Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
File:                     9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json)
Hash identifier:          u9YpWYwNYvx+39RFUI1pgQ3TFjmWgMrC89c5rysvp5k=
Subject key identifier:   38:C5:E5:E9:7A:98:C4:BD:6C:C3:02:7C:F4:29:5D:D4:89:83:10:EB
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Certificate issuer:       /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial:       01988AA11BB3B3E65031DE441F656F366C51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
Manifest number:          0C42
Signing time:             Fri 08 Aug 2025 17:01:10 +0000
Manifest this update:     Fri 08 Aug 2025 17:01:10 +0000
Manifest next update:     Sat 09 Aug 2025 17:01:10 +0000
Files and hashes:         1: 2fQddCIl-7Oq1WuhVFDb_ItwFWs.roa (hash: G5bUTFThyurFxXPOBBEBFBWKjBkZ0p5sb4xbB9qr44M=)
                          2: 37QCkG1k9gzLrRMVOTELOapS-4Y.roa (hash: fObIS1yLlqyANULO1cGplwcB5m0pXnjdZmigUly+6NA=)
                          3: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: 8HvB5F6JNfBZbSA2PKIN/gE6vCQdcKy3XbBYIjnCuds=)
                          4: C8rZpiwRRKp7HiBYnxrXRCtzNP4.roa (hash: /a2qXNrKqG5G3jKSkvjhWWJd/4eBrgaawytg7M/VZPQ=)
                          5: gAIi2RzKXjXCtYGsVRw03pRZYeU.roa (hash: PvQsJF0P/z+mLUrW2+GtvSyLdhymARBFgfCdxNsU3JE=)
                          6: hkqOX4mECokeZ3ChLO-NkzoKVG0.roa (hash: jDSI0Vi3uJHnivxkTcLJyUGbXo6jl9OF+5YD1t9wHog=)
                          7: mo1ZQeGNb6y397AsNPVU_jqzCH8.roa (hash: xvLDiC6sAtB273J1JQ2La6KkENHeWFLQMNh6wUa0JGU=)
                          8: xEaq7kolhQn1OmIod6QQM1Gthtk.roa (hash: IC+2lUW0/0ySDq3Q6puBeGjrJpCDJAXfXz5IauHoRHE=)
                          9: yZE684PU1B3lT-aKA30arKwyTEI.roa (hash: isFNdgWP0HVp5O76X23OI/gh9YCy0xYVcwqK0QPMZ60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:a1:1b:b3:b3:e6:50:31:de:44:1f:65:6f:36:6c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
        Validity
            Not Before: Aug  8 17:01:10 2025 GMT
            Not After : Aug  9 17:01:10 2025 GMT
        Subject: CN=38c5e5e97a98c4bd6cc3027cf4295dd4898310eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:88:40:db:c1:88:aa:14:5e:e8:a4:c1:e5:85:
                    71:fb:df:9a:db:d1:11:4c:40:b1:bb:ea:d6:b0:8c:
                    c9:43:7b:c2:37:c8:81:3d:50:a1:60:01:b6:a9:6d:
                    5c:9b:bc:9a:67:67:cc:7c:cf:2c:59:cb:49:d2:3e:
                    f3:60:02:c3:14:da:29:76:32:da:28:ba:14:53:34:
                    75:27:1d:e8:f9:16:c8:2b:77:91:59:20:83:6c:31:
                    20:c2:8c:f0:54:e4:d4:5a:a6:48:86:46:d9:10:b1:
                    4c:f1:18:6b:96:ec:1c:77:d9:9d:16:94:c0:97:a2:
                    9f:84:74:17:b3:56:b4:e2:b4:39:c7:a5:b1:29:4a:
                    db:48:dd:f3:4d:4e:e8:09:4f:5c:a4:7e:00:9f:25:
                    2c:bb:b8:60:d3:77:8a:b1:c0:28:84:1e:8d:a5:f6:
                    ef:72:90:8e:a9:35:73:05:65:20:e4:35:ff:27:07:
