Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
File:                     9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json)
Hash identifier:          HjBAyi2Up1HkM/5EbQ0ADlSJ7+tdNgmhDgO+4KRi0qk=
Subject key identifier:   3C:4C:30:54:5B:42:B2:D3:0F:A1:04:63:72:32:59:CD:9B:EA:04:7E
Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27
Certificate issuer:       /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
Certificate serial:       019689255E79479B0F70FFD3294252654145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
Manifest number:          0B34
Signing time:             Thu 01 May 2025 00:00:49 +0000
Manifest this update:     Thu 01 May 2025 00:00:49 +0000
Manifest next update:     Fri 02 May 2025 00:00:49 +0000
Files and hashes:         1: 37QCkG1k9gzLrRMVOTELOapS-4Y.roa (hash: fObIS1yLlqyANULO1cGplwcB5m0pXnjdZmigUly+6NA=)
                          2: 3RdZANpVovPRB4zCH-Lkf3Prtaw.roa (hash: l5w5cnd2tEXGGJFzz40s0YV//kdA+ReRwmR0KmdVVDU=)
                          3: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: UPznEKxDW89AQHGBZfv8xuBsM/Eck0jlyovmNsZ/WXY=)
                          4: C8rZpiwRRKp7HiBYnxrXRCtzNP4.roa (hash: /a2qXNrKqG5G3jKSkvjhWWJd/4eBrgaawytg7M/VZPQ=)
                          5: H6_j121nwrBmCty1wbdXDXgyav8.roa (hash: vaRQnvr04lMFV87aznhgmJYTb/5VAEUEaBeFpioyQ+k=)
                          6: PpuH6UZdHiPbsmr0e060Bitru2g.roa (hash: S+KU/xPGIUttnT6f0HUq3beFm6aOsdHTB3Cjru0v55o=)
                          7: QzeYJ0KS9RnXOpGwg30dLB7QNtM.roa (hash: GvxqUqeToEyuHItwEPwmlJxDN8bC2ihCXeSL11W/nwA=)
                          8: xEaq7kolhQn1OmIod6QQM1Gthtk.roa (hash: IC+2lUW0/0ySDq3Q6puBeGjrJpCDJAXfXz5IauHoRHE=)
                          9: yZE684PU1B3lT-aKA30arKwyTEI.roa (hash: isFNdgWP0HVp5O76X23OI/gh9YCy0xYVcwqK0QPMZ60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:25:5e:79:47:9b:0f:70:ff:d3:29:42:52:65:41:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827
        Validity
            Not Before: May  1 00:00:49 2025 GMT
            Not After : May  2 00:00:49 2025 GMT
        Subject: CN=3c4c30545b42b2d30fa10463723259cd9bea047e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:06:e8:de:0d:c0:33:26:0d:bf:71:58:f5:ef:
                    0d:e5:f0:37:f6:05:e2:0d:88:7e:1c:7b:01:18:cd:
                    0f:70:9e:ee:c6:52:11:1c:46:26:89:ba:db:d1:0c:
                    06:e0:fa:80:9b:6c:57:50:e6:54:5c:db:af:f8:e6:
                    5a:4e:bd:09:92:e7:e6:0a:0f:ea:44:04:9b:42:39:
                    71:04:07:0c:7b:46:0a:25:03:f6:56:2a:04:f8:ec:
                    65:a0:d6:43:78:7f:05:93:7e:d9:7b:45:e2:c6:63:
                    10:cb:ce:c1:a8:e3:f6:e4:70:94:eb:d9:e6:08:68:
                    a6:6d:e3:36:81:ce:02:06:81:54:15:a7:da:6f:dc:
                    f6:f5:bd:b6:39:e4:c4:6e:66:6f:8a:ea:c3:85:76:
                    06:7c:fe:e1:72:b0:ec:29:ef:43:30:dc:b2:58:05:
                    81:e0:19:5d:81:2e:d1:77:9f:8f:b9:df:bb:05:2d:
