Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft
File:                     UiOZwnibGlUE-BZxz_IgwE6vWfE.mft (raw, json)
Hash identifier:          ipgzQEuonrWYJ9cIQDsiemMzw7tmbpiU8C3YaquOJYk=
Subject key identifier:   BD:5E:7A:54:3F:72:77:04:48:31:44:FA:BB:4F:0C:1E:02:2A:C8:4B
Authority key identifier: 52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1
Certificate issuer:       /CN=522399c2789b1a5504f81671cff220c04eaf59f1
Certificate serial:       0199FC5881F539AC70CC89E14728D4A823F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft
Manifest number:          04F7
Signing time:             Sun 19 Oct 2025 12:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:22 +0000
Files and hashes:         1: 3wonzEuv12MMdqoQbAGhDT3YzPc.roa (hash: dajuIMLWo+SZXmFUF060/f20zcAO9itEEMxKmJRUhMM=)
                          2: Aw2WfNbQ4RABuXRvgXOnLE3RbsA.roa (hash: TFeeNKEqB5VRBcKtyJM73uNYiay/oDGFd7RJVR+kagE=)
                          3: Fu6U86lHSXot6auCvOJjkcO_3lU.roa (hash: 81J22UZIBjq2zoACe1x9LIbFai428I4/vjRJ8Aat6TI=)
                          4: SZHDj7ewaK3mtvIFL9GdVPPdeiA.roa (hash: R2OQhDOkjCw4D4/knxrU8/GjfDnxF4+KIOHcbLgJk/0=)
                          5: U_ILU5oPE2-q5-3kf6Hi6fdungg.roa (hash: DMhgoBAGxtdMHwCNE+yJXSK5/lKBz1bY2a8Z9IrOZZs=)
                          6: UiOZwnibGlUE-BZxz_IgwE6vWfE.crl (hash: LHGaK+DuYx9Rh6iCYy6NpFFMqNmbcIUsdQM5wRtUCEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:81:f5:39:ac:70:cc:89:e1:47:28:d4:a8:23:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522399c2789b1a5504f81671cff220c04eaf59f1
        Validity
            Not Before: Oct 19 12:01:22 2025 GMT
            Not After : Oct 20 12:01:22 2025 GMT
        Subject: CN=bd5e7a543f727704483144fabb4f0c1e022ac84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:95:c2:98:3d:6a:69:74:82:d4:79:cc:04:
                    1d:0f:5d:63:a7:2d:b0:ee:9b:54:46:8d:82:b3:e8:
                    62:a2:68:86:43:72:cd:14:81:df:2e:50:34:24:36:
                    91:a8:60:b9:41:45:be:55:bb:c5:be:7e:e4:48:60:
                    ff:39:13:37:7f:4d:15:2d:ff:b4:71:30:b6:ab:f4:
                    d5:ce:26:88:ff:ea:dd:20:44:3c:68:25:16:9d:e8:
                    c3:b0:c8:60:86:99:59:ab:aa:06:d1:37:cc:9f:ea:
                    bf:8c:95:81:1c:b3:bc:7b:a8:72:38:14:44:97:ce:
                    c1:e8:32:ea:de:4d:a5:21:99:f4:e7:c8:fd:bd:c9:
                    2b:42:72:18:35:61:bc:de:a9:4c:99:d7:00:01:95:
                    32:67:c8:5f:57:6d:d0:25:dc:c6:8a:5b:fe:8f:d3:
                    c1:47:f2:ca:b4:a3:c1:79:40:1c:ea:d8:f3:1d:43:
                    9c:9c:46:57:b1:8e:af:b7:b0:d2:d7:67:31:25:23:
                    2d:b3:c3:5d:d6:d7:e7:3f:d0:d6:27:e0:f7:4a:76:
                    50:3e:1f:b2:32:85:86:3e:ed:31:2e:0b:ac:f9:de:
                    ed:4d:dd:7f:54:1c:4a:ac:bc:70:d2:b6:e4:29:cf:
                    e5:3e:a8:2f:18:a0:44:32:6f:13:84:e1:cd:67:11:
                    a2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5E:7A:54:3F:72:77:04:48:31:44:FA:BB:4F:0C:1E:02:2A:C8:4B