                    0b:62:5d:9b:70:e7:22:22:77:d6:6c:75:63:8c:2a:
                    3c:08:f8:6c:ba:50:d4:82:cc:53:48:2d:9d:6a:c2:
                    36:d1:d1:fb:7f:a4:e1:00:25:b6:b5:0f:ad:26:30:
                    d4:86:73:a1:eb:7b:3b:8b:1f:62:db:e6:55:ea:41:
                    ff:d2:ba:96:71:bf:9d:5e:ae:6a:8e:0a:7b:68:fa:
                    a5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C5:E5:E9:7A:98:C4:BD:6C:C3:02:7C:F4:29:5D:D4:89:83:10:EB
            X509v3 Authority Key Identifier:
                keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:67:b5:9c:31:92:ab:fe:f2:3b:a0:9a:49:05:aa:f1:85:77:
         6d:e7:d7:54:a5:9f:7f:0c:dc:f5:d1:83:05:54:4d:97:7c:b2:
         0b:3d:de:dd:42:93:94:bb:ca:ee:f4:c9:5e:4f:46:91:ee:38:
         46:eb:b0:a7:44:5e:c4:a9:c4:e8:b8:49:05:10:ae:5a:0d:93:
         e5:2b:b8:2a:1b:23:c3:30:de:f1:6d:d2:44:dc:2f:07:12:83:
         39:18:8d:e7:15:18:92:2f:4f:02:25:86:d7:8b:d2:89:13:16:
         ff:28:c0:a0:c8:af:39:1e:bc:a8:40:b9:27:91:8b:aa:95:6d:
         ce:1e:c3:54:fc:0a:0d:12:48:2c:8e:5e:a5:a1:20:ce:f9:6e:
         30:cf:bf:51:5c:26:40:d8:a0:01:1a:c6:38:8e:bf:d6:d1:bf:
         8c:6c:78:ba:0c:da:17:4d:a9:de:cd:95:de:86:73:0e:b2:09:
         c2:a6:4b:b1:d3:91:2d:44:19:bb:ce:2f:82:10:e6:98:05:9d:
         73:c2:63:7d:c2:27:a6:5e:fa:4b:d6:cf:e4:7e:b0:67:8f:19:
         27:7f:c2:a0:13:9e:5a:d8:42:5b:d4:20:4c:fc:40:42:11:00:
         fc:b7:22:09:6a:dc:18:23:95:d8:b8:81:61:d9:9d:8c:e4:40:
         e8:5a:ba:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKoRuzs+ZQMd5EH2VvNmxRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZDlhOTI4MmM5ZDI1NDdjNTY2NjM0ZjNiYWNjY2JjZjI1
ODg4MjcwHhcNMjUwODA4MTcwMTEwWhcNMjUwODA5MTcwMTEwWjAzMTEwLwYDVQQD
EygzOGM1ZTVlOTdhOThjNGJkNmNjMzAyN2NmNDI5NWRkNDg5ODMxMGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYhA28GIqhRe6KTB5YVx+9+a29ER
TECxu+rWsIzJQ3vCN8iBPVChYAG2qW1cm7yaZ2fMfM8sWctJ0j7zYALDFNopdjLa
KLoUUzR1Jx3o+RbIK3eRWSCDbDEgwozwVOTUWqZIhkbZELFM8Rhrluwcd9mdFpTA
l6KfhHQXs1a04rQ5x6WxKUrbSN3zTU7oCU9cpH4AnyUsu7hg03eKscAohB6Npfbv
cpCOqTVzBWUg5DX/JwcLYl2bcOciInfWbHVjjCo8CPhsulDUgsxTSC2dasI20dH7
f6ThACW2tQ+tJjDUhnOh63s7ix9i2+ZV6kH/0rqWcb+dXq5qjgp7aPqloQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjF5el6mMS9bMMCfPQpXdSJgxDrMB8GA1UdIwQY
MBaAFPXZqSgsnSVHxWZjTzuszLzyWIgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjct
OGNmNDFjYWZkY2UyLzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjctOGNmNDFjYWZkY2Uy
LzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGe1nDGS
q/7yO6CaSQWq8YV3befXVKWffwzc9dGDBVRNl3yyCz3e3UKTlLvK7vTJXk9Gke44
Ruuwp0RexKnE6LhJBRCuWg2T5Su4KhsjwzDe8W3SRNwvBxKDORiN5xUYki9PAiWG
14vSiRMW/yjAoMivOR68qEC5J5GLqpVtzh7DVPwKDRJILI5epaEgzvluMM+/UVwm
QNigARrGOI6/1tG/jGx4ugzaF02p3s2V3oZzDrIJwqZLsdORLUQZu84vghDmmAWd
c8JjfcInpl76S9bP5H6wZ48ZJ3/CoBOeWthCW9QgTPxAQhEA/LciCWrcGCOV2LiB
YdmdjORA6Fq6/Q==
-----END CERTIFICATE-----
Generated at Fri Aug 8 21:00:09 2025 by rpki-client