Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
File:                     mgdjMrvSgPCFLbafYVsPFJkUgxs.mft (raw, json)
Hash identifier:          JxRV8PdqvZoDr4jOnS/rlt7G2cBH3UEUbRzBe1BjhVM=
Subject key identifier:   BE:83:C5:DB:6C:31:80:92:00:1C:9D:3A:E0:76:C3:3A:BA:5D:6C:AB
Authority key identifier: 9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
Certificate issuer:       /CN=9a076332bbd280f0852db69f615b0f149914831b
Certificate serial:       01977488EB279A5F3F95F727F451DEC98630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
Manifest number:          031F
Signing time:             Sun 15 Jun 2025 17:00:19 +0000
Manifest this update:     Sun 15 Jun 2025 17:00:19 +0000
Manifest next update:     Mon 16 Jun 2025 17:00:19 +0000
Files and hashes:         1: mgdjMrvSgPCFLbafYVsPFJkUgxs.crl (hash: hWKInNd5ogQt7uYhmzZM5cy9q/XtcwjK7mCBRoj3+5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:74:88:eb:27:9a:5f:3f:95:f7:27:f4:51:de:c9:86:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a076332bbd280f0852db69f615b0f149914831b
        Validity
            Not Before: Jun 15 17:00:19 2025 GMT
            Not After : Jun 16 17:00:19 2025 GMT
        Subject: CN=be83c5db6c318092001c9d3ae076c33aba5d6cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8d:39:30:2d:bd:c5:2f:63:28:3e:37:8a:de:
                    03:10:9a:c9:55:b8:61:71:14:75:92:a2:81:38:68:
                    04:87:64:85:cb:03:9b:0a:5a:03:d9:96:cd:12:64:
                    cc:77:3f:58:a0:65:8e:d4:5e:1e:a6:01:07:4d:2d:
                    fa:d0:6d:e9:03:da:1a:0b:77:4a:ca:fd:55:30:f9:
                    d4:94:71:b9:53:81:84:33:bd:a6:ef:78:6d:1b:ef:
                    08:88:7a:99:22:d1:39:64:e9:c8:f9:b5:ce:7d:de:
                    35:79:72:c1:2b:47:75:6b:9f:b5:fb:25:25:32:19:
                    4c:14:1d:af:8b:51:f1:55:5e:a5:f0:ed:80:4c:a6:
                    e5:df:ea:0e:35:f5:e2:a2:49:51:d9:37:22:77:ce:
                    4b:48:e0:33:61:e0:8d:3a:ca:94:ec:90:73:e1:9d:
                    86:cf:1f:8d:8b:71:5a:36:7f:b5:a6:a6:41:c4:5c:
                    88:b6:e5:ce:ce:94:32:b3:f3:a2:db:3b:58:22:26:
                    4d:99:e8:22:59:2f:5c:e5:45:11:f9:65:98:7b:71:
                    c5:7f:1b:0b:2a:d3:86:f5:f5:01:93:44:a3:79:5b:
                    17:07:07:9a:f3:3e:f6:0f:18:82:7c:46:36:8a:f2:
                    95:77:bf:66:f5:5b:48:df:50:44:0b:b2:76:3b:84:
                    6a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:83:C5:DB:6C:31:80:92:00:1C:9D:3A:E0:76:C3:3A:BA:5D:6C:AB
            X509v3 Authority Key Identifier:
