Manifest

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
File:                     359A4B6C6D3713CFF3636207DE9839058B51815B.mft (raw, json)
Hash identifier:          jspZQhu9IKLZ+3pLB380B48PrHjDOkhzaPHBC4YHo6c=
Subject key identifier:   12:9A:FF:C5:1C:8B:77:82:03:D7:6D:BC:06:78:06:86:28:F3:4F:1D
Authority key identifier: 35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B
Certificate issuer:       /CN=359a4b6c6d3713cff3636207de9839058b51815b
Certificate serial:       7D6F2332655C167F159EDDA31031D6F41E8353AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
Manifest number:          03CC
Signing time:             Tue 04 Nov 2025 20:48:45 +0000
Manifest this update:     Tue 04 Nov 2025 20:43:45 +0000
Manifest next update:     Wed 05 Nov 2025 22:53:45 +0000
Files and hashes:         1: AS61414.roa (hash: B1grZBO1rO8YFTVIY3I2HFZPM9hw7VRsk0+Yqir87oM=)
                          2: AS57695.roa (hash: oc+M5RaKKneDt+xjVnZrlMa9SqrvruVJ6Dpfe25rUAY=)
                          3: AS47553.roa (hash: Dp+B0R6vbfmBVmiAYsdBcM1ozRbfYdCyQM0zcVpgwNc=)
                          4: AS48883.roa (hash: WQE7QQ/0ECRSEffMMLzV1Yb4NdsVtGFNtHkglupVodc=)
                          5: AS16509.roa (hash: akAOnqI6NVu3UwJAPVFaXKovdIoH18zX6XpchG8P19w=)
                          6: AS50069.roa (hash: wM8gv0FO6hTaVvFbXaagNpyG5F9/YFqNL/AwKr8MZPc=)
                          7: AS205058.roa (hash: 62lPh9ZGqyClWdZEKtW/PtH/2p2zjWuftKo5ioW9SdE=)
                          8: AS134575.roa (hash: sezJe62hrs/AR/g+KDKvSGnhPAyBUIeGMxG4Ts3D3nA=)
                          9: AS41780.roa (hash: vvNTZei35tkAAV4jSnMrU3bDLgRYQsgGlFAf2uMh/mk=)
                          10: AS8075.roa (hash: Zps0fnarva022OCmZcaRQS8xxpxvuD3hOi4cLC9iit4=)
                          11: AS969.roa (hash: G3npuBywMKbYgZ7Sa1aQuN9zffX/90mfyjR8Gq2o8qQ=)
                          12: AS204185.roa (hash: Z+jdkqmCUcKIj3YAHrxNCxuBTpT2Pdku6gGk+XiuEQo=)
                          13: AS0.roa (hash: vawao1IEa+9cDILyqggC93YX4X7D/G78lZAiEHQ8qqc=)
                          14: 359A4B6C6D3713CFF3636207DE9839058B51815B.crl (hash: 6XlyWol8n8DEWYYO73aWZWmyg1ZEqf5iB3RVLbHPNEM=)
                          15: AS205152.roa (hash: JnjQ9fa7uf65V3uVidK2Jfnt1LulDbjaWs9+yrF/BB4=)
                          16: AS205590.roa (hash: lH0E2FcplruA7ICQqP+T0JkcwlLQZKgZf1jA0M3/HQU=)
                          17: AS205603.roa (hash: nQxZqXnpdkQQU7e7MeQmapG50hOaKwuP65RyxZk/4uo=)
                          18: AS32519.roa (hash: Nvk8U9PT6U89tC0ogQy6mE3gj4WOKlG1tSfsz27BwGQ=)
                          19: AS48539.roa (hash: H/3JSGTOUO9lEro79lR11VquYHxuelQHU6PXohu6M28=)
                          20: AS131477.roa (hash: RGTaw97BizLnd7Qw2MQ68jw7INF/TAkUcBmGgkwpss8=)
