Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
File:                     miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json)
Hash identifier:          AEl1W+VVG7Kns5VjYgWCgZ0UVU3fhRSEO/5+uiztr6A=
Subject key identifier:   6C:EA:02:AA:7F:0C:F9:B1:78:AA:9C:29:BE:D0:FF:7F:9B:EE:E6:FF
Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
Certificate issuer:       /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Certificate serial:       01974C9FFE8A595D3309AF383F6183FD5219
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
Manifest number:          0729
Signing time:             Sat 07 Jun 2025 23:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 23:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 23:00:43 +0000
Files and hashes:         1: _3sIjV0NzBRBUXOfv_g2UXCkao8.roa (hash: cQ3AbgfUz8fqilC4hhCtVaH0mIMtsn/x+ig6JhvdshA=)
                          2: gzFSDIvuo1g8SYBgsWmT7skIWNo.roa (hash: D7BWQwJQV9C+IDJ4nn09iuxJOEha5Pi+Tmqs9uYeqYg=)
                          3: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: p11PqMv6UVlCc7SQor/6uuq3iURXYyQg/QcZi3p1dyM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:9f:fe:8a:59:5d:33:09:af:38:3f:61:83:fd:52:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
        Validity
            Not Before: Jun  7 23:00:43 2025 GMT
            Not After : Jun  8 23:00:43 2025 GMT
        Subject: CN=6cea02aa7f0cf9b178aa9c29bed0ff7f9beee6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:17:0a:c2:46:90:87:b0:fa:94:14:7c:0c:ed:
                    1f:23:17:9a:b1:ca:19:ee:e2:7c:61:c3:c6:a7:87:
                    25:88:45:ca:c8:62:89:b1:0e:bb:d9:31:54:4b:c2:
                    43:a9:e8:11:f9:bb:06:b0:98:e2:91:4e:bd:96:3b:
                    49:64:c7:0a:08:d6:57:26:a4:ff:42:b8:48:e2:61:
                    cb:b9:d4:5c:44:2c:88:63:46:6b:3d:e5:3e:aa:97:
                    31:e4:33:39:30:cf:74:f6:81:7c:73:84:88:aa:26:
                    b7:1a:22:f0:7c:07:f7:fb:11:9c:c3:5e:9a:cb:9c:
                    84:8c:1e:0c:58:ec:e5:a5:51:a5:96:37:80:2b:3b:
                    33:d1:c2:e5:94:79:e1:bf:35:13:77:86:d0:dc:99:
                    8f:c1:17:fd:ae:ee:0c:56:5f:a5:74:75:fa:ff:6b:
                    73:21:11:2c:f4:6d:78:30:2e:90:f2:12:cd:05:23:
                    4e:08:78:9c:49:e2:4c:3f:f0:4a:25:26:28:e1:c1:
                    33:f1:1d:9b:20:6e:57:b3:1c:b2:87:ab:2b:b5:c4:
                    cd:21:92:d3:65:aa:1a:c2:a4:67:3a:08:25:a9:df:
                    3e:1e:06:ed:f0:6a:0a:be:4a:f4:4a:9d:37:3c:08:
                    ac:0a:2a:71:a6:7d:4f:d7:f4:e5:1b:02:ab:57:86:
                    30:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EA:02:AA:7F:0C:F9:B1:78:AA:9C:29:BE:D0:FF:7F:9B:EE:E6:FF
            X509v3 Authority Key Identifier:
                keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:ed:b4:bf:00:d6:04:2f:e6:b0:9e:50:9c:04:01:8d:ae:d3:
         57:da:6f:41:41:90:b6:ed:d9:e9:ae:85:52:65:27:26:58:7d:
         59:3d:af:90:97:75:9e:ff:22:b2:ef:b6:c5:b8:0a:43:09:4e:
         73:74:dd:0a:2d:2e:4a:36:4c:ce:97:76:fa:75:77:55:83:1b:
         c1:f5:e2:3c:3f:83:d9:d4:4d:c4:18:48:c9:c5:a9:59:a2:6d:
         7e:ab:60:a2:cb:6d:84:e5:90:c2:38:a5:ab:22:4e:d5:e5:28:
         01:2d:d2:d5:30:37:1d:e6:12:29:85:d4:91:17:43:86:37:a0:
         7c:a8:05:17:8f:2e:ba:8a:45:f7:67:f0:61:dd:61:95:ea:dc:
         cb:14:f3:43:7d:67:af:e9:2e:5b:48:42:79:3e:70:e9:ff:c5:
         2f:9a:0e:5e:c9:5d:d9:e4:f5:0d:8d:4b:6d:a1:4a:13:fa:f4:
         bc:ce:eb:33:91:20:96:99:c7:6e:a1:2d:15:a6:09:37:f3:f8:
         6a:0b:98:a5:da:71:1d:3f:a1:02:e6:29:4e:26:ab:98:32:61:
         a9:ce:7e:0c:29:97:0e:80:3a:a2:c0:b9:71:53:30:f0:0a:19:
         ec:4c:6c:d4:11:d3:81:f4:ca:cf:ea:81:60:b4:82:4c:37:65:
         14:47:5a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:13:11 2025 by rpki-client