Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
File:                     miM7vd_kOGRvWG8IXl3w15vfufw.mft (raw, json)
Hash identifier:          D8whIY4W/Ej/N0Efg+cKHz1NZaNhPoCpIuzF+sLA4No=
Subject key identifier:   B5:38:A6:24:94:3E:1B:A5:5A:64:08:20:E4:EA:C6:24:0F:3D:AD:BD
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Certificate issuer:       /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial:       0197B88FFAA5A7CF2C80349024E45B71F063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
Manifest number:          04AC
Signing time:             Sat 28 Jun 2025 22:02:12 +0000
Manifest this update:     Sat 28 Jun 2025 22:02:12 +0000
Manifest next update:     Sun 29 Jun 2025 22:02:12 +0000
Files and hashes:         1: 091iixnQKcvUxbZE0chkzY9OKaI.roa (hash: JSnoQNQ5Cj53Jy2TNMmAxUXyySm/GL1z5FN+d2LDjbk=)
                          2: 65SCsGDULNXmsnaaY_HwCpiRDJs.roa (hash: BdpbgQGpWh/WB7tfPqtYzLSc4bRtCkrcb4wfalu+zjk=)
                          3: 8MT_7oWwxxP1C-YYk_LkCwE9hG0.roa (hash: CVVH3DKSw6OPD6uGHDaKNZyh/Yf/ppoZnuIgn8Lk+VM=)
                          4: hZOTpFRy13nYnktswcCNkeUCTr8.roa (hash: 4dFC4O4Uj8mTI6RVQjx/owGxcN/2ee3qO80AUI3+pDc=)
                          5: miM7vd_kOGRvWG8IXl3w15vfufw.crl (hash: HDKjA3EYh9NYriuqnYyVguTLoUVXhuZJBesHTGgGszE=)
                          6: yATYs5RQnNSomy8BdI2rSObywPg.roa (hash: b8O6fsQ738Y0NuUeiBS8msZwSYfgqn0qenaET6r1H/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:fa:a5:a7:cf:2c:80:34:90:24:e4:5b:71:f0:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
        Validity
            Not Before: Jun 28 22:02:12 2025 GMT
            Not After : Jun 29 22:02:12 2025 GMT
        Subject: CN=b538a624943e1ba55a640820e4eac6240f3dadbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:ca:e0:2a:c6:c2:81:8d:78:b0:77:39:49:
                    b9:57:9e:a7:cc:ce:50:95:63:37:e4:7a:1e:47:1c:
                    1f:14:0c:4e:bb:95:bc:f5:f4:71:d4:37:8f:17:35:
                    25:a3:11:22:ba:66:d3:a0:72:59:c5:15:c7:f4:fc:
                    46:68:10:c4:2f:1f:07:2e:da:a0:a5:eb:c2:3e:71:
                    e1:4b:cc:af:2f:b9:f2:83:c0:0e:4f:5f:ae:b7:d0:
                    94:a8:98:82:c0:38:04:49:11:a0:e0:64:42:ae:bb:
                    66:dd:e9:e0:9f:2f:9f:60:15:e0:79:89:4c:1c:b6:
                    5a:86:f3:8e:84:f0:8b:67:ce:5d:df:39:39:eb:c2:
                    df:ec:3c:3a:06:86:7d:04:d4:fd:2c:25:18:a2:61:
                    26:94:3c:c3:6d:fb:ac:35:00:bb:77:32:4f:c9:dc:
                    bc:58:5a:5f:da:7b:4c:d1:95:61:26:d5:5a:1a:0b:
                    9e:0f:da:7c:32:12:c6:a1:3d:20:f8:b5:be:03:0b:
                    32:f4:18:9c:1f:f7:82:d7:ed:4a:55:69:c4:cf:d2:
                    b6:66:93:ec:7b:2a:97:77:56:31:98:05:1d:60:f4:
                    8c:de:34:13:87:ad:7f:01:eb:7e:6d:65:3a:cd:fb:
                    41:aa:87:2a:84:88:cc:e5:b2:a3:d5:7b:0a:9e:dd:
                    05:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:38:A6:24:94:3E:1B:A5:5A:64:08:20:E4:EA:C6:24:0F:3D:AD:BD
            X509v3 Authority Key Identifier:
                keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ba:1c:33:bc:fa:3a:d7:31:a1:07:1a:dd:d9:40:fe:38:5e:
         39:e8:e7:4e:70:e5:1c:51:9b:cd:60:af:28:29:88:5b:4c:e1:
         3a:a3:5f:15:a2:d3:b5:c9:b4:87:91:75:9d:40:c1:20:0a:78:
         43:9b:6c:ca:f4:0f:a3:cd:4f:4a:53:f7:d9:d4:da:95:c8:0d:
         20:7e:c7:f4:c4:60:18:aa:95:66:01:8a:46:b6:79:92:2e:8b:
         4c:50:57:94:26:d5:8b:eb:14:ac:d2:1b:39:e5:7c:4d:a4:73:
         a6:a4:d6:75:3b:d1:46:77:84:e7:64:4c:ec:72:29:be:38:98:
         f1:4a:44:91:25:21:16:08:d2:99:27:8f:bc:b9:19:4a:64:04:
         34:81:8c:cf:25:2d:90:09:4d:8b:69:6c:1c:28:0e:94:ce:96:
         c3:77:24:68:07:cb:12:db:60:c2:a1:27:7b:45:6b:cc:d4:2b:
         ee:26:b6:9d:55:91:2c:8a:07:1d:ec:a3:62:e6:13:96:dc:81:
         6b:a1:65:f4:b3:a6:03:dc:68:50:a3:ea:58:a3:c8:1e:f4:75:
         6b:2a:62:8e:69:da:56:eb:89:86:9b:7f:c7:8f:75:5a:a4:3b:
         fc:e7:b1:e5:af:37:be:50:5e:28:62:8d:f4:bb:d7:99:6b:bd:
         d2:64:0a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:33 2025 by rpki-client