                          21: AS51928.roa (hash: 6B1FZH83ynkXd2jlIrlX7xAX5HiFo/SOv36BtFHLNdA=)
                          22: AS41979.roa (hash: 1tXx+h6PTczHQnfNqGQeoDpdHGaakHA5DBqYB5LR2HU=)
                          23: AS205651.roa (hash: FVWt5twid8PvxRJhc3nspKGEmxoGT5SjkgDOeJ3/rTI=)
                          24: AS205618.roa (hash: 5SFOmwqc2Zxke+NK9VXcQDLkfBdGk2Vmf3wgCnMTshw=)
                          25: AS23961.roa (hash: LhAUfTK/KnleM7KidDUNJqVAVLYyfiSJ5Hkeny+HOkw=)
                          26: AS138668.roa (hash: egtR7OrcVv7Jq3fiNgJKeKinFrvft4aNgHRyFnrKCTU=)
                          27: AS134176.roa (hash: JcDo2IsR7Rgyd7+ESONz3NUeZ0Cv+Y/E0IJ2u6+0xxM=)
                          28: AS57578.roa (hash: XVO4IBJL9kaRbAzjLo8uXnHBR2QxRp6aZ0sfKRdtQ5M=)
                          29: AS205610.roa (hash: 8k4+G3P8f7IZw6fGDZl6qQ1hKcnRuZ6wCyzNemlakVE=)
                          30: AS14618.roa (hash: Ldgc443HsdTW3amzezt6wTwBy1Q7rbaMvXc57ASQCLo=)
                          31: AS134098.roa (hash: 1tVsuu3oW0ecdDO1ER64yJu6elHlt+2yI1DobOmrdJE=)
                          32: AS205532.roa (hash: H5pMf6gc+Bs3fmwGWKTw+DHVaF+GCFTfb4zJJN906x0=)
                          33: AS997.roa (hash: CDJQnoOLi2tyWviTrxUOtkyrmQhXc6Dx7qAynxEWmWA=)
                          34: AS396982.roa (hash: /J3zzRVdfAgVdoOcMG9Lr+TCeFXcJAkMI6PIdsYDTlU=)
                          35: AS48386.roa (hash: R31+pks3QJ7UxQLsAG32/aWE4+URK3BuNRhRmqowB88=)
                          36: AS62230.roa (hash: Ke2d1Umto1inwjrpVXwRxze6MUeaOLbexs8is3HlTpM=)
                          37: AS35487.roa (hash: KzJxy+ht31063XRr1E+hsynzRnqHgx46V+CyjU84lhI=)
                          38: AS49466.roa (hash: R8n0y9sEIhzz8ao6JGEYdWdAPKHmIzCe391uZv9BgRA=)
                          39: AS58313.roa (hash: SQ63gOL6QvTzVortizycU1Du2Yfq/Jb9Y37PcaaDlBs=)
                          40: AS207193.roa (hash: 4tVQr2NWuhZSERoE626UHQJ9ko1vK8lqRVCA34BJAnQ=)
                          41: AS917.roa (hash: 0u4064f+IPFOyBN+oWNj543rJRVZwCO/IvbIIA4f81s=)
                          42: AS18254.roa (hash: Fa5rbITeaJ07tzFaaYlEs6zDo38AP5SovTcBY26Fr9k=)
                          43: AS44421.roa (hash: mKk5Liga5tzKBtvpTMcIGWVpSfZGx7NR524eFTu7oB8=)
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl
                          rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:53:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6f:23:32:65:5c:16:7f:15:9e:dd:a3:10:31:d6:f4:1e:83:53:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359a4b6c6d3713cff3636207de9839058b51815b
        Validity
            Not Before: Nov  4 20:43:45 2025 GMT
            Not After : Nov  5 22:53:45 2025 GMT
