Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
File:                     5_7U53ggnDyuk9S3bTUHBEYsOqs.mft (raw, json)
Hash identifier:          UBMTiZm4xU1U3b55kzipBNv7rUBWA0YkSvCTQpSWvis=
Subject key identifier:   3C:3F:9F:62:D3:22:E8:1B:A7:F2:14:A7:35:EF:CA:98:23:1A:E8:4D
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Certificate issuer:       /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial:       019A0147DF7E0CC1EE50142077DEC82D8FFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
Manifest number:          147D
Signing time:             Mon 20 Oct 2025 11:01:18 +0000
Manifest this update:     Mon 20 Oct 2025 11:01:18 +0000
Manifest next update:     Tue 21 Oct 2025 11:01:18 +0000
Files and hashes:         1: 3dWrvfdk2lOprYs35ma5yv6Q6rc.roa (hash: QEfTlDVAF7d4T61rI01qjNc/6EEThQ75e05z/96HAxs=)
                          2: 5_7U53ggnDyuk9S3bTUHBEYsOqs.crl (hash: TqOA6rVI/zvATYj/xqrwfABMXaKIvdB/WQc1FyTRB+4=)
                          3: HgeaiXNp8oaIkVjkrRG17ULDd1I.roa (hash: wPu6bKujUWw8Q6Ywc1kUepdeVq7pWlsdycgmuKRoAys=)
                          4: syDl6KVmgOwsscvxTmE3dADj5SU.roa (hash: cG4uVVemUe2/DT7IYDlCJ/ncex0OUaiZ7Ec8SSBIfmY=)
                          5: vpcXfvOVUYvgdsD39Q3TEMF747w.roa (hash: F5uTTVHy8rE8NLX3W81LLNFl51OsEFvrkrC45V6z1JI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:47:df:7e:0c:c1:ee:50:14:20:77:de:c8:2d:8f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
        Validity
            Not Before: Oct 20 11:01:18 2025 GMT
            Not After : Oct 21 11:01:18 2025 GMT
        Subject: CN=3c3f9f62d322e81ba7f214a735efca98231ae84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:f0:f3:43:30:d3:99:ca:39:57:22:42:35:ca:
                    74:18:ad:fc:59:67:1a:f7:c1:96:0c:46:04:9f:c8:
                    64:2c:ba:0f:ae:62:10:28:e1:08:e2:e1:6a:5a:a8:
                    7f:fd:c1:83:b1:7d:b6:32:07:07:bc:06:02:56:18:
                    1c:fe:88:9e:7a:dc:b0:0b:c0:ad:8d:9c:6f:92:2a:
                    17:f9:1d:3b:41:b2:7a:79:40:77:6a:64:36:d1:56:
                    36:f3:93:54:c6:c4:7f:b9:57:d5:5a:1d:1d:f5:f3:
                    d6:00:d8:01:5c:d8:8d:ec:c7:87:77:b0:5f:90:7b:
                    70:1a:86:79:08:41:89:e2:6c:58:df:fc:9d:61:c8:
                    e9:78:dd:b1:17:82:8c:73:69:72:90:84:a7:4f:49:
                    01:8c:93:6c:07:cb:d5:47:77:69:12:cc:f7:f4:5b:
                    03:cf:ee:9a:69:d2:0f:70:e5:df:2a:64:bd:ee:2b:
                    b9:5a:d6:a1:35:14:5a:06:87:1d:58:83:f8:2a:92:
                    31:f2:86:7d:5b:ef:9b:41:be:40:83:42:52:96:64:
                    b0:1d:73:a7:95:ab:48:25:8b:ce:6b:07:1c:84:61:
                    a3:64:0c:b2:28:da:f6:fe:2a:cc:8c:28:ad:db:47:
                    a8:e2:05:41:2b:e2:1f:8f:6c:32:28:61:3f:46:6f:
