Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
File:                     miro1LAWhwIbd7h08RDBttv-xlE.mft (raw, json)
Hash identifier:          hvwSezB+v6njZKf8LTGWe3RUqhzYsBgg3Te+NJYdTtg=
Subject key identifier:   C3:4A:FA:02:61:FE:9C:2A:F4:67:82:5D:B6:CC:C4:79:5E:AD:B6:F5
Authority key identifier: 9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51
Certificate issuer:       /CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
Certificate serial:       0199FD347C25D0B2D0A15401066E8BF6A7DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
Manifest number:          0DF1
Signing time:             Sun 19 Oct 2025 16:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:39 +0000
Files and hashes:         1: FEmq_LSCw3qARbc_REHnTueFXv0.roa (hash: w7kLO8zmlwjsil7oxAuK8gh9w7qBy+9fIQiuZhkIXQw=)
                          2: miro1LAWhwIbd7h08RDBttv-xlE.crl (hash: bWvXE5YnHpdfwSG0FcDtx44DsnQUH1lqPUuF/uZGnnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:7c:25:d0:b2:d0:a1:54:01:06:6e:8b:f6:a7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
        Validity
            Not Before: Oct 19 16:01:39 2025 GMT
            Not After : Oct 20 16:01:39 2025 GMT
        Subject: CN=c34afa0261fe9c2af467825db6ccc4795eadb6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3a:57:b2:36:a3:87:06:02:44:20:fc:36:a0:
                    7e:24:20:e5:fb:82:63:76:84:1b:bc:3c:68:ec:fb:
                    15:4d:f1:bf:18:54:0d:2b:e7:4a:4d:a1:f5:96:a9:
                    db:77:7e:cc:f7:ca:d5:26:c6:ab:e0:f4:8c:34:9a:
                    a5:bf:7c:bd:e4:90:e1:fc:87:0f:f5:85:96:75:b4:
                    5a:7c:f7:c2:a1:c1:6c:a8:1f:3b:f2:e6:0b:55:d3:
                    3b:2b:cd:38:a4:9a:1b:90:c5:f7:a6:42:59:07:82:
                    ee:1f:77:29:6e:46:96:74:f2:b8:4f:6f:f6:34:38:
                    b1:ea:00:3f:e0:3d:aa:8b:1e:e2:bc:32:46:ca:50:
                    db:d9:5a:53:0d:ef:e2:19:99:e9:b4:7f:2e:20:c1:
                    99:c4:32:20:80:9d:f5:57:64:65:bd:b6:93:f7:5f:
                    f3:53:05:3e:cf:eb:a0:59:83:12:66:34:0d:80:6c:
                    11:61:1d:4d:6f:1e:10:cf:16:f4:58:9d:4e:a6:d3:
                    15:2e:02:33:16:90:6b:a1:14:a4:03:53:f9:d6:b0:
                    ae:df:b7:ef:bf:3b:16:1b:bb:07:f2:6f:a9:2c:e9:
                    1b:af:bb:0e:19:bc:07:9c:6e:eb:f3:4b:1f:4f:92:
                    61:3f:4b:49:a3:52:09:7d:37:af:fc:6d:c6:e5:5f:
                    cd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4A:FA:02:61:FE:9C:2A:F4:67:82:5D:B6:CC:C4:79:5E:AD:B6:F5
            X509v3 Authority Key Identifier:
                keyid:9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d8:72:f1:a6:11:1d:51:3e:22:a9:90:ca:58:b8:a8:12:13:
         24:64:8b:80:4b:88:72:20:92:53:33:d2:c1:77:fa:f1:3e:03:
         21:b2:8f:a8:fa:5d:e7:b4:57:33:24:2a:5d:90:9d:10:34:39:
         a3:db:1d:f8:95:88:f2:5d:30:fd:e7:08:c0:f4:6b:72:c4:53:
         9e:af:d9:ca:2a:2d:9a:24:f3:c1:d2:6e:e1:d8:c7:87:38:70:
         c3:57:36:95:24:f2:27:b4:c1:a7:9a:28:36:9c:90:49:ea:c9:
         94:b2:c9:9f:3c:02:ba:92:87:c2:f7:23:4b:4d:03:9b:30:50:
         f1:df:a7:08:5f:02:a3:f4:fe:69:21:43:43:5f:d1:17:80:74:
         10:3b:03:a4:3c:bd:53:ef:9f:43:37:f5:15:a7:fb:a6:8e:89:
         8a:a0:ef:b9:5e:5f:6a:30:05:82:b2:af:95:0e:72:cd:11:85:
         a7:cd:12:ac:39:fa:db:93:1f:ef:9b:4f:60:ff:14:56:1f:21:
         3c:7c:87:45:d8:bc:01:9b:20:49:e3:4d:d0:c9:95:b8:10:a6:
         4f:2f:ea:3d:25:93:f1:26:59:f8:e8:cc:6f:23:2c:5d:27:94:
         2d:46:f0:9e:9a:a0:43:25:c9:62:81:41:ba:f0:65:67:17:78:
         db:2c:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:23 2025 by rpki-client