Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
File:                     9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json)
Hash identifier:          Y7hJKz8z2/zVJoKT4UJuLydr4QFrvzYWHTt7OeEoy/g=
Subject key identifier:   68:00:17:53:E2:53:18:11:5B:16:A6:45:C5:46:44:AD:D4:73:3D:40
Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6
Certificate issuer:       /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
Certificate serial:       019893DAE3477A7B7EB61228F3E4AECE3901
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
Manifest number:          1629
Signing time:             Sun 10 Aug 2025 12:00:52 +0000
Manifest this update:     Sun 10 Aug 2025 12:00:52 +0000
Manifest next update:     Mon 11 Aug 2025 12:00:52 +0000
Files and hashes:         1: 88-pt2hIN1dTOb7W_yyIcsyIKos.roa (hash: rXxfNXMHY0jcVNFeL7a/dvDj6ZDtDB0GLjdB35wLnIg=)
                          2: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: Y7z5WCkhTtYBtsegWKDGGzfQ6rGbqqUo65f/enZGqEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:da:e3:47:7a:7b:7e:b6:12:28:f3:e4:ae:ce:39:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6
        Validity
            Not Before: Aug 10 12:00:52 2025 GMT
            Not After : Aug 11 12:00:52 2025 GMT
        Subject: CN=68001753e25318115b16a645c54644add4733d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:15:6d:81:a7:94:fc:bf:aa:57:b6:19:94:
                    ce:38:c9:91:9f:70:6e:94:b6:ab:82:fd:46:17:8b:
                    05:b9:56:4f:36:21:d5:91:7e:04:4d:e8:5f:00:66:
                    10:4f:b7:f9:e2:81:84:70:bd:ae:f2:29:0c:da:f4:
                    71:4d:21:77:38:eb:f5:af:8a:86:01:c1:fa:cd:10:
                    83:d3:86:8b:29:f6:f8:ac:55:41:d9:73:cb:93:39:
                    85:ce:23:95:63:00:cb:e3:2f:d5:34:f1:a2:98:93:
                    69:86:2f:5a:1d:00:4b:99:9e:63:00:dd:33:e3:24:
                    fd:d9:af:fb:b1:44:3f:3b:b3:b1:90:d5:ae:b7:7d:
                    3b:64:6f:2c:4b:61:c4:91:f5:5a:16:e7:0f:ad:08:
                    94:25:b1:7c:9c:5c:ce:14:e0:d6:3f:10:32:84:88:
                    a1:6d:a4:59:7c:01:74:a7:de:35:58:61:97:1a:28:
                    6d:b2:0e:d1:db:4f:ce:3a:b2:39:d9:47:f2:9f:af:
                    71:00:58:71:8a:1a:24:d6:4c:0a:4f:1b:33:84:19:
                    2d:7c:61:46:2b:de:80:a7:c6:f3:04:c2:ca:7f:10:
                    dc:0c:a0:65:ad:33:25:62:30:c2:68:4e:ed:44:d0:
                    32:a2:f7:e6:6a:f4:ae:f3:cd:2e:e5:e9:c9:4a:c8:
                    4a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:00:17:53:E2:53:18:11:5B:16:A6:45:C5:46:44:AD:D4:73:3D:40
            X509v3 Authority Key Identifier:
                keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f8:d2:c0:8b:9f:f1:2b:d1:30:46:b1:8a:6f:28:b2:fa:2f:
         96:83:32:e6:0f:51:15:4c:23:33:90:3b:e6:3c:8f:8a:55:8c:
         ae:68:12:3a:1e:b1:0f:33:b2:b6:3b:ff:56:5e:6a:18:56:09:
         ca:61:1c:ef:1c:c5:82:d9:52:13:d5:f3:63:07:f3:f5:65:34:
         88:fa:fa:bf:99:c6:86:c1:7b:51:6e:58:fa:9f:55:db:40:f7:
         c5:e2:21:b4:96:b4:97:fa:5b:7e:df:c7:d9:db:5c:86:4b:da:
         4e:0f:1b:47:d8:ef:1b:cb:9e:41:87:ff:00:26:fe:67:06:88:
         c0:fb:24:6a:45:24:15:00:54:45:19:23:fb:c8:7e:b7:1f:4e:
         cb:7f:a6:72:1c:88:8c:6c:17:d2:94:4d:f9:cd:ca:1d:1b:18:
         17:c3:06:2f:cd:2e:df:1f:56:48:f0:72:ef:1e:16:d8:a1:c7:
         fc:b9:99:97:67:12:40:e7:be:d2:eb:44:61:60:6f:d2:3d:f6:
         33:3f:7c:b4:61:c0:96:e0:ea:6c:03:34:68:69:1b:b5:a6:14:
         4c:c9:a4:a1:30:2f:8e:7c:9b:18:bd:85:33:5a:49:3f:d6:34:
         99:9e:7c:3e:f5:f8:4d:32:fb:4f:00:c6:a7:27:5b:9d:b0:0c:
         01:bc:89:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiT2uNHent+thIo8+SuzjkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2N2VkNGY3ZDM1NTc1MjgxYzE3NmNhZTNkZGNiZDQwY2M1
YzFkZDYwHhcNMjUwODEwMTIwMDUyWhcNMjUwODExMTIwMDUyWjAzMTEwLwYDVQQD
Eyg2ODAwMTc1M2UyNTMxODExNWIxNmE2NDVjNTQ2NDRhZGQ0NzMzZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttsVbYGnlPy/qle2GZTOOMmRn3Bu
lLargv1GF4sFuVZPNiHVkX4ETehfAGYQT7f54oGEcL2u8ikM2vRxTSF3OOv1r4qG
AcH6zRCD04aLKfb4rFVB2XPLkzmFziOVYwDL4y/VNPGimJNphi9aHQBLmZ5jAN0z
4yT92a/7sUQ/O7OxkNWut307ZG8sS2HEkfVaFucPrQiUJbF8nFzOFODWPxAyhIih
baRZfAF0p941WGGXGihtsg7R20/OOrI52Ufyn69xAFhxihok1kwKTxszhBktfGFG
K96Ap8bzBMLKfxDcDKBlrTMlYjDCaE7tRNAyovfmavSu880u5enJSshKcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGgAF1PiUxgRWxamRcVGRK3Ucz1AMB8GA1UdIwQY
MBaAFPZ+1PfTVXUoHBdsrj3cvUDMXB3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iNjJlNzctMzU3YS00YWFkLWJiMjct
ZjQ0ODVhZWQ3NDI5LzEvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9iNjJlNzctMzU3YS00YWFkLWJiMjctZjQ0ODVhZWQ3NDI5
LzEvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfjSwIuf
8SvRMEaxim8osvovloMy5g9RFUwjM5A75jyPilWMrmgSOh6xDzOytjv/Vl5qGFYJ
ymEc7xzFgtlSE9XzYwfz9WU0iPr6v5nGhsF7UW5Y+p9V20D3xeIhtJa0l/pbft/H
2dtchkvaTg8bR9jvG8ueQYf/ACb+ZwaIwPskakUkFQBURRkj+8h+tx9Oy3+mchyI
jGwX0pRN+c3KHRsYF8MGL80u3x9WSPBy7x4W2KHH/LmZl2cSQOe+0utEYWBv0j32
Mz98tGHAluDqbAM0aGkbtaYUTMmkoTAvjnybGL2FM1pJP9Y0mZ58PvX4TTL7TwDG
pydbnbAMAbyJvw==
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:06:10 2025 by rpki-client