Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
File:                     mgdjMrvSgPCFLbafYVsPFJkUgxs.mft (raw, json)
Hash identifier:          eBjzCHLrmYwujYXvlHxnmGodW42u5meXn6d1c4g6ow8=
Subject key identifier:   26:2A:06:C5:71:25:4C:ED:AE:A4:60:71:97:25:DC:2A:13:97:00:DD
Authority key identifier: 9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B
Certificate issuer:       /CN=9a076332bbd280f0852db69f615b0f149914831b
Certificate serial:       019A1FF6614BD1AD2B6E08D64A02D6D1887B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
Manifest number:          0481
Signing time:             Sun 26 Oct 2025 10:00:31 +0000
Manifest this update:     Sun 26 Oct 2025 10:00:31 +0000
Manifest next update:     Mon 27 Oct 2025 10:00:31 +0000
Files and hashes:         1: mgdjMrvSgPCFLbafYVsPFJkUgxs.crl (hash: N+AcV5yDakmgxzsXbY8aiWZMc/ZNM9u0AjdbhRHY3c0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:f6:61:4b:d1:ad:2b:6e:08:d6:4a:02:d6:d1:88:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a076332bbd280f0852db69f615b0f149914831b
        Validity
            Not Before: Oct 26 10:00:31 2025 GMT
            Not After : Oct 27 10:00:31 2025 GMT
        Subject: CN=262a06c571254cedaea460719725dc2a139700dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:5f:99:57:56:5e:ef:a1:a6:73:72:4e:09:
                    9e:93:a0:4e:73:f4:26:b6:48:48:46:88:46:a6:36:
                    6c:99:8c:95:3b:89:64:31:d3:af:7b:dc:cb:aa:e3:
                    0c:e0:a9:f4:6d:13:b6:82:40:d2:ef:31:e5:4d:d2:
                    c2:36:ad:a9:72:d3:da:bc:2b:81:89:87:08:33:f6:
                    49:f1:8c:00:dd:d0:29:f6:b1:c8:7e:7e:e7:05:1b:
                    6f:1b:d0:e2:a5:4d:e9:51:d0:3e:35:02:6f:13:a2:
                    a7:fa:c2:94:7a:29:80:a5:ad:69:07:9f:af:53:47:
                    86:b3:ba:2d:b3:83:92:92:71:97:a6:c6:ec:65:5a:
                    f8:83:98:cf:f5:7c:64:c1:36:99:b8:cb:9e:f2:28:
                    e0:8d:bd:ed:26:b7:7e:79:7f:4d:0c:0d:3b:79:87:
                    3f:ce:a4:f5:78:fd:a9:4b:59:df:9b:c3:d7:4c:de:
                    6b:a4:bb:3b:76:ee:92:60:a1:78:cc:99:de:a8:54:
                    fd:6e:ad:06:36:52:43:8d:9e:0d:5f:28:21:3e:84:
                    fa:ba:a0:c1:0b:ce:c5:bb:cd:97:45:77:bb:00:37:
                    f0:6a:2f:13:50:f5:61:8f:a8:6f:cf:4c:04:ec:9e:
                    49:41:2d:85:39:9d:e4:14:6c:2e:e2:57:af:33:62:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:2A:06:C5:71:25:4C:ED:AE:A4:60:71:97:25:DC:2A:13:97:00:DD
            X509v3 Authority Key Identifier:
                keyid:9A:07:63:32:BB:D2:80:F0:85:2D:B6:9F:61:5B:0F:14:99:14:83:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgdjMrvSgPCFLbafYVsPFJkUgxs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3d838c-8622-4e58-870f-de9e02d41797/1/mgdjMrvSgPCFLbafYVsPFJkUgxs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:41:55:44:f0:fc:05:18:5f:68:cb:23:cc:93:5a:7a:4f:87:
         23:76:f2:90:78:85:c6:62:e1:43:4e:99:19:71:f5:8c:2b:14:
         f8:7f:b5:19:17:9f:06:bc:92:d1:fa:48:ef:98:56:b7:1c:49:
         88:00:34:35:3b:37:83:48:c5:9b:b0:0f:46:bf:8d:bf:b3:ce:
         b7:13:db:4d:26:15:5f:61:f0:62:fa:f4:ba:86:43:90:96:e3:
         00:4a:57:d9:17:c7:a8:6a:6a:5a:57:af:d3:b9:3e:85:f7:09:
         6e:be:ba:49:18:b5:4f:65:3c:ea:5e:56:1b:18:1c:41:6d:92:
         0a:26:49:f7:22:5b:28:5e:f8:e6:00:b6:7f:64:24:72:cd:53:
         66:fe:f9:5c:bd:8e:33:57:d0:13:3c:dc:af:d0:83:4b:41:05:
         2c:7f:f3:b8:51:c6:d3:35:3a:dc:c4:95:b3:9b:42:ae:96:17:
         32:ba:97:1a:14:e9:a6:69:4b:2d:80:8d:a8:cf:ae:f3:b8:82:
         d5:cc:a8:6a:46:85:e5:4e:e4:e7:70:9b:c4:0d:08:aa:44:7d:
         d7:22:52:2d:d1:1c:b6:95:32:c0:2d:02:3d:b3:d6:46:bb:ed:
         92:54:fd:e6:20:fa:39:d5:00:40:b6:79:36:c4:d9:27:b8:92:
         c4:f3:e2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:10:43 2025 by rpki-client