                keyid:9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:0d:4e:9f:a8:43:db:2f:9e:66:12:6d:ba:9d:61:3d:f6:c0:
         11:7f:82:f0:80:1b:74:ed:f9:12:f8:28:2b:78:03:2d:e0:6f:
         cd:fc:9d:02:37:a7:f7:e6:a1:0d:64:9f:a3:8f:58:ee:25:54:
         52:f9:0f:c4:28:a2:7d:4f:82:d0:21:45:8b:05:c8:8b:3e:30:
         52:d9:95:d1:a1:f3:56:60:1d:07:46:ef:8c:73:5e:13:f4:9d:
         a0:b4:45:96:cf:ea:81:d4:4c:6b:6f:12:67:cf:40:62:a6:dd:
         2f:4d:bb:f8:51:d6:c5:e4:25:e8:b7:a9:fb:29:fd:b4:f4:38:
         4c:d0:d5:69:e0:ee:08:75:48:01:af:de:06:a8:e3:31:18:15:
         ad:03:d7:83:51:86:2d:56:72:b4:ed:d4:34:07:3b:08:d6:15:
         55:cb:0c:83:e4:3f:5b:09:5b:2c:ea:95:34:32:b8:bd:22:a1:
         84:10:40:aa:fe:ee:ed:37:e3:7e:f3:66:dc:fb:f1:01:23:70:
         3b:0e:e4:ce:75:36:10:f0:fc:e1:db:37:b4:dd:d2:c9:a2:98:
         c2:a6:22:7e:b5:2b:d0:30:6a:26:f2:6b:95:26:59:2b:c1:21:
         c5:d1:14:06:cb:41:e8:b2:f3:76:9f:7f:73:33:41:90:b9:31:
         2e:05:42:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0iOsnml8/lfcn9FHeyYYwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMDc2MzMyYmJkMjgwZjA4NTJkYjY5ZjYxNWIwZjE0OTkx
NDgzMWIwHhcNMjUwNjE1MTcwMDE5WhcNMjUwNjE2MTcwMDE5WjAzMTEwLwYDVQQD
EyhiZTgzYzVkYjZjMzE4MDkyMDAxYzlkM2FlMDc2YzMzYWJhNWQ2Y2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY05MC29xS9jKD43it4DEJrJVbhh
cRR1kqKBOGgEh2SFywObCloD2ZbNEmTMdz9YoGWO1F4epgEHTS360G3pA9oaC3dK
yv1VMPnUlHG5U4GEM72m73htG+8IiHqZItE5ZOnI+bXOfd41eXLBK0d1a5+1+yUl
MhlMFB2vi1HxVV6l8O2ATKbl3+oONfXioklR2Tcid85LSOAzYeCNOsqU7JBz4Z2G
zx+Ni3FaNn+1pqZBxFyItuXOzpQys/Oi2ztYIiZNmegiWS9c5UUR+WWYe3HFfxsL
KtOG9fUBk0SjeVsXBwea8z72DxiCfEY2ivKVd79m9VtI31BEC7J2O4RqfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6DxdtsMYCSABydOuB2wzq6XWyrMB8GA1UdIwQY
MBaAFJoHYzK70oDwhS22n2FbDxSZFIMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zZDgzOGMtODYyMi00ZTU4LTg3MGYt
ZGU5ZTAyZDQxNzk3LzEvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8zZDgzOGMtODYyMi00ZTU4LTg3MGYtZGU5ZTAyZDQxNzk3
LzEvbWdkak1ydlNnUENGTGJhZllWc1BGSmtVZ3hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnQ1On6hD
2y+eZhJtup1hPfbAEX+C8IAbdO35EvgoK3gDLeBvzfydAjen9+ahDWSfo49Y7iVU
UvkPxCiifU+C0CFFiwXIiz4wUtmV0aHzVmAdB0bvjHNeE/SdoLRFls/qgdRMa28S
Z89AYqbdL027+FHWxeQl6Lep+yn9tPQ4TNDVaeDuCHVIAa/eBqjjMRgVrQPXg1GG
LVZytO3UNAc7CNYVVcsMg+Q/WwlbLOqVNDK4vSKhhBBAqv7u7TfjfvNm3PvxASNw
Ow7kznU2EPD84ds3tN3SyaKYwqYifrUr0DBqJvJrlSZZK8EhxdEUBstB6LLzdp9/
czNBkLkxLgVCaA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:40:59 2025 by rpki-client