Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
File:                     mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft (raw, json)
Hash identifier:          Omj9IZzEr2X0Nv57sxnxUuivRFJcMri7SErAIgQZ2Ec=
Subject key identifier:   37:0F:1B:51:18:D5:BC:DB:E0:D7:E4:96:1C:0E:03:9C:80:6B:CE:77
Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
Certificate issuer:       /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Certificate serial:       01968A01083359AAC692B104563CAEAC589D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
Manifest number:          043D
Signing time:             Thu 01 May 2025 04:00:45 +0000
Manifest this update:     Thu 01 May 2025 04:00:45 +0000
Manifest next update:     Fri 02 May 2025 04:00:45 +0000
Files and hashes:         1: 0Xa-Nei_d95pLvklAjjCcq4wB50.roa (hash: IPQHZLb7lkBMMEnjRg8Zyo+jCG1PIyAJca8gIl7Nyqw=)
                          2: mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl (hash: 8KpnOVC5/zpwcHIFIZ+Ij0IaBwMR1uoxdNIcM2PQ174=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8a:01:08:33:59:aa:c6:92:b1:04:56:3c:ae:ac:58:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
        Validity
            Not Before: May  1 04:00:45 2025 GMT
            Not After : May  2 04:00:45 2025 GMT
        Subject: CN=370f1b5118d5bcdbe0d7e4961c0e039c806bce77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:fd:a4:59:c2:96:da:bc:ac:57:79:e0:47:
                    71:9f:ba:5f:58:a3:45:13:41:ed:a5:00:2e:eb:59:
                    b3:ed:e1:21:01:c1:a2:c3:d7:8d:8e:1d:56:ca:6a:
                    dc:01:38:9e:0c:f2:9d:51:69:89:36:56:82:6e:f5:
                    be:7d:47:7c:be:98:5b:d9:15:c9:c2:35:a4:40:8f:
                    56:f6:5d:46:67:c6:ee:fc:ae:95:ef:ba:47:4d:22:
                    d9:27:68:f1:b4:a5:e3:4b:8c:e9:31:19:4a:ce:35:
                    ec:51:ae:b0:ea:19:28:e9:39:ca:69:55:07:2d:77:
                    55:74:55:1d:b6:d3:d9:2e:3c:5e:b1:60:5f:d0:0d:
                    d8:30:e2:96:86:dc:2d:50:09:48:af:b2:f5:3b:81:
                    6d:cb:65:fc:4a:15:72:9a:ef:b9:d5:ff:1a:d8:8a:
                    3b:7d:7b:ce:02:b4:7c:a2:d9:12:6e:37:09:2e:cd:
                    08:7c:fc:00:97:e8:49:91:41:bf:9e:b8:da:28:2b:
                    01:af:f1:c8:13:b1:3f:8e:ff:7f:f2:46:70:eb:d5:
                    5d:40:9d:af:fa:b1:e2:ed:a0:e8:32:36:3d:ee:f6:
                    1f:5d:ff:0e:2f:63:35:32:09:bf:56:6c:77:92:1a:
                    85:84:a0:68:36:c9:d8:4e:e3:ef:13:8e:b1:99:db:
                    c9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0F:1B:51:18:D5:BC:DB:E0:D7:E4:96:1C:0E:03:9C:80:6B:CE:77
