Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
File:                     9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json)
Hash identifier:          MP3L6/4joIaY1ODaW3hxkF7zEtBHpE7cdzrgz2xXL/8=
Subject key identifier:   63:60:C3:D3:BB:79:6E:CD:D8:51:D3:91:0B:B1:32:9A:C7:8E:3C:7C
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Certificate issuer:       /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial:       0197526B4F7632ADB6C2A9FB97D69A1CF312
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
Manifest number:          0B9D
Signing time:             Mon 09 Jun 2025 02:00:53 +0000
Manifest this update:     Mon 09 Jun 2025 02:00:53 +0000
Manifest next update:     Tue 10 Jun 2025 02:00:53 +0000
Files and hashes:         1: 37QCkG1k9gzLrRMVOTELOapS-4Y.roa (hash: fObIS1yLlqyANULO1cGplwcB5m0pXnjdZmigUly+6NA=)
                          2: 3RdZANpVovPRB4zCH-Lkf3Prtaw.roa (hash: l5w5cnd2tEXGGJFzz40s0YV//kdA+ReRwmR0KmdVVDU=)
                          3: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: XaF/YGE9XJsJ8682N0x3bfUbZ/k+O1mJQymUz5yEHUw=)
                          4: C8rZpiwRRKp7HiBYnxrXRCtzNP4.roa (hash: /a2qXNrKqG5G3jKSkvjhWWJd/4eBrgaawytg7M/VZPQ=)
                          5: H6_j121nwrBmCty1wbdXDXgyav8.roa (hash: vaRQnvr04lMFV87aznhgmJYTb/5VAEUEaBeFpioyQ+k=)
                          6: QzeYJ0KS9RnXOpGwg30dLB7QNtM.roa (hash: GvxqUqeToEyuHItwEPwmlJxDN8bC2ihCXeSL11W/nwA=)
                          7: hkqOX4mECokeZ3ChLO-NkzoKVG0.roa (hash: jDSI0Vi3uJHnivxkTcLJyUGbXo6jl9OF+5YD1t9wHog=)
                          8: xEaq7kolhQn1OmIod6QQM1Gthtk.roa (hash: IC+2lUW0/0ySDq3Q6puBeGjrJpCDJAXfXz5IauHoRHE=)
                          9: yZE684PU1B3lT-aKA30arKwyTEI.roa (hash: isFNdgWP0HVp5O76X23OI/gh9YCy0xYVcwqK0QPMZ60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:6b:4f:76:32:ad:b6:c2:a9:fb:97:d6:9a:1c:f3:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
        Validity
            Not Before: Jun  9 02:00:53 2025 GMT
            Not After : Jun 10 02:00:53 2025 GMT
        Subject: CN=6360c3d3bb796ecdd851d3910bb1329ac78e3c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:44:64:e0:98:c4:11:60:4b:e5:50:0e:8d:c6:
                    2f:3d:8a:a3:09:b6:e6:d2:13:42:9c:17:f2:1f:63:
                    6d:e5:31:5e:6a:b7:1a:66:30:d7:a3:86:d2:91:5f:
                    3e:49:c3:bd:33:92:44:ee:75:d2:a4:73:3b:2c:a0:
                    09:98:32:01:95:1c:02:6c:bf:52:d6:5c:1d:a0:f1:
                    3b:1d:00:27:b6:9f:ca:d4:8b:b5:ad:73:57:d5:e1:
                    f4:e4:07:28:cb:9b:65:51:70:17:f3:d0:a4:41:23:
                    a5:f4:af:4a:86:3f:34:15:83:97:6f:5c:98:89:37:
                    76:2e:85:75:2b:6d:c4:b3:66:bc:ee:b6:f7:98:80:
                    1d:71:9b:09:af:b6:73:36:46:cc:be:6d:53:33:36:
                    ce:1e:1a:62:41:0e:bc:7a:9e:a4:c4:98:f6:7f:3f:
                    51:26:7d:0a:27:07:c7:75:8d:60:7d:b3:82:eb:c3:
                    63:e9:ff:fd:e2:57:70:8e:a0:88:21:6b:3f:3c:3c:
                    27:c2:bf:bd:80:76:52:b8:46:48:59:31:6e:d3:3d:
                    0a:92:df:58:6a:ad:89:70:b7:87:db:32:22:a6:51:
                    c2:cc:48:72:c4:b9:8e:6d:9f:0b:0e:70:e9:9b:ff:
                    41:02:6c:26:16:22:7d:91:27:11:dd:c6:32:89:2c:
                    27:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:60:C3:D3:BB:79:6E:CD:D8:51:D3:91:0B:B1:32:9A:C7:8E:3C:7C
            X509v3 Authority Key Identifier:
                keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d7:a5:4e:49:8a:7a:5e:00:03:c9:c6:67:2d:78:38:73:7e:
         c6:79:bc:19:5e:ba:a6:a6:f0:a3:5a:e3:54:63:bb:dc:29:cc:
         f4:37:26:50:67:e0:6e:78:ac:86:fe:c9:f6:7f:0e:f5:16:29:
         c4:a6:93:86:3f:68:2c:d7:0d:13:67:1d:4a:a6:ea:9b:43:7b:
         5c:c5:52:8b:72:4d:73:f7:a3:cb:ab:55:24:c5:db:e0:36:4c:
         1e:0c:4b:e0:79:48:51:57:af:d3:34:e7:90:2c:6d:a3:95:0f:
         16:d1:9a:12:8b:bf:ec:5d:dc:d2:f1:e6:99:88:10:5f:bb:67:
         1e:c0:4a:c8:8f:72:14:73:00:d5:b3:dc:67:c8:ff:b3:46:a5:
         4a:39:9b:29:19:3f:2c:ae:94:86:4a:7a:23:38:1d:40:9b:70:
         ea:9e:26:77:3e:ec:21:8e:7a:dc:bc:37:df:d0:6f:e4:e9:43:
         50:ba:17:47:b2:8c:61:44:af:6e:c0:eb:22:cf:42:e1:af:38:
         b1:e4:ad:a5:1e:60:8c:f8:a5:20:0d:60:7c:c2:6f:23:a9:9b:
         ee:d2:e5:76:60:d6:f8:8d:bf:e6:90:44:49:6d:a7:4e:c9:5e:
         e9:7f:2a:24:89:7b:66:bf:9f:1b:4a:08:1d:ff:8f:c8:24:64:
         57:54:23:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:50:53 2025 by rpki-client