        Subject: CN=129AFFC51C8B778203D76DBC0678068628F34F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5b:69:2d:40:f9:c1:75:7b:c0:d7:a4:23:8d:
                    c9:48:7b:16:e4:67:f5:51:94:0b:36:e2:75:ff:db:
                    c3:27:c3:50:fd:18:5b:3b:f6:4e:c5:b1:5a:12:43:
                    80:0c:9c:52:e7:3f:f8:62:7f:a8:dd:f2:12:b5:db:
                    b2:5b:45:1d:7b:c9:a3:db:19:cc:54:30:c8:81:65:
                    f7:c3:5d:7e:2a:f7:a3:a8:58:bc:45:1c:1e:d0:e7:
                    69:36:5e:a8:da:39:a8:e4:36:94:26:d2:03:09:47:
                    0a:52:b5:2d:f1:ab:d1:63:51:55:db:1e:23:7f:6a:
                    a0:4d:37:b4:13:3d:3f:54:9c:3a:e8:78:3d:ea:e7:
                    21:88:73:a6:e4:d1:ef:d4:8f:62:31:8e:6c:27:9b:
                    f2:4e:b1:f1:4a:45:aa:ee:40:de:1a:c7:ec:62:14:
                    c1:26:03:4d:83:94:11:04:df:85:40:f4:ca:ea:c4:
                    0a:bb:18:34:79:98:7b:66:8b:3f:db:ef:5b:ef:1b:
                    d5:7e:12:08:0a:7b:19:ec:2f:9c:8e:24:1e:96:0b:
                    16:7e:e1:49:9e:41:0b:7b:23:c1:2f:d3:6c:5b:71:
                    3d:4a:23:22:51:61:f2:23:ec:31:88:ec:0c:95:1d:
                    75:bf:f9:50:a0:16:95:58:05:31:94:07:42:5d:b7:
                    dd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:9A:FF:C5:1C:8B:77:82:03:D7:6D:BC:06:78:06:86:28:F3:4F:1D
            X509v3 Authority Key Identifier:
                keyid:35:9A:4B:6C:6D:37:13:CF:F3:63:62:07:DE:98:39:05:8B:51:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZpLbG03E8_zY2IH3pg5BYtRgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/2/359A4B6C6D3713CFF3636207DE9839058B51815B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:b6:5a:4e:d4:e2:27:9c:6f:a1:66:23:0e:3e:81:bd:56:8c:
         79:af:d7:6b:70:93:f2:93:ca:67:d3:d6:09:8e:32:b3:dc:b1:
         b2:bf:1a:ee:71:bf:fe:71:8e:87:b7:dc:28:d0:9b:de:f8:29:
         33:57:11:3f:56:25:4d:e6:94:7e:59:72:2d:0b:2c:c7:60:2b:
         32:63:c2:74:eb:19:d2:b4:c0:04:16:06:c6:b4:aa:82:12:f3:
         0d:00:88:e0:4c:7e:91:6d:c6:ff:53:ec:83:5c:09:6c:da:77:
         4f:00:59:46:6c:b7:e7:58:5e:a8:17:32:b6:05:c0:f9:6a:fa:
         84:e7:4b:4e:91:83:a1:11:68:e5:56:8c:b5:e4:28:a2:07:97:
         ef:c9:49:b4:b6:1b:81:b7:b8:67:18:47:20:64:00:bb:13:88:
         ab:ed:49:41:25:78:51:12:82:75:20:36:09:fc:11:da:1d:ef:
         52:ce:ea:7a:cb:ad:fe:c5:88:0a:39:df:e5:c2:72:55:91:b8:
         fc:34:cc:6d:19:5d:4b:26:b3:32:99:3f:c8:02:c8:5a:81:25:
         cf:71:3c:6f:ca:34:20:8c:ce:32:af:f6:2e:53:a0:d4:03:a9:
         4c:65:03:07:ee:45:59:df:f4:ae:fe:b6:57:68:0d:0d:fb:6d:
         bd:32:30:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:30:24 2025 by rpki-client