Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
File:                     miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json)
Hash identifier:          a4US7S24AOZFQcd5FsAW42rVIlhb71SqN0DZRn1UpgA=
Subject key identifier:   06:87:06:40:91:F5:3F:BE:3E:A6:BD:70:F4:BE:60:0C:1A:2A:48:70
Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
Certificate issuer:       /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Certificate serial:       01984B8ACAFFE534FF319D9026227D14CE0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
Manifest number:          07AD
Signing time:             Sun 27 Jul 2025 11:00:43 +0000
Manifest this update:     Sun 27 Jul 2025 11:00:43 +0000
Manifest next update:     Mon 28 Jul 2025 11:00:43 +0000
Files and hashes:         1: _3sIjV0NzBRBUXOfv_g2UXCkao8.roa (hash: cQ3AbgfUz8fqilC4hhCtVaH0mIMtsn/x+ig6JhvdshA=)
                          2: gzFSDIvuo1g8SYBgsWmT7skIWNo.roa (hash: D7BWQwJQV9C+IDJ4nn09iuxJOEha5Pi+Tmqs9uYeqYg=)
                          3: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: a42cHglbj2ENullvJ+hVsvELQg8XUsFWbX5q/hY1Ef0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 09:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:8a:ca:ff:e5:34:ff:31:9d:90:26:22:7d:14:ce:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
        Validity
            Not Before: Jul 27 11:00:43 2025 GMT
            Not After : Jul 28 11:00:43 2025 GMT
        Subject: CN=0687064091f53fbe3ea6bd70f4be600c1a2a4870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:36:6d:64:67:3c:92:8f:90:86:16:2f:7b:
                    7b:94:d2:a5:fd:20:b9:15:ab:ba:fd:eb:5f:8b:c9:
                    a9:ae:eb:5c:ec:e3:00:25:95:f4:dd:ab:9c:0c:e0:
                    49:82:5c:4b:02:7d:4e:e3:ce:ba:8c:b9:ad:f7:7f:
                    92:41:e2:71:d7:09:5b:e9:c3:22:97:b7:20:97:4e:
                    ec:14:77:96:e4:15:1c:1b:af:0b:1a:50:7c:d0:70:
                    94:47:17:b0:e2:67:02:ef:4d:56:37:8d:7e:1a:23:
                    66:7f:15:36:51:9c:45:7a:41:7b:f5:f4:f5:19:c9:
                    ae:3e:72:f1:b8:fb:4b:46:2a:65:ef:5d:cc:99:4e:
                    6c:58:2f:9f:eb:fc:4b:68:9c:84:7c:d8:8a:62:77:
                    0c:46:73:e5:47:20:62:fb:0b:c6:5b:b1:07:f4:18:
                    cb:0c:13:9a:4a:c1:67:92:d1:29:4e:eb:f1:7a:05:
                    3f:b5:7c:fd:d5:f9:4c:62:77:4d:70:c1:b3:46:e1:
                    18:de:64:98:2d:7b:4e:c0:72:6c:bc:39:d0:95:4d:
                    2f:fa:78:2f:81:d1:a4:98:8c:8c:55:de:89:76:ba:
                    26:24:26:d3:08:f4:14:56:75:73:f8:49:68:df:23:
                    ad:df:0c:90:bc:e7:2a:93:9f:6e:a5:6c:05:59:a3:
                    75:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:87:06:40:91:F5:3F:BE:3E:A6:BD:70:F4:BE:60:0C:1A:2A:48:70
            X509v3 Authority Key Identifier:
                keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:80:b0:c4:62:30:c4:18:f2:95:f4:19:e6:6b:38:82:24:0f:
         e2:6b:8f:47:11:1b:6d:9c:bd:30:c5:04:2b:0f:e2:ed:79:00:
         9d:31:66:78:1e:8e:76:7a:6f:ad:59:53:be:8d:88:29:8e:99:
         15:72:46:ba:bc:e8:f5:ce:d9:cf:00:3c:33:da:0c:6a:f8:a8:
         3b:3d:b9:a5:c2:76:fc:c2:2c:9f:17:f5:db:0d:a6:1c:1c:6d:
         c3:8d:6e:1b:e1:cb:4b:d2:0e:88:8b:74:72:e7:7e:83:f8:22:
         31:56:1f:39:02:fa:08:98:54:01:be:96:9a:9b:51:11:df:7b:
         cd:bd:a8:6b:1b:23:e4:e7:57:b2:8c:04:ea:d4:af:fb:46:48:
         e2:dc:e2:72:e6:68:0c:57:51:05:be:82:b8:95:91:93:e8:e1:
         fd:ca:77:d9:86:bb:3f:c1:58:0c:4d:9b:0e:1e:aa:f5:0f:a0:
         d7:b0:57:07:9b:6f:0c:01:d7:ea:42:dc:71:2f:44:42:13:b0:
         99:af:e0:13:ad:fc:c9:f7:70:55:1e:83:b8:fe:43:ec:c0:eb:
         82:55:93:9a:95:2d:2e:69:c7:f2:55:6f:1c:3b:07:30:d7:36:
         c7:4e:2c:43:ec:75:88:76:ea:fb:47:3f:7c:26:9c:a9:f9:6f:
         ed:48:8c:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhLisr/5TT/MZ2QJiJ9FM4KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0
YmY4MDAwHhcNMjUwNzI3MTEwMDQzWhcNMjUwNzI4MTEwMDQzWjAzMTEwLwYDVQQD
EygwNjg3MDY0MDkxZjUzZmJlM2VhNmJkNzBmNGJlNjAwYzFhMmE0ODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAw2bWRnPJKPkIYWL3t7lNKl/SC5
Fau6/etfi8mprutc7OMAJZX03aucDOBJglxLAn1O4866jLmt93+SQeJx1wlb6cMi
l7cgl07sFHeW5BUcG68LGlB80HCURxew4mcC701WN41+GiNmfxU2UZxFekF79fT1
GcmuPnLxuPtLRipl713MmU5sWC+f6/xLaJyEfNiKYncMRnPlRyBi+wvGW7EH9BjL
DBOaSsFnktEpTuvxegU/tXz91flMYndNcMGzRuEY3mSYLXtOwHJsvDnQlU0v+ngv
gdGkmIyMVd6JdromJCbTCPQUVnVz+Elo3yOt3wyQvOcqk59upWwFWaN1nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaHBkCR9T++Pqa9cPS+YAwaKkhwMB8GA1UdIwQY
MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt
NDhkNWZmNGJhMjU1LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1
LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYCwxGIw
xBjylfQZ5ms4giQP4muPRxEbbZy9MMUEKw/i7XkAnTFmeB6OdnpvrVlTvo2IKY6Z
FXJGurzo9c7ZzwA8M9oMavioOz25pcJ2/MIsnxf12w2mHBxtw41uG+HLS9IOiIt0
cud+g/giMVYfOQL6CJhUAb6WmptREd97zb2oaxsj5OdXsowE6tSv+0ZI4tzicuZo
DFdRBb6CuJWRk+jh/cp32Ya7P8FYDE2bDh6q9Q+g17BXB5tvDAHX6kLccS9EQhOw
ma/gE638yfdwVR6DuP5D7MDrglWTmpUtLmnH8lVvHDsHMNc2x04sQ+x1iHbq+0c/
fCacqflv7UiMMw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:26:21 2025 by rpki-client