Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
File:                     mjk-8WAn_AO8XARf-SidS7t_82Q.mft (raw, json)
Hash identifier:          SJUC0k3nMBH3qRZam3s5GBqDApslA2VCRHmRWErFW04=
Subject key identifier:   81:DE:81:55:78:41:95:88:3E:20:D0:31:05:FC:3F:62:FC:5C:22:2A
Authority key identifier: 9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64
Certificate issuer:       /CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
Certificate serial:       0196BD8160F532D6BDDA4046D7B2989FA2B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
Manifest number:          117D
Signing time:             Sun 11 May 2025 04:01:34 +0000
Manifest this update:     Sun 11 May 2025 04:01:34 +0000
Manifest next update:     Mon 12 May 2025 04:01:34 +0000
Files and hashes:         1: 1-clNUolPp_tHK-YnMn1XJMAOUjs.roa (hash: KJW40p6GcC71WhI5WuddxJyJBJzYeaQczvMIzcE32ao=)
                          2: ThrNo6kiekZ1KA2l01FtFpnY2fk.roa (hash: sguoljLucbHptttLjY2jSVxQGOBsjlswaEqE7sugblE=)
                          3: cV3BD5-gE9KIDxyMlti5rVaXSy8.roa (hash: PvTekp3dawXrC4YtfV0s/U4et5tU6tfVspZ3Sv6BzkQ=)
                          4: mjk-8WAn_AO8XARf-SidS7t_82Q.crl (hash: OpYdsJUfzF6Tqre1E8XOxNKNEuMM5qwGYKLRaZQqFvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 04:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:81:60:f5:32:d6:bd:da:40:46:d7:b2:98:9f:a2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364
        Validity
            Not Before: May 11 04:01:34 2025 GMT
            Not After : May 12 04:01:34 2025 GMT
        Subject: CN=81de8155784195883e20d03105fc3f62fc5c222a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6b:95:5c:7a:98:a4:0d:90:dc:7e:06:b6:53:
                    93:db:ef:b5:ee:2e:9f:4f:4c:a7:62:36:ac:7a:6a:
                    76:91:d5:10:78:26:75:1b:08:84:54:27:bf:27:2f:
                    10:eb:c1:a2:bb:98:32:60:e2:33:41:3f:6b:50:73:
                    32:d9:e3:ee:f9:f5:54:97:ae:f1:0b:4f:60:1f:58:
                    61:4b:a4:e2:57:08:1f:28:b8:b5:d4:b0:82:12:82:
                    0c:80:ba:c7:90:7e:2f:ba:b3:ea:ad:4f:35:4c:08:
                    90:89:d7:5c:54:8e:61:d0:8e:4c:d3:2b:35:9a:58:
                    3c:b9:b7:11:15:59:62:0a:a6:3e:c8:33:56:21:f9:
                    fa:91:50:25:97:be:3d:39:24:c3:08:79:87:d2:50:
                    d5:8e:04:09:42:87:fc:db:fc:8a:ca:93:9d:e8:2a:
                    c5:96:be:4f:2c:72:ed:66:4e:35:7f:94:73:f6:85:
                    38:f5:2a:1e:4c:df:6d:b8:f7:66:41:8b:c1:65:8e:
                    90:ad:52:f6:ea:c8:78:1b:a1:ef:be:ad:35:10:f3:
                    16:fb:b5:21:7b:36:96:2a:08:fa:41:9c:7c:59:72:
                    96:8c:07:94:30:ed:e4:4c:ef:24:a1:2d:f4:bc:61:
                    a2:fb:db:ac:48:d4:aa:7b:ff:19:dd:f9:b7:05:71:
                    aa:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DE:81:55:78:41:95:88:3E:20:D0:31:05:FC:3F:62:FC:5C:22:2A
            X509v3 Authority Key Identifier:
                keyid:9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c6:8d:0c:78:56:1d:cd:2c:26:e1:b6:7f:b4:7f:85:73:9b:
         35:6d:8a:92:72:33:0c:85:1b:d0:ea:64:18:5e:09:74:3f:20:
         6b:f3:44:35:d1:4d:8e:1e:35:d1:cc:9a:fb:18:f9:7b:22:b4:
         8a:87:e6:79:4d:02:db:12:c2:62:19:c4:16:df:e3:1b:96:41:
         40:f3:14:99:a3:34:f4:e7:16:3e:f3:ae:5a:b6:45:06:ce:92:
         c3:37:0b:85:35:e6:d7:68:2d:4d:81:4f:da:fc:59:26:a2:db:
         47:36:e4:45:d0:ee:d1:08:25:0f:67:8c:77:b0:ca:36:66:d4:
         6b:42:3b:4f:8d:eb:f4:be:b7:1e:ec:c4:5d:f9:11:6c:5c:e6:
         e2:70:82:6b:5b:90:65:6b:2a:dc:a7:d7:1f:4d:52:f3:c0:36:
         e2:8b:4d:3c:c5:1c:4d:74:1b:06:98:ed:aa:4b:d9:82:b0:b4:
         76:f9:ca:2e:72:8f:f1:51:31:f9:68:ae:88:01:c6:0b:86:3d:
         ab:3d:44:c2:2c:83:7a:b2:64:18:28:a2:d6:0e:b8:e7:17:5e:
         a9:55:7e:6c:b0:39:4e:1c:05:23:83:2d:ad:9a:18:4b:a8:ad:
         fa:73:ba:a7:93:db:b1:3e:33:74:98:f7:8f:de:73:32:29:b6:
         9e:d7:52:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:31:02 2025 by rpki-client