Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
File:                     mjk-8WAn_AO8XARf-SidS7t_82Q.mft (raw, json)
Hash identifier:          BhHrmpj9YlpmNQVf2lPZ2ItDFoylApG6o/JtjP5vItw=
Subject key identifier:   3E:5B:CE:1F:21:78:58:59:B3:F0:64:CC:15:96:48:3F:00:09:B6:D8
Authority key identifier: 9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
Certificate issuer:       /CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Certificate serial:       01993500DCAB8514BED64B6218170ED1A70A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
Manifest number:          12C4
Signing time:             Wed 10 Sep 2025 19:01:12 +0000
Manifest this update:     Wed 10 Sep 2025 19:01:12 +0000
Manifest next update:     Thu 11 Sep 2025 19:01:12 +0000
Files and hashes:         1: 1-clNUolPp_tHK-YnMn1XJMAOUjs.roa (hash: KJW40p6GcC71WhI5WuddxJyJBJzYeaQczvMIzcE32ao=)
                          2: ThrNo6kiekZ1KA2l01FtFpnY2fk.roa (hash: sguoljLucbHptttLjY2jSVxQGOBsjlswaEqE7sugblE=)
                          3: cV3BD5-gE9KIDxyMlti5rVaXSy8.roa (hash: PvTekp3dawXrC4YtfV0s/U4et5tU6tfVspZ3Sv6BzkQ=)
                          4: mjk-8WAn_AO8XARf-SidS7t_82Q.crl (hash: Af/AE4lPD1ic8zaGCdyKu8gW3re+f/ivwcwT8d55iao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 19:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:00:dc:ab:85:14:be:d6:4b:62:18:17:0e:d1:a7:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
        Validity
            Not Before: Sep 10 19:01:12 2025 GMT
            Not After : Sep 11 19:01:12 2025 GMT
        Subject: CN=3e5bce1f21785859b3f064cc1596483f0009b6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:60:e8:af:6d:c4:a8:5e:62:75:d3:8c:b8:02:
                    d0:c1:a2:56:67:81:e9:91:cf:b5:5e:fa:9f:fa:99:
                    9a:94:1a:d7:5b:a6:17:b4:6e:16:95:6e:74:93:de:
                    5a:6c:2c:90:48:27:a5:63:78:42:fd:99:d8:00:0d:
                    9f:da:8d:db:3e:a1:04:04:15:08:e7:78:9c:20:b7:
                    b8:c9:4f:73:c9:6a:0d:3d:6d:2f:46:7e:ee:99:8a:
                    15:65:f1:31:25:6c:68:95:96:bf:30:81:72:63:b5:
                    16:b9:66:c7:77:f2:73:83:75:9f:d0:12:d5:5c:94:
                    59:99:b2:08:94:af:8d:b3:a0:31:19:7c:bd:18:ea:
                    98:0a:e2:2a:d8:84:22:57:20:41:20:1c:76:85:cb:
                    fd:de:97:8d:b1:98:7e:7f:58:e4:27:49:a1:13:dd:
                    48:50:db:da:6c:b5:d7:7e:07:43:f6:21:26:a5:62:
                    d3:a0:fc:bd:72:51:da:4d:9e:c5:bd:e1:77:ab:11:
                    6b:dd:14:b1:ed:9c:b1:7f:cb:39:21:6c:9a:1e:1d:
                    16:f8:84:ed:14:a6:c5:25:09:4c:0e:25:54:b8:60:
                    eb:93:18:1f:f0:79:33:1c:87:35:1c:e4:d9:33:44:
                    e5:0b:56:a5:d3:01:31:a5:e8:49:c6:a7:15:e2:d3:
                    7c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5B:CE:1F:21:78:58:59:B3:F0:64:CC:15:96:48:3F:00:09:B6:D8
            X509v3 Authority Key Identifier:
                keyid:9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:56:83:10:92:05:f2:20:7f:ab:f7:74:47:f4:d3:fb:01:1c:
         7a:25:78:93:9e:17:51:a2:15:cd:24:a8:b9:ba:b9:b6:66:81:
         09:1e:c0:c2:5d:0c:25:20:59:fd:52:88:60:73:ff:ee:9f:ca:
         47:7a:4d:64:a7:3a:13:b0:f9:be:6d:df:ea:74:02:66:a0:bd:
         90:1d:2e:86:de:56:2b:b3:09:bc:38:3f:5c:0a:1b:dd:d5:af:
         42:93:ef:e2:08:b3:4f:45:e0:1b:d9:44:a7:ed:6f:48:8a:22:
         5c:0c:ce:3f:b5:f6:00:f6:f7:83:6d:84:ff:8a:11:28:fc:d6:
         2e:7a:54:b6:b9:23:bf:9d:05:4f:8b:94:e8:93:4a:7d:d4:4c:
         52:f0:04:b6:db:17:0c:06:a9:b4:79:a3:54:ab:96:a4:49:b8:
         8d:5a:83:75:c8:b6:eb:48:12:42:0c:7b:e3:4e:46:fe:fc:38:
         9a:ac:ba:81:cd:bf:14:01:50:75:7c:04:b7:23:75:ba:5e:e6:
         de:67:33:8b:4c:90:ca:c4:91:0d:8c:82:60:ea:88:74:bb:30:
         ac:d9:ca:78:3e:f4:f6:e2:50:9c:c6:34:ec:e3:62:c2:ed:f9:
         3a:53:fc:80:63:56:e2:bc:4d:1f:99:06:d1:7d:f9:89:9b:4f:
         a2:0c:d6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:15:05 2025 by rpki-client