Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
File:                     mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft (raw, json)
Hash identifier:          s8ZwEba7pWVKeY7CnOvfTyeyLQycCFqylQ3TURx9R3o=
Subject key identifier:   90:93:30:07:E5:2F:2A:36:1D:F5:D1:6F:73:E3:9B:03:BB:0D:53:7C
Authority key identifier: 9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC
Certificate issuer:       /CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
Certificate serial:       019684359422144ADA964FD42F216BFFCCC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
Manifest number:          097A
Signing time:             Wed 30 Apr 2025 01:00:25 +0000
Manifest this update:     Wed 30 Apr 2025 01:00:25 +0000
Manifest next update:     Thu 01 May 2025 01:00:25 +0000
Files and hashes:         1: mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl (hash: HjprknU1jg+92uaYWQPiUP18Vk0iP5RA8mVNyCv1RmM=)
                          2: yetABbyl2MadBOs3otjwQ2Snhiw.roa (hash: QjHSeYtiJ8ed7+XFEV/Jho222/lz+EVhX5TG4jAr6Y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:35:94:22:14:4a:da:96:4f:d4:2f:21:6b:ff:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a98febc33e4d517ae3d9ca3e932e2d4ba6885ac
        Validity
            Not Before: Apr 30 01:00:25 2025 GMT
            Not After : May  1 01:00:25 2025 GMT
        Subject: CN=90933007e52f2a361df5d16f73e39b03bb0d537c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ea:8f:9f:d5:45:bd:b4:c8:b7:d7:84:6e:a0:
                    cf:18:a1:51:27:a1:d4:8c:59:5b:27:90:fb:7f:fc:
                    1a:1b:23:40:39:dc:e1:17:38:7b:dd:e6:ab:77:7b:
                    c0:a5:8a:4e:28:6a:6d:1c:13:bf:f8:12:53:ac:0d:
                    e9:e8:9a:dd:00:82:a6:ec:68:83:ff:3f:f4:4b:0e:
                    ef:4d:e9:45:5c:35:c4:32:8a:fd:44:9a:84:5e:d8:
                    5a:3e:2e:34:0e:fa:3c:85:47:99:a2:12:18:20:03:
                    2c:14:d3:bd:ad:8c:80:2b:9b:fb:a6:c9:16:ac:a2:
                    9e:3c:ee:04:95:e3:44:55:f5:b9:e5:7b:80:49:aa:
                    ff:4b:a7:e0:46:16:17:36:5e:81:ff:90:db:47:f9:
                    87:b8:c4:e5:f2:ed:fb:2f:5a:c4:60:da:65:76:3a:
                    f3:8e:9a:f1:b0:eb:12:19:65:8e:58:47:52:d8:08:
                    57:92:a3:d7:fe:3a:85:31:66:cb:29:5b:70:b1:47:
                    cf:c0:20:7e:14:9c:9a:bc:da:82:93:bc:68:19:e7:
                    c5:47:c0:b7:13:36:a5:e9:e5:15:ad:e0:d6:9d:ee:
                    cd:42:dc:2f:f1:9f:ec:81:8c:2a:3e:0a:64:9e:00:
                    de:04:6e:5e:81:c2:11:64:87:dd:64:dd:cd:18:13:
                    b8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:93:30:07:E5:2F:2A:36:1D:F5:D1:6F:73:E3:9B:03:BB:0D:53:7C
            X509v3 Authority Key Identifier:
                keyid:9A:98:FE:BC:33:E4:D5:17:AE:3D:9C:A3:E9:32:E2:D4:BA:68:85:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpj-vDPk1ReuPZyj6TLi1Lpohaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5c36f7-9fca-4896-ab72-05e7fa630bbc/1/mpj-vDPk1ReuPZyj6TLi1Lpohaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:dd:e4:37:e3:65:aa:15:3e:07:48:46:95:7f:76:78:fa:c3:
         7c:bc:d5:8a:c3:96:2e:db:51:7b:3c:a7:14:1c:c8:50:2f:1b:
         01:57:9d:e7:18:11:14:30:d7:df:7f:42:db:c3:7b:33:45:8a:
         38:06:36:fb:fe:ab:e0:04:e6:20:0b:34:7b:ce:f2:8e:3f:57:
         55:70:5f:38:2a:3c:19:74:b8:93:b4:b8:e4:b5:f4:3e:59:24:
         a0:07:89:d0:88:61:7e:bf:9c:24:72:ea:06:8a:cd:86:70:6f:
         4b:6f:41:48:39:1d:1c:6d:29:e8:a0:c5:57:91:5f:16:e6:91:
         63:4d:c3:5d:99:c8:de:cc:23:9b:f2:0c:11:18:2a:c1:9d:0b:
         69:9f:fa:74:86:08:d8:37:e9:b9:58:da:b0:be:1a:78:21:68:
         c1:0d:0e:95:00:92:e8:75:a8:b1:53:b1:d0:32:39:7d:b8:72:
         d8:00:b9:ea:d4:cb:ac:41:b1:35:41:01:c2:6d:95:66:e2:a4:
         61:65:a0:e0:38:dc:95:6a:5e:c8:47:22:c5:d5:91:7b:11:a1:
         e7:7f:d1:86:68:a4:80:75:62:6d:74:0f:34:c6:67:0b:89:4b:
         fb:ff:bd:a5:aa:e1:be:5b:27:f5:f7:58:47:87:fa:17:2b:d1:
         26:0d:fc:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaENZQiFEralk/ULyFr/8zAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOThmZWJjMzNlNGQ1MTdhZTNkOWNhM2U5MzJlMmQ0YmE2
ODg1YWMwHhcNMjUwNDMwMDEwMDI1WhcNMjUwNTAxMDEwMDI1WjAzMTEwLwYDVQQD
Eyg5MDkzMzAwN2U1MmYyYTM2MWRmNWQxNmY3M2UzOWIwM2JiMGQ1MzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuqPn9VFvbTIt9eEbqDPGKFRJ6HU
jFlbJ5D7f/waGyNAOdzhFzh73eard3vApYpOKGptHBO/+BJTrA3p6JrdAIKm7GiD
/z/0Sw7vTelFXDXEMor9RJqEXthaPi40Dvo8hUeZohIYIAMsFNO9rYyAK5v7pskW
rKKePO4EleNEVfW55XuASar/S6fgRhYXNl6B/5DbR/mHuMTl8u37L1rEYNpldjrz
jprxsOsSGWWOWEdS2AhXkqPX/jqFMWbLKVtwsUfPwCB+FJyavNqCk7xoGefFR8C3
Ezal6eUVreDWne7NQtwv8Z/sgYwqPgpkngDeBG5egcIRZIfdZN3NGBO4cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCTMAflLyo2HfXRb3PjmwO7DVN8MB8GA1UdIwQY
MBaAFJqY/rwz5NUXrj2co+ky4tS6aIWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBqLXZEUGsxUmV1UFp5ajZUTGkxTHBvaGF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81YzM2ZjctOWZjYS00ODk2LWFiNzIt
MDVlN2ZhNjMwYmJjLzEvbXBqLXZEUGsxUmV1UFp5ajZUTGkxTHBvaGF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81YzM2ZjctOWZjYS00ODk2LWFiNzItMDVlN2ZhNjMwYmJj
LzEvbXBqLXZEUGsxUmV1UFp5ajZUTGkxTHBvaGF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAht3kN+Nl
qhU+B0hGlX92ePrDfLzVisOWLttRezynFBzIUC8bAVed5xgRFDDX339C28N7M0WK
OAY2+/6r4ATmIAs0e87yjj9XVXBfOCo8GXS4k7S45LX0PlkkoAeJ0Ihhfr+cJHLq
BorNhnBvS29BSDkdHG0p6KDFV5FfFuaRY03DXZnI3swjm/IMERgqwZ0LaZ/6dIYI
2DfpuVjasL4aeCFowQ0OlQCS6HWosVOx0DI5fbhy2AC56tTLrEGxNUEBwm2VZuKk
YWWg4DjclWpeyEcixdWRexGh53/RhmikgHVibXQPNMZnC4lL+/+9parhvlsn9fdY
R4f6FyvRJg38QA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:54:09 2025 by rpki-client