Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
File:                     U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft (raw, json)
Hash identifier:          Aqm8AtQAccRTnNYHL7UUpAhIZ2O3wsE6hQMZ5tqF1kI=
Subject key identifier:   29:4E:ED:1D:89:5E:13:B4:F2:25:8A:94:F5:7C:3B:20:3B:A7:B9:D7
Authority key identifier: 53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74
Certificate issuer:       /CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
Certificate serial:       0199FBEBB9CABD691A40E8DDA2549562E986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
Manifest number:          0D7D
Signing time:             Sun 19 Oct 2025 10:02:33 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:33 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:33 +0000
Files and hashes:         1: 4TbrBuZsL88VAAl1QCLmAWghqCg.roa (hash: iopY3SVCE/nuv4+imI+6O+SS27RRrP9dzDqH0wZ+omg=)
                          2: FKQuu6Kj3XuAbhD_hkdmiIg9ru0.roa (hash: BfDYVCCLX0UZgPY+reA/hpbk3+E5qzw6fvZYP021pLk=)
                          3: TBdRYI4Vp-3SsMereWjuJuGMK6c.roa (hash: bWYcU1CjUZXhUk+i248J8pYxf7A24hSe76RbYqPhQc4=)
                          4: U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl (hash: OA5CT7qOGSH/G1qzBAHECywUsy388/cX1hdSk7TVG5A=)
                          5: V_fCtcHRcIvlGMfQMllvvNseZ5s.roa (hash: pcOqzRDVwxnAc2XcbL2lzklSAVLcGx3z65HCfsZTOqA=)
                          6: XZBUdypJdRsW9C7-bbCqwM2XeyY.roa (hash: Sw9HTQQH5rOvV845qg6T2/HMx+a+lVBlr9o8rtw6bfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:b9:ca:bd:69:1a:40:e8:dd:a2:54:95:62:e9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d0359f9f8b20815ce4d988e109bf82306e4c74
        Validity
            Not Before: Oct 19 10:02:33 2025 GMT
            Not After : Oct 20 10:02:33 2025 GMT
        Subject: CN=294eed1d895e13b4f2258a94f57c3b203ba7b9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:b4:2e:f9:42:f3:64:4d:9e:7f:3f:a3:27:
                    e5:62:d9:ff:ff:2c:6e:9b:30:ee:b4:bf:79:77:51:
                    bb:fe:3c:ec:13:b6:fd:72:c9:b4:2c:6d:3e:15:32:
                    47:25:e6:62:51:3b:64:dc:c0:2b:cb:bb:7a:76:9c:
                    f7:43:d4:66:85:8a:dd:81:34:a8:f6:6b:df:54:4b:
                    74:da:81:6e:bd:59:63:90:f2:45:02:cf:eb:11:62:
                    aa:e4:58:56:06:86:c6:8b:26:cf:65:d6:0b:00:79:
                    87:43:ed:fa:69:05:5b:7b:78:e2:2c:59:da:f4:33:
                    35:ea:d2:42:bb:66:a0:57:f1:cf:57:b1:3b:03:ed:
                    10:fd:59:1b:db:31:8c:da:b9:65:93:bc:08:41:76:
                    35:af:99:2e:c8:37:a2:12:60:fb:ee:b3:4c:96:aa:
                    75:c7:39:33:7a:2b:8f:b9:47:b0:f2:78:48:38:39:
                    82:8c:fb:79:5a:5f:f8:56:9f:a2:3c:3b:be:52:b6:
                    88:17:61:dd:65:5a:65:cb:e2:f3:8f:7a:fe:ac:1d:
                    b7:94:59:13:61:96:c3:c5:d7:42:4b:8e:b5:c1:73:
                    d0:48:c3:dd:52:6e:8b:50:c2:db:4a:bd:5a:78:52:
                    20:2c:1f:29:7c:57:97:e9:e6:45:b6:ad:12:97:4c:
