Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File:                     mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier:          ueLTXeMNID6uXvPKQnUvK6xaFEF3KVk5GDKpNtv/3g0=
Subject key identifier:   75:29:78:5D:A9:70:AB:8B:51:09:48:2C:15:35:2B:9C:6F:E9:07:17
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer:       /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial:       0197B6A22666C5E03FB0CC923DBE53C5266A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number:          F0
Signing time:             Sat 28 Jun 2025 13:02:49 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:49 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:49 +0000
Files and hashes:         1: XTu5vjEexW769xTu81kG0hu1WhA.roa (hash: Ne41d2x1Hfl8GjUz/n/mltRHcHp7ZxByOWAV8Ao4X7o=)
                          2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: HqDW6VKKIA3jOGNm1N1SZ0wSYt08ojGff58JKDpJWnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a2:26:66:c5:e0:3f:b0:cc:92:3d:be:53:c5:26:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
        Validity
            Not Before: Jun 28 13:02:49 2025 GMT
            Not After : Jun 29 13:02:49 2025 GMT
        Subject: CN=7529785da970ab8b5109482c15352b9c6fe90717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a6:af:cc:d2:db:42:f0:fc:a8:c1:af:79:44:
                    a6:69:4c:38:29:00:ef:c9:c3:da:88:9a:38:07:2a:
                    6c:95:9e:dc:f0:d9:1a:af:c9:f1:d5:18:98:ad:5d:
                    28:a6:0d:eb:85:0e:b5:e5:67:b5:df:6a:39:42:1f:
                    6c:cd:22:d8:04:b1:a0:5c:f5:15:84:6b:ad:a0:a1:
                    80:05:0f:fc:1a:0d:a6:f8:2c:62:00:87:70:96:bf:
                    35:b7:9b:5d:25:69:c0:86:26:eb:ba:59:7c:9f:d8:
                    19:17:3d:75:71:d1:81:1f:2b:c3:bf:22:82:62:d1:
                    a2:1b:2e:d2:5f:3e:f9:02:74:12:86:08:7b:87:62:
                    14:32:70:9c:36:42:e6:d2:62:e3:13:e0:58:0e:2c:
                    17:0e:08:1f:49:fb:6f:0e:f5:c2:c0:1a:e3:ad:58:
                    ad:fe:75:33:3b:e4:3f:94:da:00:8c:49:a9:56:e4:
                    c7:7a:3d:eb:95:86:fb:3d:c2:4d:c7:46:24:93:ce:
                    ea:36:47:51:be:47:4d:5d:29:e7:0e:bb:18:ad:00:
                    25:3a:79:5b:fc:65:ab:22:f0:ac:21:15:b6:4a:88:
                    3b:51:4b:1e:bb:c5:0b:ff:d3:ee:f5:7a:ad:42:61:
                    0f:6b:36:56:aa:fd:bf:a9:dc:8e:24:82:e3:66:1e:
                    d8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:29:78:5D:A9:70:AB:8B:51:09:48:2C:15:35:2B:9C:6F:E9:07:17
            X509v3 Authority Key Identifier:
                keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:6a:fa:33:94:cd:21:c7:71:2d:10:36:dc:c5:a0:7f:ac:95:
         fe:1e:79:f9:e2:08:65:56:d3:bd:f5:f6:cd:ec:49:34:80:f5:
         22:63:fe:82:ae:e4:a3:3e:df:ea:4d:8f:23:2a:0c:be:15:b8:
         f2:42:eb:ed:e4:c5:32:30:42:2b:c3:d5:7b:34:04:43:e2:06:
         24:f0:e2:ed:2a:f1:86:04:7f:88:41:84:81:f7:f9:56:bc:bf:
         d4:9d:b2:50:73:f4:11:75:1c:79:68:ae:25:99:d7:c6:70:02:
         01:dc:88:5b:6e:ac:5f:1b:d3:20:7a:0b:0f:ed:aa:5b:54:07:
         fa:41:e9:28:cd:8c:81:19:08:43:2b:6f:11:56:cf:61:f6:9d:
         9c:6a:82:8b:02:aa:e6:b9:76:d4:2b:19:e5:53:72:17:ad:ca:
         e1:08:05:4d:0b:79:ad:68:09:54:97:87:8b:76:99:8b:60:43:
         1e:69:78:fd:b8:81:e7:da:78:25:8b:26:50:de:3b:c0:87:0a:
         33:44:71:a6:82:de:03:72:20:e0:82:78:49:0d:3d:5d:e0:17:
         eb:ca:bb:60:c8:41:8c:7d:c6:c9:40:97:44:9c:63:f1:be:bb:
         96:85:87:d3:26:a2:dc:33:2f:87:cb:12:a7:a8:1a:3b:60:47:
         55:be:cf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:39 2025 by rpki-client