6bMeU5uPorQYEm6MxU2IxW8DOFpw/0eYbezy+
gKF7n1XVUPdjRLkO176UgXeEMcRD9je7Qw+xPbsV+AlMr4h/fnDCZGk8oFjOALPH
iQPfADoPmqsl2TU/bxVcqPZK7DXZpxaamnjpBZuxalfBJp3U3x0B4KUPYQIjotfG
twrFO3yPtnqM0A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:21:27 2025 by rpki-client