Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
File:                     mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft (raw, json)
Hash identifier:          pcFMqum5SabbR+TNJz/anNfxTU92z0XCaZA5khN5S2w=
Subject key identifier:   52:82:CD:70:EB:A2:C5:1D:F9:47:7A:18:A7:23:CF:40:2A:24:60:66
Authority key identifier: 9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7
Certificate issuer:       /CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
Certificate serial:       01996021A9F2FDA84888B943A4C0D74A5487
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
Manifest number:          05B5
Signing time:             Fri 19 Sep 2025 04:00:42 +0000
Manifest this update:     Fri 19 Sep 2025 04:00:42 +0000
Manifest next update:     Sat 20 Sep 2025 04:00:42 +0000
Files and hashes:         1: 0Xa-Nei_d95pLvklAjjCcq4wB50.roa (hash: IPQHZLb7lkBMMEnjRg8Zyo+jCG1PIyAJca8gIl7Nyqw=)
                          2: mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl (hash: gdz+gKRR4CitEpmR70Qt85/pOfZa/23rhhQpTvafX7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:60:21:a9:f2:fd:a8:48:88:b9:43:a4:c0:d7:4a:54:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a380c55c46117f9d0f9f89f885fd8ac584c72e7
        Validity
            Not Before: Sep 19 04:00:42 2025 GMT
            Not After : Sep 20 04:00:42 2025 GMT
        Subject: CN=5282cd70eba2c51df9477a18a723cf402a246066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:1c:26:3a:11:16:e4:4b:b0:02:7f:1d:d2:
                    58:20:41:b3:6d:8e:94:00:5a:b7:c9:d9:90:f8:3d:
                    56:8a:e4:1f:0a:dc:da:5d:a8:1a:37:3a:a8:28:3a:
                    13:aa:f0:df:e8:bb:cd:36:4c:38:87:42:78:27:69:
                    f2:fa:af:8b:25:f8:4a:7e:98:24:6c:95:50:28:79:
                    88:51:b7:83:82:b9:cc:c6:3c:f3:45:c3:88:4e:9e:
                    5a:43:83:58:29:6d:33:46:0e:8f:22:93:ca:df:ac:
                    43:1d:97:7d:a3:92:d5:9d:99:b7:52:3a:d4:f4:99:
                    11:b7:c5:54:bc:17:8c:33:36:e5:d7:07:bb:35:e9:
                    3e:22:32:e4:3a:28:f2:d2:00:1e:3c:65:1d:ad:40:
                    c3:39:a0:78:ef:15:9e:e1:87:37:24:6b:06:b8:27:
                    32:fc:bb:04:52:5b:61:96:4f:a5:0f:6c:19:8b:6f:
                    b9:19:81:0c:0f:7f:e9:a0:2d:2d:db:9a:cb:60:4f:
                    4a:00:6e:ba:94:0a:5f:ee:a6:3d:6d:fe:b7:f3:78:
                    47:6e:10:da:80:48:e4:e6:b8:d9:4c:1f:18:75:77:
                    5e:44:10:dd:92:d3:70:34:30:5d:bb:02:bd:0e:98:
                    25:9c:b8:c4:f7:9a:e2:aa:73:32:5b:63:54:fa:4e:
                    4b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:82:CD:70:EB:A2:C5:1D:F9:47:7A:18:A7:23:CF:40:2A:24:60:66
            X509v3 Authority Key Identifier:
                keyid:9A:38:0C:55:C4:61:17:F9:D0:F9:F8:9F:88:5F:D8:AC:58:4C:72:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjgMVcRhF_nQ-fifiF_YrFhMcuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0f2682-9878-416b-965c-40aac6396777/1/mjgMVcRhF_nQ-fifiF_YrFhMcuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:38:e6:95:bc:53:e8:19:b1:ef:e5:b1:5c:87:75:66:86:c1:
         d0:39:d8:16:ea:8c:ff:2a:75:c9:ed:48:2f:b7:4b:e7:d9:e2:
         f1:38:fa:c3:42:87:b2:52:85:aa:bc:17:55:03:d5:2e:42:6b:
         b0:a6:b6:65:4b:00:b9:23:55:d6:8d:0b:dd:ea:3d:a8:d2:69:
         9f:14:5b:aa:18:58:dc:3d:7f:dd:5f:eb:5d:09:ea:31:1c:cd:
         ff:3d:ff:28:ea:b1:29:18:e5:dc:5f:c3:a4:f6:3d:7a:a3:ef:
         2e:63:39:e9:69:34:b1:fd:ce:28:cf:5c:48:4a:ba:3a:7d:f3:
         13:7c:f9:01:b7:44:fc:12:c7:76:90:b3:52:1b:c0:58:a1:56:
         21:e0:4a:40:29:89:5a:b8:3c:ea:36:39:e1:6b:a6:ca:05:00:
         5d:17:13:64:c2:37:15:d1:5a:5b:70:95:c3:d2:3a:5b:00:e0:
         35:27:1f:a7:ce:aa:47:1d:0d:0c:5f:1c:06:a6:07:4f:aa:a9:
         32:0c:35:73:61:c1:f3:7d:ac:dc:b6:e7:c2:e6:cf:92:cc:69:
         cd:cc:c3:84:ad:06:80:81:24:66:58:c9:45:de:c5:96:72:9f:
         58:a7:12:a1:38:21:05:eb:f6:79:dc:02:1e:aa:2e:8d:b7:68:
         28:fe:2a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 12:54:25 2025 by rpki-client