Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
File:                     miM7vd_kOGRvWG8IXl3w15vfufw.mft (raw, json)
Hash identifier:          PmBX4MXot0GTt6X+K/G6CxbjShSYpA1XFBU1lCI+v2Y=
Subject key identifier:   B9:AB:38:73:BE:10:AA:1E:6E:7A:6F:78:E2:07:3C:D7:57:2C:F7:4F
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Certificate issuer:       /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial:       01992D47A148B80CBA52984DF71D08B5F6F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
Manifest number:          056D
Signing time:             Tue 09 Sep 2025 07:01:32 +0000
Manifest this update:     Tue 09 Sep 2025 07:01:32 +0000
Manifest next update:     Wed 10 Sep 2025 07:01:32 +0000
Files and hashes:         1: 091iixnQKcvUxbZE0chkzY9OKaI.roa (hash: JSnoQNQ5Cj53Jy2TNMmAxUXyySm/GL1z5FN+d2LDjbk=)
                          2: 65SCsGDULNXmsnaaY_HwCpiRDJs.roa (hash: BdpbgQGpWh/WB7tfPqtYzLSc4bRtCkrcb4wfalu+zjk=)
                          3: 8MT_7oWwxxP1C-YYk_LkCwE9hG0.roa (hash: CVVH3DKSw6OPD6uGHDaKNZyh/Yf/ppoZnuIgn8Lk+VM=)
                          4: hZOTpFRy13nYnktswcCNkeUCTr8.roa (hash: 4dFC4O4Uj8mTI6RVQjx/owGxcN/2ee3qO80AUI3+pDc=)
                          5: miM7vd_kOGRvWG8IXl3w15vfufw.crl (hash: tUwccsPsEJZp1WZAspSulwcK19gtwFvVN7u9izn0lRA=)
                          6: yATYs5RQnNSomy8BdI2rSObywPg.roa (hash: b8O6fsQ738Y0NuUeiBS8msZwSYfgqn0qenaET6r1H/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 07:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2d:47:a1:48:b8:0c:ba:52:98:4d:f7:1d:08:b5:f6:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
        Validity
            Not Before: Sep  9 07:01:32 2025 GMT
            Not After : Sep 10 07:01:32 2025 GMT
        Subject: CN=b9ab3873be10aa1e6e7a6f78e2073cd7572cf74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a9:24:a3:8f:f8:ae:65:7d:38:d7:ec:55:a2:
                    c6:c0:88:f8:61:d1:5a:97:e8:ca:69:9b:5a:c9:cd:
                    c9:84:94:a9:1b:db:da:0f:51:f4:2f:a0:44:77:ad:
                    d6:43:b9:87:d2:60:29:ad:1c:33:ec:73:f3:97:8f:
                    04:d6:c9:e9:03:8d:cc:08:8f:c1:90:58:11:32:58:
                    eb:81:53:fb:0c:d7:a2:ad:f7:3a:e7:2b:8c:e9:76:
                    31:09:18:55:4a:37:e4:cd:72:eb:a3:9d:82:86:b3:
                    43:f6:3d:db:05:5e:05:88:fb:4e:f4:13:c9:87:09:
                    f1:f0:47:b0:9b:aa:12:84:9b:ac:4c:bf:45:fd:cb:
                    a0:8d:3d:11:71:e7:1c:d8:45:8d:84:4e:6a:99:8b:
                    34:8e:d6:84:01:b5:d6:ed:15:25:4d:da:97:cd:c5:
                    ea:c8:df:15:88:ff:e1:3e:e1:1a:04:7a:cc:64:a5:
                    27:44:0f:ba:4c:3b:75:af:b7:fd:dc:e2:8c:78:2f:
                    76:4e:0b:82:f6:af:01:5b:4d:31:c5:be:95:06:23:
                    71:74:5b:aa:44:54:87:81:b1:7d:63:ea:bf:52:8e:
                    6c:e6:9e:5b:8d:d8:a7:03:a8:2d:53:52:1b:22:b4:
                    cb:73:53:bd:8e:e8:b7:b9:bd:a4:66:40:7e:e5:24:
                    1b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AB:38:73:BE:10:AA:1E:6E:7A:6F:78:E2:07:3C:D7:57:2C:F7:4F
            X509v3 Authority Key Identifier:
                keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f8:46:19:3a:c0:18:1d:a7:88:29:a5:26:44:7d:09:eb:bc:
         13:89:99:0f:b4:45:96:cc:73:04:22:b3:ed:ec:44:77:a5:06:
         cf:7d:43:96:33:9e:8a:a4:ec:00:f2:03:1c:a9:cc:70:42:13:
         c6:45:ab:28:62:70:da:91:31:90:3b:cb:68:96:10:72:36:7f:
         9f:6d:56:20:33:6f:97:11:21:6a:dd:a8:2b:63:f8:ec:d7:bb:
         87:db:f5:42:88:c6:96:bb:cf:22:51:63:35:eb:51:31:d5:84:
         6e:a2:eb:7d:60:2a:af:89:53:25:bc:92:ed:0f:54:ce:4c:96:
         7f:20:21:be:9e:af:62:c0:94:4e:79:03:51:11:e0:49:63:3b:
         6e:1b:d4:7c:f7:42:de:b4:1b:16:8b:e9:d4:b2:9b:1b:89:a9:
         49:bd:9b:58:a2:c8:5e:80:7d:60:fd:6e:3b:ae:80:5f:6f:a1:
         0d:0c:6e:e2:65:60:b1:99:05:00:22:0e:c8:4c:8c:6d:f1:4e:
         79:62:d1:ad:56:50:b8:42:64:8f:67:a3:38:d0:64:e5:d1:16:
         2f:23:ab:d4:cb:37:ae:da:9d:63:da:04:23:b4:50:7f:c4:fd:
         66:3a:43:77:27:6e:01:46:04:17:64:11:ab:66:17:51:3c:a4:
         ce:6f:f1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:08:46 2025 by rpki-client