Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
File:                     miro1LAWhwIbd7h08RDBttv-xlE.mft (raw, json)
Hash identifier:          zzmmGg0ElnOv8gJ6jXJcLMAEorB2ThItq7A/uUphcl4=
Subject key identifier:   31:B0:1F:1D:82:2D:13:C0:44:DB:F1:15:28:19:AC:52:FC:72:AA:C6
Authority key identifier: 9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51
Certificate issuer:       /CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
Certificate serial:       019A522CC5A2DEF5ACE9B00AD45361F3B1CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
Manifest number:          0E1D
Signing time:             Wed 05 Nov 2025 04:00:56 +0000
Manifest this update:     Wed 05 Nov 2025 04:00:56 +0000
Manifest next update:     Thu 06 Nov 2025 04:00:56 +0000
Files and hashes:         1: FEmq_LSCw3qARbc_REHnTueFXv0.roa (hash: w7kLO8zmlwjsil7oxAuK8gh9w7qBy+9fIQiuZhkIXQw=)
                          2: miro1LAWhwIbd7h08RDBttv-xlE.crl (hash: LA6eyfd6MSc+2tchFbyloxa/J9oCgooyPTsOcdQIksE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:2c:c5:a2:de:f5:ac:e9:b0:0a:d4:53:61:f3:b1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
        Validity
            Not Before: Nov  5 04:00:56 2025 GMT
            Not After : Nov  6 04:00:56 2025 GMT
        Subject: CN=31b01f1d822d13c044dbf1152819ac52fc72aac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1a:6a:52:32:f2:3c:07:35:ba:7f:c4:8e:aa:
                    48:d6:10:d9:bd:bc:5d:dc:ca:3f:2d:e0:0f:cf:37:
                    c2:8d:1b:2e:33:0d:4f:f3:9c:39:cd:f7:09:ac:cc:
                    2b:50:b7:7e:a6:6a:93:23:9b:b7:bd:43:30:f6:ca:
                    ab:9b:5f:e5:92:bf:00:14:dd:5b:8b:43:f5:83:ce:
                    87:32:04:92:ef:0f:42:27:bb:99:dc:d4:24:d7:61:
                    a6:a6:06:a5:7a:8c:eb:5a:d5:37:f2:f8:57:b0:c6:
                    f0:ed:db:cf:a7:c7:2f:e1:aa:5b:f2:68:b1:48:d5:
                    04:2a:c6:16:fb:44:17:40:db:c0:9f:40:0f:50:f3:
                    20:94:7b:6d:9d:0a:a1:4c:bb:44:a8:6f:87:c9:93:
                    f2:69:91:d1:69:f6:f7:bd:fe:82:a6:2f:dc:e2:8b:
                    65:08:89:2c:73:b6:cb:b0:f9:01:83:9c:0f:e8:1f:
                    ab:f8:3d:3a:5c:c6:00:5a:af:ab:48:b8:fe:47:66:
                    bd:63:e2:d3:07:31:2b:8f:5a:c2:38:74:3b:0c:a3:
                    4e:bf:fc:dd:43:5b:09:21:de:8d:fc:54:b6:94:10:
                    11:4a:0b:5e:10:c6:c7:56:a7:75:de:d0:3f:70:06:
                    bc:a5:23:f7:9a:02:83:ed:f5:f3:6e:d0:09:e5:5d:
                    cf:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B0:1F:1D:82:2D:13:C0:44:DB:F1:15:28:19:AC:52:FC:72:AA:C6
            X509v3 Authority Key Identifier:
                keyid:9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:88:49:13:38:c1:8c:2b:c8:ff:a6:fb:64:79:9a:bf:ec:0e:
         a3:10:b5:dd:2b:75:96:51:3d:c7:22:ca:90:dc:38:99:3f:bc:
         a4:35:3e:37:e2:39:43:bc:e0:a5:81:cc:e1:be:13:f8:33:3e:
         2f:a3:f7:ec:e4:ca:cf:8d:cb:1b:1b:28:a6:72:55:b2:6b:15:
         d0:2a:56:28:5b:25:54:9f:98:d9:89:fe:03:36:82:9c:47:18:
         42:0f:24:fc:f0:16:ca:a8:c6:c8:48:32:cd:4b:95:55:3c:44:
         a4:68:28:ea:28:a1:42:59:c0:7f:f3:f3:83:2e:79:e7:2f:d6:
         d0:39:b7:c4:69:05:03:1a:f9:2c:d4:4a:1a:ac:65:67:f9:c8:
         26:b2:5f:5c:9a:9f:1b:83:7d:c5:59:54:27:f5:89:e7:3d:5b:
         79:8d:9f:eb:8a:fb:04:56:13:ee:d4:f6:b3:2a:75:01:44:dd:
         0e:61:ef:02:cc:08:d1:70:ad:9c:5e:76:c8:be:1a:53:18:1b:
         4b:f6:4f:5e:31:bc:bf:eb:fb:c7:86:a7:1b:d9:d7:31:84:1a:
         e5:d0:66:39:e4:24:9d:06:35:20:98:19:2a:d8:69:97:3d:75:
         e7:25:b5:ea:dd:16:41:4e:40:dc:f7:ad:93:ea:ea:bb:8a:28:
         9b:07:42:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:46:46 2025 by rpki-client