Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
File:                     99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft (raw, json)
Hash identifier:          p4Usi1jv3axCM1Tv5WBsNjdP9cQfojMe401BgFRLRZs=
Subject key identifier:   8F:45:EA:8E:07:4E:87:96:40:14:16:DD:FC:E9:C3:25:5A:92:AB:4F
Authority key identifier: F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4
Certificate issuer:       /CN=f7d535083fb140ddab453abf821f5db3a6f461a4
Certificate serial:       01A149185C3F366B18002C8AFD3600383AB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
Manifest number:          11F2
Signing time:             Sat 17 Oct 2026 09:01:35 +0000
Manifest this update:     Sat 17 Oct 2026 09:01:35 +0000
Manifest next update:     Sun 18 Oct 2026 09:01:35 +0000
Files and hashes:         1: 99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl (hash: pf+vNb6hWyTUNiqw22aK6Ndjws/Hy+EYEJvDg+EY1Ys=)
                          2: vDD2m5C7Pq8JC2jJeptUPHTPiW4.roa (hash: IslrtVbkyC6BHr/5GuZpnn/vnO+GSJxpxZntKhzxnaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:49:18:5c:3f:36:6b:18:00:2c:8a:fd:36:00:38:3a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7d535083fb140ddab453abf821f5db3a6f461a4
        Validity
            Not Before: Oct 17 09:01:35 2026 GMT
            Not After : Oct 18 09:01:35 2026 GMT
        Subject: CN=8f45ea8e074e8796401416ddfce9c3255a92ab4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:ca:49:27:b8:aa:78:a5:a0:00:52:df:01:
                    9b:57:1e:99:0d:25:d2:6c:2e:98:7b:8e:37:af:d4:
                    ab:8d:1a:3e:4a:bb:45:8b:52:ac:6e:70:7f:37:43:
                    03:98:3d:e8:88:cb:99:82:b7:b4:f5:e6:b0:f8:b8:
                    aa:62:0d:ab:64:99:56:38:a3:87:18:20:39:28:76:
                    86:e5:2c:97:32:8b:a1:7d:d8:df:12:62:e0:7b:b5:
                    05:68:ed:85:ab:ac:10:32:ce:54:5c:44:4f:7c:26:
                    ac:7c:5d:64:9a:30:18:78:b8:31:fb:42:84:7d:ad:
                    26:8e:93:c3:f2:0b:eb:b1:a2:f2:15:05:ab:61:ec:
                    a0:ba:ed:e0:db:81:59:37:6b:ad:d5:58:2d:90:e5:
                    0d:a5:c9:4e:2b:ac:a1:f7:cd:d0:20:eb:4a:d7:aa:
                    25:34:9b:df:ec:46:c7:ae:7e:f7:ab:4d:f5:f4:2c:
                    29:ab:20:e2:7c:6a:f3:2d:b4:d9:a2:1c:2c:9f:3e:
                    a8:11:cb:bb:44:12:fe:dd:1f:37:b6:d5:bb:f6:65:
                    4c:3f:2c:c4:3b:88:da:c1:f5:c3:47:fc:8b:87:09:
                    ec:ae:cf:4b:3e:09:26:42:ed:1b:78:b4:88:bf:b7:
                    87:8c:f1:bb:68:aa:28:50:5a:c8:b5:be:0e:0e:6e:
                    20:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:45:EA:8E:07:4E:87:96:40:14:16:DD:FC:E9:C3:25:5A:92:AB:4F
            X509v3 Authority Key Identifier:
