Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
File:                     9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json)
Hash identifier:          i2x/jfzFDnVSqzv5v3fVkk9Txp4THDnCtvr1maol8c4=
Subject key identifier:   B5:4E:74:08:FF:11:DD:EF:18:57:27:94:AD:6C:BF:2A:4C:67:CE:88
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Certificate issuer:       /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial:       0196C126699422E794DCDFC8B492B9794A55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
Manifest number:          0B51
Signing time:             Sun 11 May 2025 21:00:42 +0000
Manifest this update:     Sun 11 May 2025 21:00:42 +0000
Manifest next update:     Mon 12 May 2025 21:00:42 +0000
Files and hashes:         1: 37QCkG1k9gzLrRMVOTELOapS-4Y.roa (hash: fObIS1yLlqyANULO1cGplwcB5m0pXnjdZmigUly+6NA=)
                          2: 3RdZANpVovPRB4zCH-Lkf3Prtaw.roa (hash: l5w5cnd2tEXGGJFzz40s0YV//kdA+ReRwmR0KmdVVDU=)
                          3: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: l2LSP02BaP7/c69ThrhZgq+GeyIz3O7b1fyv0e3m7Gw=)
                          4: C8rZpiwRRKp7HiBYnxrXRCtzNP4.roa (hash: /a2qXNrKqG5G3jKSkvjhWWJd/4eBrgaawytg7M/VZPQ=)
                          5: H6_j121nwrBmCty1wbdXDXgyav8.roa (hash: vaRQnvr04lMFV87aznhgmJYTb/5VAEUEaBeFpioyQ+k=)
                          6: PpuH6UZdHiPbsmr0e060Bitru2g.roa (hash: S+KU/xPGIUttnT6f0HUq3beFm6aOsdHTB3Cjru0v55o=)
                          7: QzeYJ0KS9RnXOpGwg30dLB7QNtM.roa (hash: GvxqUqeToEyuHItwEPwmlJxDN8bC2ihCXeSL11W/nwA=)
                          8: xEaq7kolhQn1OmIod6QQM1Gthtk.roa (hash: IC+2lUW0/0ySDq3Q6puBeGjrJpCDJAXfXz5IauHoRHE=)
                          9: yZE684PU1B3lT-aKA30arKwyTEI.roa (hash: isFNdgWP0HVp5O76X23OI/gh9YCy0xYVcwqK0QPMZ60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:26:69:94:22:e7:94:dc:df:c8:b4:92:b9:79:4a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
        Validity
            Not Before: May 11 21:00:42 2025 GMT
            Not After : May 12 21:00:42 2025 GMT
        Subject: CN=b54e7408ff11ddef18572794ad6cbf2a4c67ce88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b8:17:39:33:cd:3f:69:70:dc:60:0f:c7:6b:
                    0d:7c:d4:f6:cd:d2:7a:0e:1d:58:6e:e5:19:40:e2:
                    f9:1d:7e:8c:4c:54:88:c5:44:a1:76:80:a0:1c:b1:
                    6f:c3:fe:cc:34:80:2a:f1:94:75:58:64:b8:9d:4a:
                    77:40:8b:28:b3:e7:90:2f:8b:41:1b:5e:7a:24:7c:
                    b1:cd:3e:93:c5:92:5a:0b:fa:3f:89:36:85:06:fa:
                    5b:33:e3:f3:5c:b0:79:c0:34:43:38:74:5e:59:9f:
                    0e:fb:c5:4d:13:88:5b:2d:f2:7d:02:59:7c:fb:a2:
                    49:02:d5:10:e2:3f:1a:96:35:dd:74:c2:d2:8a:b2:
                    b2:6b:c5:32:e7:9c:a3:2a:de:18:84:53:dd:e9:35:
                    9a:f4:87:e9:64:d8:e8:4a:e4:0e:14:c2:80:04:27:
                    5a:4a:63:ff:4f:9a:84:85:11:03:8d:03:5c:a3:c2:
                    03:e2:3c:99:76:ce:2e:cf:1a:5b:5b:9e:34:1b:bf:
                    9d:1b:51:01:2f:ec:5b:1c:72:b7:af:0c:bf:90:5d:
                    7e:fb:28:9a:bf:e7:54:77:2a:16:51:d2:51:6c:51:
                    9a:31:02:a5:fb:e9:15:c2:35:f3:fa:4c:bf:32:ed:
                    50:37:64:c9:46:a8:59:ad:84:ca:0f:ab:01:32:46:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:4E:74:08:FF:11:DD:EF:18:57:27:94:AD:6C:BF:2A:4C:67:CE:88
            X509v3 Authority Key Identifier:
                keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:4f:61:fb:2f:e0:2c:50:e5:52:40:d6:00:3f:d5:08:91:f5:
         35:f1:d0:77:6b:63:4c:dc:74:b8:7c:70:dd:a7:2a:79:fc:24:
         fa:22:32:59:4a:dd:46:b7:7b:c9:b0:e3:d2:74:d5:7d:1d:71:
         52:51:76:ae:11:57:96:df:5b:07:a4:f9:48:5f:32:1b:e1:f7:
         b3:3a:af:d6:c0:a9:97:0a:fa:7e:40:86:3f:00:73:79:0d:6b:
         28:83:c8:9f:ff:3b:40:fb:13:a6:1a:38:8a:d9:b0:1a:d1:3d:
         a4:c8:5a:57:e1:f2:11:88:8e:65:c0:68:20:1d:ad:a5:1c:56:
         5f:72:cf:09:63:af:4d:c2:0d:2a:d9:ce:40:2a:51:a9:2e:f9:
         2e:a7:51:a4:bf:a8:00:5c:0b:22:74:29:ce:7a:32:dc:ac:b7:
         23:b7:84:3f:72:c5:ce:fa:c3:f3:db:59:a4:0f:5f:4b:05:0e:
         3c:74:11:88:8f:47:a7:63:51:67:05:dd:1f:93:4d:6e:77:6b:
         c9:4b:24:e6:cd:50:96:7c:f6:05:a7:54:79:31:d9:a3:4c:b3:
         fd:df:ca:77:70:94:92:17:ac:c4:c0:9d:85:46:e6:e0:f5:3e:
         c7:8a:15:51:cf:4b:40:2c:a0:88:76:53:c0:f3:ba:74:ef:94:
         9a:e5:8e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:54:20 2025 by rpki-client