Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
File:                     mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft (raw, json)
Hash identifier:          QnLb0RThbj+VGqKLKGF3bzmuiCh1zcOeqte4dmG5pyo=
Subject key identifier:   0F:A3:7F:0A:DD:FB:FA:1D:B6:57:C4:51:FD:56:84:65:A4:F9:BA:72
Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
Certificate issuer:       /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Certificate serial:       01978CC8951F55E1FD91EDAAD4599B3586AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
Manifest number:          04C3
Signing time:             Fri 20 Jun 2025 10:00:44 +0000
Manifest this update:     Fri 20 Jun 2025 10:00:44 +0000
Manifest next update:     Sat 21 Jun 2025 10:00:44 +0000
Files and hashes:         1: 0Xa-Nei_d95pLvklAjjCcq4wB50.roa (hash: IPQHZLb7lkBMMEnjRg8Zyo+jCG1PIyAJca8gIl7Nyqw=)
                          2: mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl (hash: aKBTngidRvLhk45/lwprLBNQYF13CXK5fhs9CCia4S0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Jun 2025 04:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:8c:c8:95:1f:55:e1:fd:91:ed:aa:d4:59:9b:35:86:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
        Validity
            Not Before: Jun 20 10:00:44 2025 GMT
            Not After : Jun 21 10:00:44 2025 GMT
        Subject: CN=0fa37f0addfbfa1db657c451fd568465a4f9ba72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4d:39:f3:84:9d:2a:b8:ff:e6:eb:49:3a:25:
                    3f:b3:13:74:8d:24:a7:1d:db:d1:c1:47:01:c3:c6:
                    33:32:18:d0:4e:ae:a1:3b:cd:f3:29:fe:79:88:70:
                    ec:c2:14:d4:59:59:5b:b5:81:1f:16:ec:5f:e0:1c:
                    be:e7:65:8c:09:1e:a0:d9:2c:d0:7a:ca:4f:2e:b7:
                    48:6c:42:14:47:e8:44:4a:0b:56:4e:c8:46:a4:9f:
                    86:5e:4b:2b:a2:1d:11:39:41:8d:b4:98:5b:35:0a:
                    44:ce:7b:54:cd:7d:23:c4:b6:10:2a:a4:ed:b2:8a:
                    b9:39:5a:19:0d:4f:eb:cd:67:15:40:fa:4a:6d:2d:
                    7b:bd:63:09:03:4d:5f:46:f8:d4:32:c6:a6:74:de:
                    38:4a:b3:ba:52:06:60:35:dc:f4:1a:90:24:2d:72:
                    2f:ff:96:45:f1:1c:bb:c9:0f:04:12:f6:17:5c:14:
                    68:52:ec:23:0d:1b:3c:3d:4d:0c:97:8c:3c:c9:09:
                    ae:75:11:5d:e2:62:d4:7f:4a:34:b1:db:5e:f2:d7:
                    53:09:d0:1c:90:88:32:6d:bc:1d:a7:9d:66:77:e9:
                    58:8f:e9:c9:ae:77:0e:d3:01:57:d8:9a:2d:de:c3:
                    33:9a:02:da:ee:2b:b1:6f:f5:a1:74:e6:93:2a:d8:
                    f9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:A3:7F:0A:DD:FB:FA:1D:B6:57:C4:51:FD:56:84:65:A4:F9:BA:72
            X509v3 Authority Key Identifier:
                keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:98:c5:73:15:f8:2f:19:45:b0:eb:40:91:a7:e0:5d:65:91:
         92:90:fd:f5:d5:59:31:71:7a:2e:78:08:d7:dd:d7:c7:f6:06:
         93:50:0c:68:ca:3a:d6:c2:51:43:b3:c9:d1:47:bb:73:a5:7c:
         28:36:92:24:f8:b8:64:d6:16:f6:bc:ff:78:26:1a:b0:5a:62:
         63:dd:39:5b:24:1d:44:f5:16:d7:c8:ba:67:c2:95:ab:36:bb:
         55:1b:54:1b:99:98:e9:f4:8d:13:2f:5b:9d:69:7f:f3:0f:f0:
         ca:d7:2d:9b:1c:30:98:8b:b5:77:b6:e3:8b:55:76:9f:0c:c5:
         2d:fd:81:6a:06:65:35:37:a5:57:d6:db:84:8f:24:06:59:a2:
         c8:4b:92:fc:6b:12:95:78:55:aa:53:17:dc:11:47:64:7f:d0:
         e7:a5:30:16:bd:a6:f2:c1:43:ad:18:97:86:f7:0b:5d:0c:52:
         1d:f3:fb:34:6c:df:e6:1c:fa:e3:4f:d9:d5:4b:6e:c2:58:eb:
         55:9b:31:2e:b1:5a:ad:80:8e:1d:55:01:6c:cb:dd:f0:ba:53:
         9a:eb:71:c0:d4:e0:af:34:6e:3e:1c:fe:94:5c:a0:e7:7b:d6:
         33:07:b2:ea:7f:bb:53:1a:fc:4f:3e:fe:fe:21:f9:7d:79:5d:
         49:83:10:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:17:29 2025 by rpki-client