Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
File:                     x5g7OpdY_L54cz2RVa7SZsiCojw.mft (raw, json)
Hash identifier:          4h3bwdgty/9No/DQxXLqyg6W+obl6rBPLxeBO2NACes=
Subject key identifier:   E5:A9:FC:69:8C:CD:55:C4:8A:C5:B3:F2:63:BC:EA:B9:B7:D4:2B:05
Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C
Certificate issuer:       /CN=c7983b3a9758fcbe78733d9155aed266c882a23c
Certificate serial:       0199FC213A53B6FF7BDA5BB928D1038FDB1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
Manifest number:          13F4
Signing time:             Sun 19 Oct 2025 11:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:00 +0000
Files and hashes:         1: 1-FIWmYuNIJI-Cwk15dhF5oxGQws.roa (hash: 5WgQd9Yh0UTrO+r9EgLHuyHwMYhN32NKq3EDRy9j2p0=)
                          2: 7yURIEiYXPhLVZDi97wbUcsfcDY.roa (hash: Ol8VywPbGCR2MgIy9CM4htLL8MW0LNUUW5y21OBGiZM=)
                          3: I2QulkDn2KJ47c0S4-OMmVLx31g.roa (hash: 6xzBl4bZ4a5rXXVvnxUC4raf2cq3cMarrtfKS85kss0=)
                          4: RipMkwup9NsgAPIlQi1_XcX5wqM.roa (hash: PKXzaXWv76nde6R//GV8jsOM053aaHLrBAjby7FXNqk=)
                          5: b4vNMGbRo2o67bz3u22uz2ItyKI.roa (hash: F56Nx008CaMRp5Gdw8I8PExmWIZfZ1jjPIYQMLnTJ8s=)
                          6: hyGdIxYjhpqU0-02Qe9kMQYj3as.roa (hash: 9uhvciX7Lxjh2PeJ2H7HVv5jBuVg9P3AFweq88tYGFU=)
                          7: x5g7OpdY_L54cz2RVa7SZsiCojw.crl (hash: mGHDqPX7IWeS9BeyQ7m7oDIyEORU5wcx+JYayz6dg7k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:3a:53:b6:ff:7b:da:5b:b9:28:d1:03:8f:db:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c
        Validity
            Not Before: Oct 19 11:01:00 2025 GMT
            Not After : Oct 20 11:01:00 2025 GMT
        Subject: CN=e5a9fc698ccd55c48ac5b3f263bceab9b7d42b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e6:18:01:f1:26:99:ee:23:6f:08:88:1b:a1:
                    ce:f4:5e:8c:12:e2:ee:08:a3:23:71:c4:1c:7f:13:
                    58:1f:9f:07:04:72:84:a6:c1:92:be:6a:80:f8:fd:
                    16:8e:44:72:24:a2:48:6b:47:75:a2:fb:52:6b:4a:
                    4b:62:a0:a8:17:3e:c5:f8:36:1d:e7:65:6e:92:1e:
                    69:17:c1:8e:e9:de:bc:42:26:17:9a:cf:ed:92:2d:
                    36:83:cd:d5:48:0c:06:73:e9:36:7a:03:8f:62:9e:
                    2d:74:dc:f7:22:c0:c0:80:49:f5:68:88:67:8e:c6:
                    4f:96:21:62:30:33:47:ab:0b:53:a9:de:4a:10:50:
                    f7:d8:02:86:40:3a:d0:c9:4c:af:70:41:17:25:42:
                    d6:8e:88:c9:3c:88:82:0f:3d:af:5f:34:30:a7:24:
                    cb:28:53:f3:6e:ea:fe:90:00:d1:12:91:7c:12:60:
                    9d:ce:e7:f1:82:a1:94:57:13:df:ba:a5:73:b2:e2:
                    7a:a4:57:92:9d:76:1f:ab:2a:c2:dc:54:e2:65:66:
                    99:23:11:72:f1:b6:97:ec:18:d6:5c:f2:fe:26:b4:
                    aa:ce:db:e4:7f:03:89:c6:b1:86:09:03:6f:b4:3b:
                    da:f1:8d:b0:36:0d:51:53:e0:66:bb:8f:fb:6e:31:
                    d4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A9:FC:69:8C:CD:55:C4:8A:C5:B3:F2:63:BC:EA:B9:B7:D4:2B:05
            X509v3 Authority Key Identifier:
                keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:2a:6c:44:a4:58:1f:01:7d:23:38:49:0c:7b:1b:a8:8b:c9:
         09:39:f2:41:36:15:84:47:ee:28:87:4e:6f:95:fb:7d:7d:e6:
         b4:fc:0a:ff:21:87:df:85:f7:ae:a1:e5:b6:41:26:2a:9b:1e:
         82:b8:56:22:2a:66:92:93:27:cc:1e:3b:67:d6:7a:33:a6:3f:
         b6:d1:51:29:4f:c1:02:35:c8:fa:79:56:0d:4f:89:89:c5:7d:
         9c:8c:a6:58:91:ad:80:6b:81:f6:3c:a0:4b:e6:73:ed:e5:7e:
         8a:69:c2:10:77:0e:84:a5:aa:6b:95:d0:b3:82:47:af:0e:96:
         43:3b:11:f1:c1:9d:ce:1a:74:22:18:1d:0a:8e:78:85:0c:6a:
         cd:8b:70:a0:ce:57:3e:33:2d:0b:36:47:77:32:8d:dd:9e:e8:
         11:ed:b8:42:c1:67:7e:5e:88:21:07:b7:6c:6e:3e:f9:21:92:
         1e:98:47:4c:12:59:19:ed:f1:81:c5:54:6e:f7:60:1b:c9:4f:
         c3:7b:55:75:ff:e6:e0:3c:89:eb:c1:a3:13:22:02:87:c6:6b:
         43:f8:ab:86:ec:9a:4d:b5:8d:78:58:bc:5a:01:fa:78:11:f7:
         ba:18:f9:3d:c0:ff:4e:a6:90:3d:fe:a4:1d:cc:41:9e:41:35:
         0b:73:33:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:36 2025 by rpki-client