Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
File:                     mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft (raw, json)
Hash identifier:          7w5eU+4Fg3L4tZLKzEyT1nuL7TdOUrgUSBN6XcUfk4I=
Subject key identifier:   2A:C1:9C:94:10:AF:F3:C0:B7:D6:AC:12:AD:89:0C:F1:9F:94:C2:8B
Authority key identifier: 9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC
Certificate issuer:       /CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
Certificate serial:       01987E2EB44C595287E08F5148C4668B7E5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
Manifest number:          0A80
Signing time:             Wed 06 Aug 2025 07:00:46 +0000
Manifest this update:     Wed 06 Aug 2025 07:00:46 +0000
Manifest next update:     Thu 07 Aug 2025 07:00:46 +0000
Files and hashes:         1: mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl (hash: qXmhXbAeH1Az0tbgF80gdNt0TjvNyfoCilFpW48fS00=)
                          2: yetABbyl2MadBOs3otjwQ2Snhiw.roa (hash: QjHSeYtiJ8ed7+XFEV/Jho222/lz+EVhX5TG4jAr6Y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:2e:b4:4c:59:52:87:e0:8f:51:48:c4:66:8b:7e:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
        Validity
            Not Before: Aug  6 07:00:46 2025 GMT
            Not After : Aug  7 07:00:46 2025 GMT
        Subject: CN=2ac19c9410aff3c0b7d6ac12ad890cf19f94c28b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8f:b2:ba:12:d6:8d:7e:3f:e8:4d:b6:07:55:
                    83:da:09:05:eb:8c:ff:a0:4c:6f:59:16:38:d0:f5:
                    39:37:f3:98:46:82:d7:db:16:73:0b:64:49:5d:1b:
                    f4:2d:d0:a8:65:7d:ce:eb:96:3e:19:0e:cf:d0:58:
                    da:61:50:79:c8:ad:29:85:83:9d:33:95:f0:80:3b:
                    1e:dd:f1:ef:6f:90:b1:f7:23:6a:af:8f:a8:f8:95:
                    77:b9:65:a7:29:3c:09:10:af:64:db:a1:e6:aa:4d:
                    8f:5a:36:12:13:df:21:70:d6:1b:84:dd:a4:66:3f:
                    5a:b7:de:3e:7b:10:fe:3a:50:19:f3:cf:86:14:1a:
                    45:56:cb:e2:ce:09:b6:87:75:ce:83:7a:a9:dd:3d:
                    28:c1:3b:9c:46:71:31:e3:7e:2c:f4:3e:fd:1b:99:
                    f4:aa:a8:ec:0d:c2:6f:90:9b:de:b7:20:a5:38:d2:
                    5d:ab:da:54:fd:ce:5b:45:1d:f3:22:d7:02:89:6a:
                    6a:03:ba:28:2a:a5:9a:7c:6f:e0:d0:2e:7a:2f:ca:
                    f2:71:67:03:a1:86:51:38:aa:6f:03:f2:c8:55:c3:
                    e4:30:05:d0:cd:4a:59:68:d4:b9:c2:14:87:16:c5:
                    09:82:f1:2c:83:4b:e8:db:29:f5:df:e1:19:46:a6:
                    da:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C1:9C:94:10:AF:F3:C0:B7:D6:AC:12:AD:89:0C:F1:9F:94:C2:8B
            X509v3 Authority Key Identifier:
                keyid:9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:8e:18:78:c3:95:96:e8:4f:cb:69:b9:cd:11:61:0f:e1:67:
         d3:16:2b:24:21:08:7d:90:95:46:53:0d:7a:4d:a2:d4:15:49:
         a7:0b:e9:95:7b:84:50:d0:2b:9f:30:e5:83:4d:1e:aa:b6:65:
         53:16:d7:36:b4:5b:4a:ce:17:d2:28:de:1c:ec:a6:d2:19:e8:
         57:b3:09:8b:96:dc:9e:35:73:e3:b2:31:65:64:b9:56:c4:d1:
         61:d6:10:b2:16:24:86:9f:96:d2:46:c3:b0:65:70:b9:42:16:
         d7:d3:91:03:da:39:5f:62:b7:05:a2:fd:43:54:61:a9:c5:99:
         77:ac:c2:55:7a:9d:7d:92:a6:be:e1:0f:01:46:02:40:7b:a0:
         f9:0c:a0:cf:2f:d8:8e:97:70:7b:6d:75:79:80:69:bd:23:e3:
         c6:a4:de:44:4d:37:36:bf:93:c2:d2:eb:13:bf:9e:0d:d7:3d:
         c4:88:ca:52:87:5a:35:5c:29:8f:5b:3a:05:54:79:5d:4d:56:
         09:bf:a9:fd:41:39:7d:41:60:85:a1:ac:31:df:87:d7:7e:08:
         63:0a:9a:8d:4e:60:87:d6:85:fb:7d:35:31:3a:98:57:8b:fc:
         8f:0d:b9:28:2e:38:47:a7:0a:2c:50:81:0a:e4:7b:5b:06:a7:
         3c:4a:35:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:28:31 2025 by rpki-client