                keyid:F7:D5:35:08:3F:B1:40:DD:AB:45:3A:BF:82:1F:5D:B3:A6:F4:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/99U1CD-xQN2rRTq_gh9ds6b0YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93ce62-6f3d-493c-bf6f-5cd885489f82/1/99U1CD-xQN2rRTq_gh9ds6b0YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f7:d8:73:33:c7:48:8b:e2:d4:38:9f:06:c4:a2:35:90:f4:
         0d:6d:b9:8e:cc:d7:d6:71:39:16:bb:1c:b9:0b:95:dc:05:66:
         e9:d3:35:3f:79:21:a7:7a:2f:49:d6:e6:69:4a:33:70:f7:e5:
         2e:36:f9:0c:86:c0:d1:99:65:4b:39:16:e0:70:b2:fc:2d:13:
         70:af:13:d6:a4:9f:33:4d:62:51:6e:45:ee:6e:68:1c:da:3f:
         d5:14:d2:da:32:2b:cc:bb:79:10:e4:d6:3e:35:e8:7a:20:e7:
         b3:ad:62:9f:53:55:e9:80:f0:70:50:1b:4b:d5:c0:e1:89:f6:
         32:22:22:13:65:6d:9d:4f:20:23:a8:ec:06:d8:31:89:91:30:
         43:c4:5c:0c:c4:9e:c7:3f:c5:d7:44:cb:d8:ed:d8:c7:b9:26:
         ef:39:1e:5d:7b:2a:31:bd:d9:16:ef:e4:a2:5e:ee:91:98:0d:
         f9:fd:12:4a:83:be:96:01:11:ef:c8:63:ee:ae:09:4c:fb:d1:
         78:6e:55:e6:26:e0:d5:24:53:ce:6e:55:d0:48:36:4b:e3:11:
         7b:3c:40:9b:12:b3:20:4a:be:66:db:f5:f0:8d:cb:69:09:f4:
         f3:41:08:d5:bb:24:99:de:99:75:c0:bb:66:31:da:7e:d3:0f:
         6d:cd:0c:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFJGFw/NmsYACyK/TYAODqwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZDUzNTA4M2ZiMTQwZGRhYjQ1M2FiZjgyMWY1ZGIzYTZm
NDYxYTQwHhcNMjYxMDE3MDkwMTM1WhcNMjYxMDE4MDkwMTM1WjAzMTEwLwYDVQQD
Eyg4ZjQ1ZWE4ZTA3NGU4Nzk2NDAxNDE2ZGRmY2U5YzMyNTVhOTJhYjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxfKSSe4qniloABS3wGbVx6ZDSXS
bC6Ye443r9SrjRo+SrtFi1KsbnB/N0MDmD3oiMuZgre09eaw+LiqYg2rZJlWOKOH
GCA5KHaG5SyXMouhfdjfEmLge7UFaO2Fq6wQMs5UXERPfCasfF1kmjAYeLgx+0KE
fa0mjpPD8gvrsaLyFQWrYeyguu3g24FZN2ut1VgtkOUNpclOK6yh983QIOtK16ol
NJvf7EbHrn73q0319CwpqyDifGrzLbTZohwsnz6oEcu7RBL+3R83ttW79mVMPyzE
O4jawfXDR/yLhwnsrs9LPgkmQu0beLSIv7eHjPG7aKooUFrItb4ODm4gbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9F6o4HToeWQBQW3fzpwyVakqtPMB8GA1UdIwQY
MBaAFPfVNQg/sUDdq0U6v4IfXbOm9GGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85M2NlNjItNmYzZC00OTNjLWJmNmYt
NWNkODg1NDg5ZjgyLzEvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85M2NlNjItNmYzZC00OTNjLWJmNmYtNWNkODg1NDg5Zjgy
LzEvOTlVMUNELXhRTjJyUlRxX2doOWRzNmIwWWFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/fYczPH
SIvi1DifBsSiNZD0DW25jszX1nE5FrscuQuV3AVm6dM1P3khp3ovSdbmaUozcPfl
Ljb5DIbA0ZllSzkW4HCy/C0TcK8T1qSfM01iUW5F7m5oHNo/1RTS2jIrzLt5EOTW
PjXoeiDns61in1NV6YDwcFAbS9XA4Yn2MiIiE2VtnU8gI6jsBtgxiZEwQ8RcDMSe
xz/F10TL2O3Yx7km7zkeXXsqMb3ZFu/kol7ukZgN+f0SSoO+lgER78hj7q4JTPvR
eG5V5ibg1SRTzm5V0Eg2S+MRezxAmxKzIEq+Ztv18I3LaQn080EI1bskmd6ZdcC7
ZjHaftMPbc0MPw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 15:22:20 2026 by rpki-client