Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
File:                     99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft (raw, json)
Hash identifier:          GJz251JPexBVZhDjkdcgyC/FInnhC5kdmGIzcPUbXaU=
Subject key identifier:   D5:66:34:5A:5E:90:86:21:83:81:D8:92:FB:19:99:A7:E6:1B:C8:65
Authority key identifier: F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
Certificate issuer:       /CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Certificate serial:       0197488C371AC7B94DBCAE0A13DB3ABFB8F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
Manifest number:          0CC4
Signing time:             Sat 07 Jun 2025 04:00:37 +0000
Manifest this update:     Sat 07 Jun 2025 04:00:37 +0000
Manifest next update:     Sun 08 Jun 2025 04:00:37 +0000
Files and hashes:         1: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl (hash: mEC/qlyfqGFC0cZv1OWkY3AuYqLqCvtTZfOWWS5+w7c=)
                          2: LSE36n14OlFyT2JPffWytn2VECM.roa (hash: aCXHANC+PKr6N/DP0npU9YHvABAfrys/iPm1LqbDFCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8c:37:1a:c7:b9:4d:bc:ae:0a:13:db:3a:bf:b8:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d535083fb140ddab453abf821f5db3a6f461a4
        Validity
            Not Before: Jun  7 04:00:37 2025 GMT
            Not After : Jun  8 04:00:37 2025 GMT
        Subject: CN=d566345a5e9086218381d892fb1999a7e61bc865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:82:3a:cc:bb:33:51:d4:55:01:19:2f:42:bd:
                    13:10:1b:5e:ba:89:cb:ac:f2:60:8a:f9:32:df:8c:
                    7a:05:dd:41:28:ec:6c:78:e0:f8:55:e9:1d:e0:b1:
                    d2:0e:34:f3:61:ae:a5:09:74:28:c9:b3:05:b0:6b:
                    94:0a:9c:ec:93:e9:7a:e4:b2:b4:f1:d7:20:c8:c3:
                    14:6a:f1:a6:70:5d:09:2e:7c:cf:db:9a:32:87:bd:
                    41:27:84:6f:ae:77:48:0f:44:4a:b4:27:24:d8:e0:
                    93:d0:f5:ef:9c:e8:e6:37:2c:3f:20:12:3d:08:90:
                    10:b5:32:3e:9c:76:8a:a8:02:22:4b:db:10:17:7f:
                    09:d9:ae:a1:df:41:90:b1:f9:70:0a:c2:6d:92:d7:
                    bd:4f:f6:af:6a:6d:7a:98:bd:56:52:50:70:3b:ca:
                    eb:5c:8f:be:0c:70:60:cf:2e:40:42:cd:44:6b:f0:
                    e6:25:12:85:67:69:58:86:3b:eb:b9:03:ef:20:18:
                    f6:0e:00:49:3b:7c:96:f7:52:ce:ee:1e:d1:df:a8:
                    76:4a:e2:4f:26:95:08:08:f8:81:03:91:5e:f5:52:
                    a4:35:0a:7b:45:45:32:5d:c5:8a:89:32:60:33:00:
                    58:8a:7a:66:9d:20:f5:49:e2:10:0d:b6:92:d1:d7:
                    91:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:66:34:5A:5E:90:86:21:83:81:D8:92:FB:19:99:A7:E6:1B:C8:65
            X509v3 Authority Key Identifier:
                keyid:F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ec:12:bc:6e:bc:f4:59:09:be:7c:c6:53:f2:5b:75:bf:ec:
         b5:23:e2:bc:b1:4b:25:0c:24:d5:ea:72:27:7e:05:73:21:76:
         2c:9e:af:73:6b:4d:4e:5a:86:16:c0:19:ba:2c:52:b1:ac:c1:
         f0:36:af:12:70:5c:1c:69:d9:17:92:e0:48:c3:7f:77:f4:e0:
         d2:d8:b2:4f:b2:3a:cb:ae:68:67:82:e5:e1:0a:b8:6c:ee:c8:
         81:31:c2:33:06:04:aa:ec:af:dc:68:40:9e:77:2c:51:a8:7f:
         cf:27:c5:75:18:16:8c:ac:c9:8d:2b:f9:f6:83:93:97:cf:12:
         7c:1f:fb:f5:2f:10:74:d7:82:a9:a2:af:bd:5e:67:c1:3f:c0:
         d7:e0:28:6e:ce:ea:d0:c4:47:e6:f0:5b:0f:3d:d7:50:2f:96:
         61:fe:a9:3b:83:4f:8f:05:ba:1f:61:5f:74:f2:32:9d:5c:79:
         06:9f:cd:47:01:2a:05:f9:c7:57:3c:cc:6c:6b:e0:e1:41:56:
         a5:11:64:b0:5f:de:c3:4a:ad:c6:99:fb:84:bf:da:54:40:db:
         ea:aa:7d:e0:96:e5:4c:87:a8:8e:1d:08:94:da:dd:8c:ff:92:
         48:bb:e4:da:80:7d:37:78:9d:80:03:a2:a2:99:3f:54:a8:c8:
         2d:05:e2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:35:45 2025 by rpki-client