            X509v3 Authority Key Identifier:
                keyid:52:23:99:C2:78:9B:1A:55:04:F8:16:71:CF:F2:20:C0:4E:AF:59:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiOZwnibGlUE-BZxz_IgwE6vWfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/22d011-ed42-4d14-a670-d5d51d37949d/1/UiOZwnibGlUE-BZxz_IgwE6vWfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:66:70:8c:de:c1:8e:5e:1c:ae:b5:6e:a7:ce:09:70:d9:d3:
         92:a5:95:f9:bd:5e:5d:b6:56:3c:aa:d0:eb:5d:60:fd:de:62:
         3c:88:1f:08:ea:5f:82:a5:35:40:0d:a5:a8:b8:74:09:cf:c9:
         75:01:44:de:c6:91:90:de:bf:d2:92:c4:42:dd:12:8c:8f:d2:
         24:cc:c9:76:46:27:97:08:5a:d9:c4:db:ea:16:38:53:b5:83:
         2a:e6:9b:1d:fd:14:a8:16:5a:96:6c:a8:62:12:34:c4:82:cd:
         f0:c6:a4:75:4f:32:5c:15:dc:99:37:ec:29:0d:08:8e:36:8c:
         6a:97:b6:05:00:7d:41:19:ad:17:16:3b:d2:64:9f:00:8d:24:
         09:cf:0d:92:13:88:0b:85:3a:58:0d:b9:87:8e:7e:08:f6:a8:
         0e:14:33:38:21:0d:83:5c:08:51:38:43:f5:8b:29:9a:1c:12:
         d0:23:39:c0:65:42:89:7a:00:fd:06:20:f8:1c:82:7b:a5:b2:
         bb:78:ea:bf:05:e8:58:0a:1a:ca:3e:cf:1d:af:83:d7:2a:6a:
         f7:76:30:b6:80:b5:65:e6:f9:43:40:0d:38:aa:c3:d7:d7:95:
         05:67:4e:27:c3:30:5b:6c:a9:16:b9:6d:68:16:90:84:31:11:
         56:74:0c:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WIH1OaxwzInhRyjUqCPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMjM5OWMyNzg5YjFhNTUwNGY4MTY3MWNmZjIyMGMwNGVh
ZjU5ZjEwHhcNMjUxMDE5MTIwMTIyWhcNMjUxMDIwMTIwMTIyWjAzMTEwLwYDVQQD
EyhiZDVlN2E1NDNmNzI3NzA0NDgzMTQ0ZmFiYjRmMGMxZTAyMmFjODRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYOVwpg9aml0gtR5zAQdD11jpy2w
7ptURo2Cs+hiomiGQ3LNFIHfLlA0JDaRqGC5QUW+VbvFvn7kSGD/ORM3f00VLf+0
cTC2q/TVziaI/+rdIEQ8aCUWnejDsMhghplZq6oG0TfMn+q/jJWBHLO8e6hyOBRE
l87B6DLq3k2lIZn058j9vckrQnIYNWG83qlMmdcAAZUyZ8hfV23QJdzGilv+j9PB
R/LKtKPBeUAc6tjzHUOcnEZXsY6vt7DS12cxJSMts8Nd1tfnP9DWJ+D3SnZQPh+y
MoWGPu0xLgus+d7tTd1/VBxKrLxw0rbkKc/lPqgvGKBEMm8ThOHNZxGiqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1eelQ/cncESDFE+rtPDB4CKshLMB8GA1UdIwQY
MBaAFFIjmcJ4mxpVBPgWcc/yIMBOr1nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWlPWnduaWJHbFVFLUJaeHpfSWd3RTZ2V2ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8yMmQwMTEtZWQ0Mi00ZDE0LWE2NzAt
ZDVkNTFkMzc5NDlkLzEvVWlPWnduaWJHbFVFLUJaeHpfSWd3RTZ2V2ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8yMmQwMTEtZWQ0Mi00ZDE0LWE2NzAtZDVkNTFkMzc5NDlk
LzEvVWlPWnduaWJHbFVFLUJaeHpfSWd3RTZ2V2ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKmZwjN7B
jl4crrVup84JcNnTkqWV+b1eXbZWPKrQ611g/d5iPIgfCOpfgqU1QA2lqLh0Cc/J
dQFE3saRkN6/0pLEQt0SjI/SJMzJdkYnlwha2cTb6hY4U7WDKuabHf0UqBZalmyo
YhI0xILN8MakdU8yXBXcmTfsKQ0IjjaMape2BQB9QRmtFxY70mSfAI0kCc8NkhOI
C4U6WA25h45+CPaoDhQzOCENg1wIUThD9YspmhwS0CM5wGVCiXoA/QYg+ByCe6Wy
u3jqvwXoWAoayj7PHa+D1ypq93YwtoC1Zeb5Q0ANOKrD19eVBWdOJ8MwW2ypFrlt
aBaQhDERVnQMww==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:56 2025 by rpki-client