                    43:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3F:9F:62:D3:22:E8:1B:A7:F2:14:A7:35:EF:CA:98:23:1A:E8:4D
            X509v3 Authority Key Identifier:
                keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:4f:b4:ef:17:77:d0:e8:7d:60:f4:80:4b:80:02:fe:89:b4:
         08:15:44:94:9a:13:42:88:6b:aa:e7:cb:ed:57:fe:2c:73:93:
         f4:6b:d3:70:f7:4a:73:55:55:b9:39:b9:ae:7a:0c:7c:e2:36:
         6c:8e:7b:7d:45:b9:64:98:06:9d:cc:16:4a:6a:2f:58:67:f9:
         ec:86:76:a2:b7:95:02:f8:2f:a4:b4:bb:1e:de:d3:d3:cf:5e:
         9f:0b:b2:b3:a8:eb:58:a5:d6:92:17:b8:07:ad:1d:9d:15:03:
         4e:99:46:fa:56:cd:55:6f:ff:70:38:71:18:60:7e:f9:a0:f8:
         9f:3e:61:37:4b:61:67:ae:68:93:a4:8a:68:6f:f6:e8:79:73:
         38:15:83:30:16:f5:6e:02:6d:47:b8:d7:11:1b:46:c3:5c:57:
         16:5b:19:63:b6:a9:de:9b:72:5f:4f:4f:f3:ef:d6:92:16:72:
         d1:87:8f:bf:35:28:92:26:96:b7:32:b8:6c:af:c0:43:9a:61:
         29:7f:ba:a4:88:c4:f1:aa:23:78:0d:c4:e2:6e:73:28:08:ea:
         b9:88:eb:8d:a7:5b:ec:a4:9a:fa:d8:cd:9b:e5:63:2f:9a:f4:
         02:f3:ca:4c:1f:2e:12:c6:40:f5:38:e8:06:6e:fd:8a:0c:42:
         d4:f6:1c:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBR99+DMHuUBQgd97ILY/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZmVkNGU3NzgyMDljM2NhZTkzZDRiNzZkMzUwNzA0NDYy
YzNhYWIwHhcNMjUxMDIwMTEwMTE4WhcNMjUxMDIxMTEwMTE4WjAzMTEwLwYDVQQD
EygzYzNmOWY2MmQzMjJlODFiYTdmMjE0YTczNWVmY2E5ODIzMWFlODRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+PDzQzDTmco5VyJCNcp0GK38WWca
98GWDEYEn8hkLLoPrmIQKOEI4uFqWqh//cGDsX22MgcHvAYCVhgc/oieetywC8Ct
jZxvkioX+R07QbJ6eUB3amQ20VY285NUxsR/uVfVWh0d9fPWANgBXNiN7MeHd7Bf
kHtwGoZ5CEGJ4mxY3/ydYcjpeN2xF4KMc2lykISnT0kBjJNsB8vVR3dpEsz39FsD
z+6aadIPcOXfKmS97iu5WtahNRRaBocdWIP4KpIx8oZ9W++bQb5Ag0JSlmSwHXOn
latIJYvOawcchGGjZAyyKNr2/irMjCit20eo4gVBK+Ifj2wyKGE/Rm9DJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDw/n2LTIugbp/IUpzXvypgjGuhNMB8GA1UdIwQY
MBaAFOf+1Od4IJw8rpPUt201BwRGLDqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV83VTUzZ2duRHl1azlTM2JUVUhCRVlzT3FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8yMmEzYzctNmZlNS00OWUxLTkzNWQt
OGJiODAxNTJhYjM0LzEvNV83VTUzZ2duRHl1azlTM2JUVUhCRVlzT3FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8yMmEzYzctNmZlNS00OWUxLTkzNWQtOGJiODAxNTJhYjM0
LzEvNV83VTUzZ2duRHl1azlTM2JUVUhCRVlzT3FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0E+07xd3
0Oh9YPSAS4AC/om0CBVElJoTQohrqufL7Vf+LHOT9GvTcPdKc1VVuTm5rnoMfOI2
bI57fUW5ZJgGncwWSmovWGf57IZ2oreVAvgvpLS7Ht7T089enwuys6jrWKXWkhe4
B60dnRUDTplG+lbNVW//cDhxGGB++aD4nz5hN0thZ65ok6SKaG/26HlzOBWDMBb1
bgJtR7jXERtGw1xXFlsZY7ap3ptyX09P8+/WkhZy0YePvzUokiaWtzK4bK/AQ5ph
KX+6pIjE8aojeA3E4m5zKAjquYjrjadb7KSa+tjNm+VjL5r0AvPKTB8uEsZA9Tjo
Bm79igxC1PYcjg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:54:45 2025 by rpki-client