Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
File:                     miM7vd_kOGRvWG8IXl3w15vfufw.mft (raw, json)
Hash identifier:          l9zeDKNvnVFZzM7vrxE/kYq0sZGCQYoJSJPgwp32kCM=
Subject key identifier:   06:1E:B0:92:24:FC:9B:07:46:55:88:95:A9:56:4B:F5:9D:AF:28:E4
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Certificate issuer:       /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial:       01977CB13FE381A41B456494829C1D5DD44E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
Manifest number:          048D
Signing time:             Tue 17 Jun 2025 07:01:20 +0000
Manifest this update:     Tue 17 Jun 2025 07:01:20 +0000
Manifest next update:     Wed 18 Jun 2025 07:01:20 +0000
Files and hashes:         1: 091iixnQKcvUxbZE0chkzY9OKaI.roa (hash: JSnoQNQ5Cj53Jy2TNMmAxUXyySm/GL1z5FN+d2LDjbk=)
                          2: 65SCsGDULNXmsnaaY_HwCpiRDJs.roa (hash: BdpbgQGpWh/WB7tfPqtYzLSc4bRtCkrcb4wfalu+zjk=)
                          3: 8MT_7oWwxxP1C-YYk_LkCwE9hG0.roa (hash: CVVH3DKSw6OPD6uGHDaKNZyh/Yf/ppoZnuIgn8Lk+VM=)
                          4: hZOTpFRy13nYnktswcCNkeUCTr8.roa (hash: 4dFC4O4Uj8mTI6RVQjx/owGxcN/2ee3qO80AUI3+pDc=)
                          5: miM7vd_kOGRvWG8IXl3w15vfufw.crl (hash: Ktb7opEbguOB8FA8IyrcxojXnPUFo3dTG8X1bC5MEcw=)
                          6: yATYs5RQnNSomy8BdI2rSObywPg.roa (hash: b8O6fsQ738Y0NuUeiBS8msZwSYfgqn0qenaET6r1H/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 07:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:b1:3f:e3:81:a4:1b:45:64:94:82:9c:1d:5d:d4:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
        Validity
            Not Before: Jun 17 07:01:20 2025 GMT
            Not After : Jun 18 07:01:20 2025 GMT
        Subject: CN=061eb09224fc9b0746558895a9564bf59daf28e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:17:a8:8b:ba:c2:e4:24:ee:86:52:15:eb:
                    84:91:22:d7:39:c2:cb:c0:3b:58:c8:95:b1:f5:55:
                    14:4e:88:c7:3a:ce:63:7b:2e:46:3c:31:21:60:28:
                    8d:30:9d:3e:1c:e3:39:7b:08:3e:a7:6d:5c:ac:31:
                    f1:34:a2:71:4f:99:27:6b:52:77:3a:d5:ac:c4:60:
                    f2:3a:c5:8b:67:e0:6b:28:ee:37:09:4e:a7:c2:a0:
                    89:8a:98:85:77:3e:c9:fa:52:0e:de:70:31:ed:32:
                    d2:91:c4:bc:3d:36:ce:86:d2:ae:35:2f:23:f7:8b:
                    54:2e:b5:40:c1:48:e7:a5:73:c1:a7:d2:0b:73:3c:
                    dd:3e:8e:f8:47:72:c2:46:84:69:88:17:a5:94:60:
                    5d:57:39:79:7e:47:47:6b:b8:2e:e4:18:6c:9c:f5:
                    de:6f:fd:65:da:27:6a:8e:8f:62:ed:4e:24:86:f0:
                    cc:e2:8a:bb:75:bb:74:d3:42:45:24:1b:ed:25:ac:
                    8f:87:8b:f7:d4:a1:ff:1d:af:f6:5c:ed:da:50:3f:
                    63:62:38:71:fd:17:63:c1:fb:cf:54:cf:d8:f8:48:
                    87:5a:ca:1e:f2:a4:3c:6f:93:03:bc:ea:29:25:e1:
                    6d:fb:0c:64:27:86:8b:42:95:7b:79:a9:a4:ad:11:
                    fa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1E:B0:92:24:FC:9B:07:46:55:88:95:A9:56:4B:F5:9D:AF:28:E4
            X509v3 Authority Key Identifier:
                keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c7:d9:47:0e:a9:0d:19:6f:99:55:95:14:c9:1b:70:26:84:
         f7:d1:0f:c9:93:d8:1c:31:2a:75:c8:04:e1:2c:a5:ae:ce:7c:
         88:7b:b8:64:05:bf:78:c0:3d:b8:bd:4f:4c:29:30:79:ab:9d:
         df:38:f1:92:22:e4:7f:13:57:03:0c:e5:1f:22:77:7a:90:bc:
         3d:7a:40:53:a6:5b:75:fa:4a:54:28:f1:89:fc:94:76:52:1b:
         2a:ba:7f:7e:a5:6e:9e:d7:f9:6f:ff:cc:4f:78:d8:56:b0:0f:
         99:79:f4:96:0f:21:09:0c:95:9e:97:da:65:79:fc:04:c5:71:
         29:34:43:9d:da:28:ce:7d:81:a5:97:0c:ce:ba:8e:50:f7:b2:
         38:b7:9e:ff:ca:d4:e2:3b:d7:98:eb:95:e8:33:60:61:9b:3e:
         a3:11:8d:2f:95:b3:60:13:88:67:69:fb:ad:cf:52:c8:fd:a0:
         3f:ae:7b:0e:83:22:73:a6:37:c3:52:72:b3:4b:4f:5b:43:72:
         6b:8e:9a:00:15:5b:5c:df:46:64:40:f1:a1:cc:bc:97:aa:54:
         11:0d:74:1a:50:06:fb:13:98:8d:8f:e8:fc:52:21:4b:a6:dc:
         4a:7f:57:d7:1a:f1:2a:12:3f:c3:70:59:43:07:9d:7f:4b:28:
         5d:ce:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:36:57 2025 by rpki-client