                    21:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4E:ED:1D:89:5E:13:B4:F2:25:8A:94:F5:7C:3B:20:3B:A7:B9:D7
            X509v3 Authority Key Identifier:
                keyid:53:D0:35:9F:9F:8B:20:81:5C:E4:D9:88:E1:09:BF:82:30:6E:4C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/493571-210e-4d1a-8819-a6c49ce90756/1/U9A1n5-LIIFc5NmI4Qm_gjBuTHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e3:9b:35:e3:17:88:9d:37:f8:2e:d8:d9:cb:ba:d5:fa:1c:
         3d:8c:cf:a5:e8:9e:01:03:f6:36:ca:f2:62:ec:07:c3:62:99:
         85:87:3b:51:10:04:22:45:2b:cf:f7:ea:c6:a9:aa:fb:b6:26:
         d8:1d:55:72:6d:ca:57:7e:95:b9:cd:57:13:bc:bc:cd:15:6f:
         c2:3f:29:0c:ad:d2:95:f4:37:8e:70:14:f3:60:6c:5b:d3:fb:
         09:3e:23:2c:d6:da:d3:ae:95:89:14:14:e1:16:e1:67:59:02:
         36:65:49:37:d6:28:38:47:31:3b:98:8c:a6:3c:92:26:0f:91:
         a0:6d:d0:56:a8:fa:7b:45:5e:48:5e:d3:2d:92:d7:73:73:06:
         0e:1f:b4:06:40:9a:8f:f8:9c:8e:08:5a:6b:6d:7a:f0:e1:96:
         b4:8a:f8:05:ff:73:73:b8:97:fd:73:79:cf:6d:52:7f:80:48:
         be:c8:49:b7:41:77:8a:f6:6a:c7:40:2e:48:38:87:70:00:5c:
         8f:3a:f8:6b:cb:70:ff:af:ca:18:33:8e:b5:26:35:72:d3:18:
         c0:99:ae:fe:49:b5:43:8b:54:cc:1c:9f:d4:50:67:6f:a9:59:
         4a:f4:2c:9a:c3:ca:45:9f:35:5c:da:c2:8b:64:a1:ae:92:2a:
         cf:9e:85:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn767nKvWkaQOjdolSVYumGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZDAzNTlmOWY4YjIwODE1Y2U0ZDk4OGUxMDliZjgyMzA2
ZTRjNzQwHhcNMjUxMDE5MTAwMjMzWhcNMjUxMDIwMTAwMjMzWjAzMTEwLwYDVQQD
EygyOTRlZWQxZDg5NWUxM2I0ZjIyNThhOTRmNTdjM2IyMDNiYTdiOWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPy0LvlC82RNnn8/oyflYtn//yxu
mzDutL95d1G7/jzsE7b9csm0LG0+FTJHJeZiUTtk3MAry7t6dpz3Q9RmhYrdgTSo
9mvfVEt02oFuvVljkPJFAs/rEWKq5FhWBobGiybPZdYLAHmHQ+36aQVbe3jiLFna
9DM16tJCu2agV/HPV7E7A+0Q/Vkb2zGM2rllk7wIQXY1r5kuyDeiEmD77rNMlqp1
xzkzeiuPuUew8nhIODmCjPt5Wl/4Vp+iPDu+UraIF2HdZVply+Lzj3r+rB23lFkT
YZbDxddCS461wXPQSMPdUm6LUMLbSr1aeFIgLB8pfFeX6eZFtq0Sl0whCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClO7R2JXhO08iWKlPV8OyA7p7nXMB8GA1UdIwQY
MBaAFFPQNZ+fiyCBXOTZiOEJv4Iwbkx0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTlBMW41LUxJSUZjNU5tSTRRbV9nakJ1VEhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80OTM1NzEtMjEwZS00ZDFhLTg4MTkt
YTZjNDljZTkwNzU2LzEvVTlBMW41LUxJSUZjNU5tSTRRbV9nakJ1VEhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80OTM1NzEtMjEwZS00ZDFhLTg4MTktYTZjNDljZTkwNzU2
LzEvVTlBMW41LUxJSUZjNU5tSTRRbV9nakJ1VEhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+ObNeMX
iJ03+C7Y2cu61focPYzPpeieAQP2NsryYuwHw2KZhYc7URAEIkUrz/fqxqmq+7Ym
2B1Vcm3KV36Vuc1XE7y8zRVvwj8pDK3SlfQ3jnAU82BsW9P7CT4jLNba066ViRQU
4RbhZ1kCNmVJN9YoOEcxO5iMpjySJg+RoG3QVqj6e0VeSF7TLZLXc3MGDh+0BkCa
j/icjghaa2168OGWtIr4Bf9zc7iX/XN5z21Sf4BIvshJt0F3ivZqx0AuSDiHcABc
jzr4a8tw/6/KGDOOtSY1ctMYwJmu/km1Q4tUzByf1FBnb6lZSvQsmsPKRZ81XNrC
i2ShrpIqz56FBw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:12 2025 by rpki-client