Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
File:                     mjfe_wVaUdk-HtL3xzIX12B6jPI.mft (raw, json)
Hash identifier:          DwC5BiWyfn/l0rTl/LSh3EdfzsLaA+nWbDzoTVFQ5us=
Subject key identifier:   18:2D:0B:87:47:26:92:19:5C:43:A7:5E:06:F1:0F:9C:1D:8B:5D:0B
Authority key identifier: 9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
Certificate issuer:       /CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Certificate serial:       0198D5F15F0F9296DDB3B3C54856E656B92F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
Manifest number:          0415
Signing time:             Sat 23 Aug 2025 08:00:22 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:22 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:22 +0000
Files and hashes:         1: YxveI4ih6pTB1sKFupGdm18Smzc.roa (hash: dR429rKnleksdPGeSDctkW6MMPKSaofQtmcnafzS7xs=)
                          2: mjfe_wVaUdk-HtL3xzIX12B6jPI.crl (hash: hcxo1TVPMtGHUx3n/e/W5JfWMeOhaCsSAhoJqYyhn7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:5f:0f:92:96:dd:b3:b3:c5:48:56:e6:56:b9:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
        Validity
            Not Before: Aug 23 08:00:22 2025 GMT
            Not After : Aug 24 08:00:22 2025 GMT
        Subject: CN=182d0b87472692195c43a75e06f10f9c1d8b5d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:34:86:b2:29:b5:93:fd:b7:25:94:bc:3d:63:
                    df:f7:80:6d:77:60:de:61:d6:0a:f3:65:8b:6f:d2:
                    96:d3:42:16:8d:17:8b:30:3a:0a:7b:12:b8:4e:c5:
                    a3:f8:ed:df:a2:7f:ef:1b:60:e9:6d:f0:56:92:f1:
                    a5:e6:e7:13:cb:0b:fd:cc:80:70:b9:7d:ea:38:78:
                    59:ce:c2:9c:d7:ca:5f:4c:ef:13:69:0f:a7:73:60:
                    33:f1:e0:42:c4:d2:79:94:e4:de:b8:66:3e:70:ea:
                    ba:4a:28:e2:7c:0a:c6:77:a1:00:65:ac:c2:50:f5:
                    c3:8b:ba:28:55:a3:13:a8:61:44:90:ab:04:48:5d:
                    c5:62:84:65:24:ec:fd:d0:7f:8e:3d:73:ec:e7:fe:
                    22:d3:98:49:ca:32:12:f4:b8:f6:3d:3d:57:ef:b6:
                    4f:9e:16:0b:40:b8:68:d4:cc:6e:aa:ef:95:41:e9:
                    89:d0:8f:3c:07:c1:6e:1f:d1:23:a2:f1:d3:31:94:
                    ec:69:43:68:b3:cf:4d:96:35:c6:33:6f:9c:0a:3b:
                    bd:53:bd:c6:74:f1:7d:fd:50:c3:9f:7d:c1:ae:25:
                    18:4a:99:b3:20:f0:27:ea:ee:e0:66:95:06:cb:73:
                    f8:f3:c1:67:1d:03:99:09:b3:ed:76:fd:15:34:dc:
                    5c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2D:0B:87:47:26:92:19:5C:43:A7:5E:06:F1:0F:9C:1D:8B:5D:0B
            X509v3 Authority Key Identifier:
                keyid:9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:91:8e:11:27:bf:cf:52:30:7e:08:c3:66:d8:10:c4:49:8c:
         56:9a:33:7f:d0:a2:3b:d1:53:d4:4f:43:8f:f7:ba:27:c4:4c:
         97:40:38:90:48:e6:67:6d:fb:12:3f:ff:7a:da:f8:31:c8:59:
         d5:78:01:d0:c9:ae:48:27:57:1f:a5:19:62:c7:29:af:08:57:
         f5:b8:9f:f2:1d:01:96:17:ed:f5:47:1a:b8:0c:1c:43:2a:57:
         ef:54:5f:c9:f9:ee:fc:65:e8:da:ad:3b:2d:3f:18:bb:0a:0b:
         37:28:e5:fa:73:da:c0:d0:4c:33:d5:e0:ac:3b:68:b6:9f:4c:
         ab:c8:d6:b1:88:20:63:bc:1e:f9:00:fd:45:7e:c3:b6:14:a5:
         ca:55:7f:f8:55:2f:2c:52:bf:10:50:88:2c:7c:2c:03:69:0d:
         d8:9d:cd:b0:ed:46:72:25:00:68:db:6e:57:c8:34:22:42:c2:
         c5:f8:73:78:eb:ca:d9:bb:05:ce:64:24:54:d6:5d:85:2a:0d:
         16:b1:38:db:3b:58:19:5e:98:bf:92:b7:d4:a6:b4:9e:e8:c1:
         2d:50:d1:94:cc:2b:89:18:da:53:3b:ee:c9:de:f7:d1:7e:cc:
         20:9b:fa:18:af:53:f7:28:13:5f:4f:62:5e:88:5b:e9:0c:70:
         da:9c:97:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:33:26 2025 by rpki-client