Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
File:                     mjk-8WAn_AO8XARf-SidS7t_82Q.mft (raw, json)
Hash identifier:          QX3YsSUCp9dkfGvR04ozR2x/xfPdeURwd8a1+0xA69A=
Subject key identifier:   E1:FC:69:FD:E4:EB:A8:2C:2E:5E:9C:6B:EE:60:5D:C2:8D:B6:A5:9D
Authority key identifier: 9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
Certificate issuer:       /CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Certificate serial:       0197711AE10A45AF22F220E8516A7E9D8A12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
Manifest number:          11DA
Signing time:             Sun 15 Jun 2025 01:01:16 +0000
Manifest this update:     Sun 15 Jun 2025 01:01:16 +0000
Manifest next update:     Mon 16 Jun 2025 01:01:16 +0000
Files and hashes:         1: 1-clNUolPp_tHK-YnMn1XJMAOUjs.roa (hash: KJW40p6GcC71WhI5WuddxJyJBJzYeaQczvMIzcE32ao=)
                          2: ThrNo6kiekZ1KA2l01FtFpnY2fk.roa (hash: sguoljLucbHptttLjY2jSVxQGOBsjlswaEqE7sugblE=)
                          3: cV3BD5-gE9KIDxyMlti5rVaXSy8.roa (hash: PvTekp3dawXrC4YtfV0s/U4et5tU6tfVspZ3Sv6BzkQ=)
                          4: mjk-8WAn_AO8XARf-SidS7t_82Q.crl (hash: oac7H/DEn/ldGPYlf7Q2GhWfRK9DXQBlh3HCKLm0dQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:e1:0a:45:af:22:f2:20:e8:51:6a:7e:9d:8a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
        Validity
            Not Before: Jun 15 01:01:16 2025 GMT
            Not After : Jun 16 01:01:16 2025 GMT
        Subject: CN=e1fc69fde4eba82c2e5e9c6bee605dc28db6a59d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b5:7a:31:25:42:d4:08:d0:ac:50:ee:bc:65:
                    70:99:e8:6b:fd:3b:10:9a:1d:ee:ef:92:d0:0d:dc:
                    ba:5f:df:05:d6:60:27:d7:09:7d:a8:eb:bc:4a:4b:
                    e2:92:38:9e:90:b9:a1:b1:87:e6:42:94:43:9a:31:
                    33:da:24:ee:de:78:7c:85:34:bb:ca:a8:ff:d8:3b:
                    11:8b:be:99:21:6f:9e:8d:5c:4c:15:8f:9e:9e:38:
                    0c:26:3a:2c:c8:5f:17:37:13:0c:70:6d:7e:16:11:
                    9e:24:6c:9b:87:18:86:22:14:39:30:1a:12:d5:f5:
                    ec:ab:ff:49:1e:86:d0:ee:18:7e:77:a0:e9:6d:a9:
                    b6:1a:57:55:be:69:c4:b5:ec:6b:d6:24:9b:60:85:
                    a1:f1:00:4b:22:2f:c7:1b:f7:10:67:1a:78:a2:f2:
                    b3:9e:61:ea:36:30:c2:ce:db:f7:3a:61:a7:9c:f1:
                    9d:c0:e6:84:50:c9:ad:77:20:af:2f:8c:6e:fb:e3:
                    0d:03:e7:38:d4:d9:22:80:42:63:46:91:c1:54:2b:
                    fe:37:af:dd:3d:4c:63:a6:09:5b:8a:44:2d:b5:8c:
                    5a:c8:cd:9c:8a:08:f5:02:b6:d4:aa:e9:32:3a:1c:
                    7f:af:c8:8e:43:ea:45:6e:30:aa:42:ca:44:a9:8d:
                    d0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FC:69:FD:E4:EB:A8:2C:2E:5E:9C:6B:EE:60:5D:C2:8D:B6:A5:9D
            X509v3 Authority Key Identifier:
                keyid:9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0a:6b:1c:6a:40:4c:b4:0c:55:8f:f6:f6:03:55:09:48:28:
         da:36:b8:12:e0:25:55:38:ce:32:1d:2c:58:8b:c1:6d:b0:f7:
         33:9b:60:47:1f:11:4c:47:a8:0e:26:52:4d:8e:f9:07:53:5e:
         9d:b9:c6:42:d2:c1:92:b9:08:39:02:8e:10:bb:87:5c:5b:ec:
         c4:b5:ef:f8:90:30:66:9c:1c:68:35:8b:d4:22:1b:67:01:64:
         d5:40:96:17:bc:e9:95:21:04:db:64:86:aa:3e:b5:f4:88:34:
         8d:a7:cc:a8:bf:75:13:67:60:d2:e7:50:f7:97:35:94:86:d4:
         46:b8:da:38:3a:39:27:45:64:3c:7e:d5:25:33:05:65:85:27:
         9d:7e:37:34:cc:65:0e:d6:a8:e5:0b:bd:11:50:24:af:cc:40:
         ae:1d:6b:ff:72:02:90:3e:be:2f:ea:18:8d:82:8b:17:78:0e:
         8d:f4:b6:eb:f7:ec:fb:30:c7:65:1a:e1:ad:76:b6:5f:b2:cb:
         3d:38:f5:5a:9d:ca:e1:30:42:a4:e9:3e:23:19:89:24:a2:57:
         16:3a:a3:c8:18:d9:85:41:13:53:3b:f8:dd:86:9d:48:41:90:
         65:ed:d5:f1:1a:84:db:0e:df:4c:35:19:02:18:4c:03:f5:83:
         36:d0:79:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxGuEKRa8i8iDoUWp+nYoSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMzkzZWYxNjAyN2ZjMDNiYzVjMDQ1ZmY5Mjg5ZDRiYmI3
ZmYzNjQwHhcNMjUwNjE1MDEwMTE2WhcNMjUwNjE2MDEwMTE2WjAzMTEwLwYDVQQD
EyhlMWZjNjlmZGU0ZWJhODJjMmU1ZTljNmJlZTYwNWRjMjhkYjZhNTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbV6MSVC1AjQrFDuvGVwmehr/TsQ
mh3u75LQDdy6X98F1mAn1wl9qOu8SkvikjiekLmhsYfmQpRDmjEz2iTu3nh8hTS7
yqj/2DsRi76ZIW+ejVxMFY+enjgMJjosyF8XNxMMcG1+FhGeJGybhxiGIhQ5MBoS
1fXsq/9JHobQ7hh+d6Dpbam2GldVvmnEtexr1iSbYIWh8QBLIi/HG/cQZxp4ovKz
nmHqNjDCztv3OmGnnPGdwOaEUMmtdyCvL4xu++MNA+c41NkigEJjRpHBVCv+N6/d
PUxjpglbikQttYxayM2cigj1ArbUqukyOhx/r8iOQ+pFbjCqQspEqY3QrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOH8af3k66gsLl6ca+5gXcKNtqWdMB8GA1UdIwQY
MBaAFJo5PvFgJ/wDvFwEX/konUu7f/NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgt
YWIyZDVlN2Q0YTdiLzEvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgtYWIyZDVlN2Q0YTdi
LzEvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQprHGpA
TLQMVY/29gNVCUgo2ja4EuAlVTjOMh0sWIvBbbD3M5tgRx8RTEeoDiZSTY75B1Ne
nbnGQtLBkrkIOQKOELuHXFvsxLXv+JAwZpwcaDWL1CIbZwFk1UCWF7zplSEE22SG
qj619Ig0jafMqL91E2dg0udQ95c1lIbURrjaODo5J0VkPH7VJTMFZYUnnX43NMxl
Dtao5Qu9EVAkr8xArh1r/3ICkD6+L+oYjYKLF3gOjfS26/fs+zDHZRrhrXa2X7LL
PTj1Wp3K4TBCpOk+IxmJJKJXFjqjyBjZhUETUzv43YadSEGQZe3V8RqE2w7fTDUZ
AhhMA/WDNtB5Yg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:08:58 2025 by rpki-client