Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
File:                     9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json)
Hash identifier:          QvwEbDVelrCW0MHl2eEK0Q5VsLGU3x6JqNLNozcCEyM=
Subject key identifier:   10:F2:D7:A9:8D:41:8F:FF:58:53:0A:B1:E1:18:D7:7C:0C:7A:E5:F0
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Certificate issuer:       /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial:       0197440AD06DE83FE3356A1301DFCA8ADF61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
Manifest number:          0D92
Signing time:             Fri 06 Jun 2025 07:00:48 +0000
Manifest this update:     Fri 06 Jun 2025 07:00:48 +0000
Manifest next update:     Sat 07 Jun 2025 07:00:48 +0000
Files and hashes:         1: 1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa (hash: +uFY0K06aPvv+IH1erLogXQwEEO2k+DY8eNZLIXFHV4=)
                          2: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: Z1+G1IyORzfg/TA9fERCjYDUjHzvczpbd9DsoSZh6gs=)
                          3: EpH20P4xP3V2g4vErHJO-EvTAVU.roa (hash: jeooPDRiBjDAUPoIXhITPTt2zTmHZ7KLWf5fCQG5sIo=)
                          4: S5ZKnLfz4DstONEqZm_YmyZ8kvY.roa (hash: X0rSxal4LbSgFqA0+FsHMQ78+/EIGLIojbhDJzOesXI=)
                          5: SI90qQvScrNKS-02paw66Vtte1g.roa (hash: CoRUrg+WB47FS25HKQ2HVa4e+itGukiRC6ZwlYviHec=)
                          6: VunL007YcgdB0SQwEVqZksZS8Fs.roa (hash: 216WPQB/uK03AqzN7nO6bEUvYIaYzP3vD9//CYpZtZI=)
                          7: mvmUvaM2JRysTq3IiKyyysU6GY8.roa (hash: dMiGawP2eEnw55fXqAakbpr7IIQ2Da7zAMRfk+xhjuE=)
                          8: xfkDaLGtqI9S0koDwH1ibKq86PQ.roa (hash: 9SMgRbgNtClui+eod+bviRGqIN366+5FDeHZRxM9wm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:44:0a:d0:6d:e8:3f:e3:35:6a:13:01:df:ca:8a:df:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
        Validity
            Not Before: Jun  6 07:00:48 2025 GMT
            Not After : Jun  7 07:00:48 2025 GMT
        Subject: CN=10f2d7a98d418fff58530ab1e118d77c0c7ae5f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:c5:73:8d:ff:d0:0e:62:6a:87:c7:d3:6d:
                    5f:7b:a0:e1:7e:eb:1a:a5:1d:7e:c3:bf:e1:94:13:
                    7f:0c:35:c8:c9:e6:e3:9d:7a:be:8f:40:7c:03:bd:
                    7e:39:10:1e:6e:6f:58:79:5f:fd:af:80:05:00:3a:
                    b4:90:5a:98:b3:9d:35:c7:c6:fb:4c:86:51:b1:36:
                    78:e3:c2:42:59:88:8f:6a:be:50:fb:0e:dd:65:9a:
                    b2:be:51:69:58:ff:6b:80:87:d7:e9:68:99:f4:77:
                    78:b4:8f:01:f0:9a:77:d8:5a:b1:5c:2e:74:b9:f4:
                    d1:23:3a:e3:bd:e2:7d:15:78:b0:1c:1f:dc:ac:e0:
                    99:aa:25:b5:5e:4c:98:46:0e:0f:af:1a:71:9e:b7:
                    1f:95:dd:68:ad:88:af:b5:c4:07:32:3f:9a:de:2c:
                    8b:53:57:47:1b:fe:dc:3e:cb:07:55:9a:18:1a:c2:
                    f3:45:b9:d2:86:84:df:5e:15:0a:63:86:93:fa:2d:
                    cd:98:be:b7:ad:5b:93:55:9b:28:f0:af:4e:95:f7:
                    00:bd:a5:e2:c8:16:5d:7c:25:e0:67:fe:df:ca:68:
                    f5:f0:76:26:0c:02:1b:71:51:d6:97:ae:31:02:c9:
                    24:eb:fd:ac:04:b4:d2:ab:9f:b1:0e:cc:1f:e3:bb:
                    37:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F2:D7:A9:8D:41:8F:FF:58:53:0A:B1:E1:18:D7:7C:0C:7A:E5:F0
            X509v3 Authority Key Identifier:
                keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f3:47:08:5e:38:25:01:91:eb:d0:4b:d1:b6:66:64:fb:8c:
         a5:fc:97:0f:f4:fc:3f:45:ed:58:d9:f0:29:81:0c:fc:95:df:
         9c:af:eb:05:9d:18:88:25:e6:26:80:7e:2a:d5:78:fa:dc:60:
         4e:b0:9d:b6:78:26:84:73:ac:b2:61:82:84:f0:f1:d9:3f:74:
         ad:ec:16:2f:cf:3b:78:9e:1e:71:a5:7d:9f:bc:c3:45:ae:c7:
         ad:b8:58:65:d8:ff:ac:20:dd:05:c5:14:56:60:cd:86:83:e0:
         fb:10:d9:e4:5e:1b:3b:6c:82:98:9a:c5:f1:80:28:db:90:35:
         ec:bd:e8:45:92:b5:0b:10:f2:51:c8:52:93:f1:b2:56:a3:32:
         82:92:8c:ed:49:47:19:c7:5a:64:79:0c:57:dd:9d:5a:92:34:
         83:84:b8:c8:32:bd:11:2d:c5:c9:5a:8e:1a:c9:1a:c6:a8:d3:
         7c:88:98:25:6c:fb:cd:e5:e7:b0:1e:76:5c:e7:a1:22:78:0b:
         96:43:2d:b3:d9:1b:cb:84:c7:c3:5c:bb:e5:1a:04:64:20:97:
         93:6e:bd:e2:bf:80:47:0e:3f:85:68:52:e0:48:fd:73:6f:45:
         53:23:2e:34:da:f5:6b:d1:77:63:4a:c7:86:66:17:94:76:12:
         09:43:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:19:07 2025 by rpki-client