Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
File:                     Mjq1upi-9dDZvQzqAxof4Td3pIY.mft (raw, json)
Hash identifier:          KTijqIAheqW0CiOxDYuOhQD+l4pwoPswplF6tyQu/A4=
Subject key identifier:   38:6C:48:4B:C6:2C:F0:A0:30:22:4F:32:30:C2:18:32:E6:32:AA:14
Authority key identifier: 32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
Certificate issuer:       /CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Certificate serial:       0197684EA576FDC9F87E77A42F69E988FE76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
Manifest number:          1593
Signing time:             Fri 13 Jun 2025 08:01:13 +0000
Manifest this update:     Fri 13 Jun 2025 08:01:13 +0000
Manifest next update:     Sat 14 Jun 2025 08:01:13 +0000
Files and hashes:         1: 1bbk3xQO4GAsakJYReXogLvLM4k.roa (hash: ma7JWfiezOV+JM83OPhYUisosrWCLMi3zSbBAzKD2O0=)
                          2: 4eUjU3FviKAA-8zjNHUXmCGN0-k.roa (hash: cYvBww/EyQVYauVbE6pk42UaaR9Wj899DGdPG2LUf3g=)
                          3: Mjq1upi-9dDZvQzqAxof4Td3pIY.crl (hash: y4WToLueJpLMjzl1bSxlCUSKuQH5Hyp9CmoqwlcE6ME=)
                          4: P79q0XI6jMHcEUJUje7vbekXqMM.roa (hash: rfk192nc+MyT+AA9yTeZKZSIGbJXkqx89FY7vI7SgFM=)
                          5: qKUS3aWdXNKyGrEPIZqo9vOOxtM.roa (hash: aMMBOBw0agva6obgWYqVlq2psGGrS2vafTYjFkbH+48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4e:a5:76:fd:c9:f8:7e:77:a4:2f:69:e9:88:fe:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
        Validity
            Not Before: Jun 13 08:01:13 2025 GMT
            Not After : Jun 14 08:01:13 2025 GMT
        Subject: CN=386c484bc62cf0a030224f3230c21832e632aa14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bd:04:86:33:0d:5a:45:54:de:bd:8f:78:e0:
                    ac:47:c1:7d:37:e1:31:54:ba:ca:b9:14:7e:3b:ef:
                    8c:74:40:46:95:8a:2d:ed:1f:9d:2e:9f:f7:7c:85:
                    5f:f6:37:70:04:ee:37:89:37:4d:25:33:7f:ea:27:
                    d7:ca:0e:1c:e2:3e:aa:5d:6e:02:9e:ed:7f:67:cd:
                    e8:52:ff:ea:18:48:40:3d:a4:aa:cb:a4:ff:95:c1:
                    c6:db:92:f6:c6:34:da:ab:16:47:a9:98:25:48:b2:
                    28:85:e6:f9:8f:a2:0f:c2:6a:dd:61:59:63:b1:79:
                    87:fa:55:56:1e:51:58:b8:0b:46:53:80:28:10:f0:
                    f5:ff:fc:4d:b6:1f:61:91:9d:42:bd:34:64:1a:13:
                    d5:9b:4c:46:29:a5:cf:c8:5f:31:f8:c9:d2:c4:6f:
                    9a:e9:11:43:a1:d3:4e:79:87:15:15:b2:c1:7b:1b:
                    20:3b:ba:f3:c1:7c:ec:1f:69:15:04:56:3b:88:e3:
                    16:ed:47:08:65:c0:39:45:79:56:94:d7:74:62:ed:
                    78:2e:85:f2:09:08:66:71:0a:12:3a:39:1c:40:c4:
                    aa:cb:cc:6a:17:8f:de:c3:17:b8:5e:53:e6:e8:e3:
                    85:87:fe:8f:b2:cd:0b:70:b9:35:d0:c5:64:c6:c4:
                    d2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6C:48:4B:C6:2C:F0:A0:30:22:4F:32:30:C2:18:32:E6:32:AA:14
            X509v3 Authority Key Identifier:
                keyid:32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:36:44:0a:34:0c:88:6c:32:6d:33:e6:b2:aa:23:02:34:0f:
         0f:78:6f:37:2f:b2:df:a4:cc:60:9a:d7:0c:b5:f2:e2:96:10:
         e2:4f:af:2b:7c:e3:08:74:df:fc:8c:a3:5a:d5:ad:33:96:05:
         53:94:1e:02:5f:12:c9:61:94:1f:7b:1d:49:47:e6:b8:07:7e:
         03:86:ed:7b:71:12:93:56:40:bb:bd:76:19:a6:d2:ce:48:c6:
         8c:7d:16:f6:3b:52:ec:68:b7:af:3d:e5:8f:f8:47:72:05:0e:
         0f:88:bf:33:f4:09:c3:ed:f3:72:3b:d7:2c:2d:eb:e1:25:96:
         8f:05:2f:3b:fa:6c:87:50:4e:3d:53:6b:e3:21:50:a7:64:9b:
         f8:96:88:4e:f4:8e:15:95:4b:87:3a:c6:f7:2e:15:bf:b4:20:
         b1:04:e7:26:76:4e:05:f7:8d:d8:de:63:0c:d7:89:a6:67:b2:
         cb:7f:3c:42:85:6d:e7:3f:28:04:da:3b:a5:80:1e:cb:c1:78:
         1e:5e:9c:86:02:5b:cc:67:96:ff:7e:ea:56:63:60:ba:35:94:
         06:24:c9:16:74:d9:90:29:79:3f:71:26:90:99:75:91:5d:34:
         89:35:e5:36:7b:8a:f5:73:71:7d:ae:2a:1d:f9:9c:26:89:2a:
         87:c5:91:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:19:19 2025 by rpki-client