            X509v3 Authority Key Identifier:
                keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:c0:14:52:1d:a0:40:7e:13:50:e6:b3:1f:40:92:8b:25:fa:
         bc:4b:a5:0b:e5:23:66:37:bc:0c:aa:88:f7:d6:f7:c3:bc:6c:
         f7:b0:ff:27:ec:d4:e4:b4:2c:a3:a8:dc:bc:d0:c7:3b:f8:dd:
         0c:8b:f5:1c:24:de:e5:d3:e0:e7:64:03:7e:d5:34:bc:bb:8a:
         55:97:24:a4:47:38:a8:d8:2d:cd:85:55:eb:e3:f6:11:ef:82:
         97:9e:17:bf:16:e5:fa:b5:e9:de:92:49:76:fe:a4:4a:0f:73:
         82:d0:94:75:9f:04:96:b1:b9:57:bf:04:3b:e2:4c:0b:ae:8f:
         c1:a7:b0:14:68:02:f8:b0:60:99:5a:5c:d7:b5:e0:72:83:01:
         17:77:57:66:8c:fc:b4:13:10:48:00:d7:dd:c7:07:b6:27:3c:
         b2:3d:4a:9f:8f:23:5f:ca:5f:fa:2d:30:62:6f:18:52:59:9d:
         80:70:de:31:cd:6d:25:dc:92:09:3d:fb:57:cf:c5:5b:12:03:
         83:a4:9a:ad:a0:7b:24:ef:30:1b:06:4a:9b:c4:b9:89:1c:f9:
         60:b2:21:6e:bb:11:24:ab:9a:75:52:3a:a1:78:52:d6:b7:6b:
         3f:e9:d8:04:79:d7:ea:f6:32:a4:9f:27:eb:da:62:06:e4:dd:
         00:77:4a:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaKAQgzWarGkrEEVjyurFidMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMzgwYzU1YzQ2MTE3ZjlkMGY5Zjg5Zjg4NWZkOGFjNTg0
YzcyZTcwHhcNMjUwNTAxMDQwMDQ1WhcNMjUwNTAyMDQwMDQ1WjAzMTEwLwYDVQQD
EygzNzBmMWI1MTE4ZDViY2RiZTBkN2U0OTYxYzBlMDM5YzgwNmJjZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEz9pFnCltq8rFd54Edxn7pfWKNF
E0HtpQAu61mz7eEhAcGiw9eNjh1WymrcATieDPKdUWmJNlaCbvW+fUd8vphb2RXJ
wjWkQI9W9l1GZ8bu/K6V77pHTSLZJ2jxtKXjS4zpMRlKzjXsUa6w6hko6TnKaVUH
LXdVdFUdttPZLjxesWBf0A3YMOKWhtwtUAlIr7L1O4Fty2X8ShVymu+51f8a2Io7
fXvOArR8otkSbjcJLs0IfPwAl+hJkUG/nrjaKCsBr/HIE7E/jv9/8kZw69VdQJ2v
+rHi7aDoMjY97vYfXf8OL2M1Mgm/Vmx3khqFhKBoNsnYTuPvE46xmdvJfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDcPG1EY1bzb4NfklhwOA5yAa853MB8GA1UdIwQY
MBaAFJo4DFXEYRf50Pn4n4hf2KxYTHLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8wZjI2ODItOTg3OC00MTZiLTk2NWMt
NDBhYWM2Mzk2Nzc3LzEvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS8wZjI2ODItOTg3OC00MTZiLTk2NWMtNDBhYWM2Mzk2Nzc3
LzEvbWpnTVZjUmhGX25RLWZpZmlGX1lyRmhNY3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMAUUh2g
QH4TUOazH0CSiyX6vEulC+UjZje8DKqI99b3w7xs97D/J+zU5LQso6jcvNDHO/jd
DIv1HCTe5dPg52QDftU0vLuKVZckpEc4qNgtzYVV6+P2Ee+Cl54Xvxbl+rXp3pJJ
dv6kSg9zgtCUdZ8ElrG5V78EO+JMC66PwaewFGgC+LBgmVpc17XgcoMBF3dXZoz8
tBMQSADX3ccHtic8sj1Kn48jX8pf+i0wYm8YUlmdgHDeMc1tJdySCT37V8/FWxID
g6SaraB7JO8wGwZKm8S5iRz5YLIhbrsRJKuadVI6oXhS1rdrP+nYBHnX6vYypJ8n
69piBuTdAHdKOg==
-----END CERTIFICATE-----
Generated at Thu May 1 06:58:38 2025 by rpki-client