                    df:6a:55:b4:be:ff:74:99:5f:8c:e7:0f:4c:8b:9d:
                    df:ca:9a:30:87:5d:9a:55:7a:d7:f1:89:21:3f:c0:
                    37:66:68:18:1c:73:17:67:06:93:07:bb:53:62:ba:
                    57:e5:3d:dc:8e:40:d8:a1:94:20:10:86:89:79:02:
                    6f:8d:da:56:a5:bc:0c:b5:a2:fa:57:4f:51:1c:01:
                    39:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4C:30:54:5B:42:B2:D3:0F:A1:04:63:72:32:59:CD:9B:EA:04:7E
            X509v3 Authority Key Identifier:
                keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:01:da:92:ba:06:40:68:c8:59:44:97:39:4e:3f:17:d6:74:
         c0:18:f3:a6:e5:ca:6f:0e:8d:6d:8e:ab:16:da:e4:f6:ae:d4:
         ee:2a:15:bb:38:34:4e:41:3a:a5:a1:79:01:bc:3a:05:dc:7c:
         56:d7:14:9b:18:6c:eb:69:14:4c:0a:32:31:fa:f7:c9:c7:d6:
         33:46:39:c1:e4:c6:53:db:40:67:1e:79:04:d0:5c:69:b6:94:
         61:e6:50:11:e6:83:15:7f:ea:91:f3:55:b6:63:93:b0:af:76:
         89:c6:d9:e4:2c:11:eb:63:41:f7:06:9d:ed:a9:2b:0a:80:62:
         a5:da:7a:8b:ac:8e:32:35:ed:fb:66:bb:23:c5:0a:bf:f0:4b:
         f3:66:64:66:41:fc:cc:9a:80:df:6a:11:52:6c:8f:04:79:52:
         e6:40:59:af:ca:8d:79:66:05:48:33:4d:e3:61:85:76:d7:9e:
         c8:0a:c4:1a:d1:6b:8e:0e:aa:41:e6:b4:a4:5d:c8:b1:d6:eb:
         21:b4:47:6f:ac:70:de:84:ad:95:d5:56:a0:ac:8d:a2:47:d5:
         f2:96:7e:e2:96:e9:06:7d:31:06:1d:15:e5:b8:74:be:19:ec:
         62:f9:65:ba:68:63:29:82:29:04:58:e0:71:65:83:7a:25:78:
         75:e2:2b:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJJV55R5sPcP/TKUJSZUFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZDlhOTI4MmM5ZDI1NDdjNTY2NjM0ZjNiYWNjY2JjZjI1
ODg4MjcwHhcNMjUwNTAxMDAwMDQ5WhcNMjUwNTAyMDAwMDQ5WjAzMTEwLwYDVQQD
EygzYzRjMzA1NDViNDJiMmQzMGZhMTA0NjM3MjMyNTljZDliZWEwNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgbo3g3AMyYNv3FY9e8N5fA39gXi
DYh+HHsBGM0PcJ7uxlIRHEYmibrb0QwG4PqAm2xXUOZUXNuv+OZaTr0JkufmCg/q
RASbQjlxBAcMe0YKJQP2VioE+OxloNZDeH8Fk37Ze0XixmMQy87BqOP25HCU69nm
CGimbeM2gc4CBoFUFafab9z29b22OeTEbmZviurDhXYGfP7hcrDsKe9DMNyyWAWB
4BldgS7Rd5+Pud+7BS3falW0vv90mV+M5w9Mi53fypowh12aVXrX8YkhP8A3ZmgY
HHMXZwaTB7tTYrpX5T3cjkDYoZQgEIaJeQJvjdpWpbwMtaL6V09RHAE59QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxMMFRbQrLTD6EEY3IyWc2b6gR+MB8GA1UdIwQY
MBaAFPXZqSgsnSVHxWZjTzuszLzyWIgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjct
OGNmNDFjYWZkY2UyLzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjctOGNmNDFjYWZkY2Uy
LzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwHakroG
QGjIWUSXOU4/F9Z0wBjzpuXKbw6NbY6rFtrk9q7U7ioVuzg0TkE6paF5Abw6Bdx8
VtcUmxhs62kUTAoyMfr3ycfWM0Y5weTGU9tAZx55BNBcabaUYeZQEeaDFX/qkfNV
tmOTsK92icbZ5CwR62NB9wad7akrCoBipdp6i6yOMjXt+2a7I8UKv/BL82ZkZkH8
zJqA32oRUmyPBHlS5kBZr8qNeWYFSDNN42GFdteeyArEGtFrjg6qQea0pF3Isdbr
IbRHb6xw3oStldVWoKyNokfV8pZ+4pbpBn0xBh0V5bh0vhnsYvllumhjKYIpBFjg
cWWDeiV4deIr5w==
-----END CERTIFICATE-----
Generated at Thu May 1 10:04:15 2025 by rpki-client