Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File:                     s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier:          g9cv1vJO10/+QKWbok631d54gRpp9G3LxDhIxvJ0MIE=
Subject key identifier:   AB:ED:98:07:0C:84:31:BF:FF:51:E3:B5:C3:E1:AB:F5:B3:0A:36:34
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer:       /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial:       0197B6A0FABC9762C9DBB351E6480B4E30DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number:          15B9
Signing time:             Sat 28 Jun 2025 13:01:32 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:32 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:32 +0000
Files and hashes:         1: 4t1UxScYEc1MQQvb1JnztjogsBk.roa (hash: Dr1ii5dB9TFuR2r1BRNQYvLkf66wHtEAs6oE3mutbkk=)
                          2: XvQSYP0gBwV_2W1TwyZ9q7f08x4.roa (hash: 4KSvLtvpZswpayMP+WjZ+QORjoSpSFJrnConIM4+/0A=)
                          3: l1XZX1b8reS_-7ZSCMj6Ssj_O6w.roa (hash: RmqK144BBUUebNDsDUz/Y3m99tgJ/EBiLtpE9PQVqL0=)
                          4: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: guAF1W/bmb4KxpqXtQf5vXMIMgI8NiojWJTV69Scdg4=)
                          5: sKWAbqAA__OjcTRSqYb5uv2iH2g.roa (hash: Qi3g/XMjZpErCZOt692v0V5M83CBTDycMOtYB7JuINo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:fa:bc:97:62:c9:db:b3:51:e6:48:0b:4e:30:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
        Validity
            Not Before: Jun 28 13:01:32 2025 GMT
            Not After : Jun 29 13:01:32 2025 GMT
        Subject: CN=abed98070c8431bfff51e3b5c3e1abf5b30a3634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:12:e3:e5:f8:a3:05:1f:fa:6a:33:15:16:
                    7d:52:58:b0:9f:13:48:07:37:3b:09:8a:b0:05:67:
                    da:df:68:ec:08:31:68:b3:2f:93:31:87:38:0e:cf:
                    02:da:a1:2b:cd:27:0a:da:07:c8:c3:37:ff:25:4a:
                    e8:40:35:8c:c2:46:18:56:e9:24:56:ed:23:cb:1e:
                    36:44:17:96:4b:84:11:13:c8:b9:22:03:41:75:d0:
                    eb:82:2c:bb:13:65:e1:79:f7:77:af:6e:ad:86:a6:
                    9b:9f:0d:6a:f2:94:8c:8d:d2:e4:5b:59:25:4b:ed:
                    6b:de:0c:ce:d3:33:2d:b7:85:c4:0a:54:81:1a:e4:
                    b3:80:eb:30:c3:e2:6e:76:f9:1b:0e:2a:ec:52:b6:
                    d4:9b:99:0f:fd:fd:86:21:38:62:c7:73:9f:db:5e:
                    86:c3:6d:6d:46:60:e3:f2:87:27:ba:e2:23:71:37:
                    cd:8e:ea:af:f8:29:96:4a:fb:be:c9:2b:9e:32:d3:
                    1b:77:ce:aa:e0:90:55:97:19:92:46:8d:8a:e9:21:
                    6e:25:19:d2:83:58:c6:cb:4d:ab:be:e8:4e:68:29:
                    a5:04:35:61:05:da:a2:8a:76:ad:a8:18:f8:7f:44:
                    d5:e0:e4:42:2b:81:95:be:bf:83:76:06:b5:8e:90:
                    68:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:ED:98:07:0C:84:31:BF:FF:51:E3:B5:C3:E1:AB:F5:B3:0A:36:34
            X509v3 Authority Key Identifier:
                keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ca:15:21:17:c8:2e:0f:a1:34:56:86:92:81:23:c0:2d:db:
         40:70:83:f2:b2:70:bc:57:13:f2:9c:19:d2:a2:92:57:c3:ca:
         2a:7c:65:9b:cf:dc:8f:fd:bf:8e:1a:da:a0:e5:aa:e8:48:e1:
         24:09:90:bc:aa:3a:65:6c:a1:31:4a:e0:75:69:43:d7:24:f0:
         29:3c:79:5e:ca:4c:ba:40:cc:ea:c7:a6:52:5e:ef:9c:35:ca:
         c9:c6:14:5c:63:3b:07:1c:81:20:bd:5a:a1:58:95:94:d9:97:
         83:a8:24:a3:67:81:80:49:4f:5d:94:96:aa:f3:80:19:1d:98:
         be:dd:69:dc:83:1e:fc:e2:82:51:6a:8b:06:aa:ba:35:b3:1f:
         80:1a:8d:7d:77:03:05:ee:4e:28:96:2a:39:4b:5d:c0:f0:73:
         0c:c4:77:a2:e0:a4:82:03:dc:c1:d2:af:6e:4e:3f:31:34:1e:
         b5:70:9c:22:bf:64:6d:24:ae:ef:69:3f:c6:9e:bf:0f:89:38:
         bf:48:8e:b6:25:95:fc:00:80:25:b8:89:f7:18:79:60:1b:41:
         f9:1f:90:6b:f8:58:13:7c:ff:ec:6d:35:ce:1d:eb:0b:6c:ff:
         5e:22:05:4c:d2:20:95:84:22:78:21:36:1a:ee:60:a5:58:d5:
         e2:84:76:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:29:28 2025 by rpki-client