Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft
File:                     MUTmCeNhkT48Owp410hqpFtWJAE.mft (raw, json)
Hash identifier:          zJ4JYDj1ynVaiSWW0eeadPJ3b17966T60D/VC74j1+c=
Subject key identifier:   8E:B7:E9:B3:52:18:D5:3F:C4:F5:15:82:C3:A2:E1:98:7B:A8:40:84
Authority key identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
Certificate issuer:       /CN=3144e609e361913e3c3b0a78d7486aa45b562401
Certificate serial:       0196A4D3341B705CBEAA2C58281B2BAEEF29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft
Manifest number:          152C
Signing time:             Tue 06 May 2025 09:00:26 +0000
Manifest this update:     Tue 06 May 2025 09:00:26 +0000
Manifest next update:     Wed 07 May 2025 09:00:26 +0000
Files and hashes:         1: 0grHL5XgK1ebyYywK4lDDAZgFXk.roa (hash: 7IJm0rOyyU+pJZuljsQpmmrB2AVEaK9nH1aTnz504mA=)
                          2: 1Aaeji2MZnsxUqe7GzlTKM-kECY.roa (hash: ULIiyMRJoIy1v2cVArI/haodlXB2hhFDzw6RLH+AIt0=)
                          3: BeECX5eJFfyGwemrzzJizOKE4xI.roa (hash: LnKd8SA4nwF4lOHNh/WuPipE/qVLC5TOIq7F+R9q7zE=)
                          4: MBRhqE6-aD7iCWcMnH5h8UHWwao.roa (hash: kKLFOWBQkg10mLbq/o1kc1WLMlwid8+y8wNhwWSrsCQ=)
                          5: MUTmCeNhkT48Owp410hqpFtWJAE.crl (hash: cJfe2oX90YcYjXwPfrKTLS/VNZPR0/kLckJD18DiSSA=)
                          6: yMibhdeNkrtpzm1LIcJxa2aSGEE.roa (hash: FzeHPUN5/1eWMKZnzxinmg7lQbi1t/jROjMl/iHf/wE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a4:d3:34:1b:70:5c:be:aa:2c:58:28:1b:2b:ae:ef:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3144e609e361913e3c3b0a78d7486aa45b562401
        Validity
            Not Before: May  6 09:00:26 2025 GMT
            Not After : May  7 09:00:26 2025 GMT
        Subject: CN=8eb7e9b35218d53fc4f51582c3a2e1987ba84084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3a:ff:cd:e8:36:8a:e6:44:8b:9d:e9:01:d2:
                    72:df:d3:28:b6:21:59:55:d2:8d:18:2d:4b:cc:8c:
                    f4:53:2c:b5:6a:50:d0:e2:65:c3:73:34:44:1f:01:
                    a8:64:f0:fc:7a:3d:49:5a:8b:13:62:6d:e1:9f:04:
                    2f:6b:41:fe:5b:61:b3:bd:5b:29:3d:df:c1:23:87:
                    53:2d:a8:6c:e2:1c:db:0f:4a:29:2f:25:34:0c:71:
                    ab:4a:2a:c4:d8:f4:13:fa:37:7f:d7:09:3d:a6:5c:
                    d4:4a:e7:67:a9:f5:94:40:8f:1b:64:da:34:81:63:
                    1b:a6:05:0e:64:da:40:46:49:47:22:31:ae:ea:1d:
                    fe:c4:77:b9:4b:a5:e1:86:17:94:d2:44:8c:2b:1c:
                    54:65:37:29:81:89:17:e4:4a:3a:5c:16:64:fd:7e:
                    e0:aa:b2:d7:6a:53:4f:e6:56:02:08:46:19:ea:ac:
                    c1:42:5f:6d:0c:4c:98:e5:a1:ca:a3:7e:aa:a4:59:
                    93:12:2d:a9:f1:d3:78:e8:72:e8:f7:2b:3a:ee:32:
                    12:dd:7e:a0:37:f9:c5:cd:2b:59:50:b1:16:7e:30:
                    62:7b:95:af:52:50:99:43:3d:3d:3f:04:3b:09:d7:
                    ea:94:e2:2a:be:66:53:19:f8:ed:a7:6d:ad:b2:42:
                    00:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B7:E9:B3:52:18:D5:3F:C4:F5:15:82:C3:A2:E1:98:7B:A8:40:84
            X509v3 Authority Key Identifier:
                keyid:31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:9a:64:2d:5d:6d:d3:e6:5b:c7:a5:2d:3b:fb:dc:8b:bb:13:
         13:8d:a4:05:6a:e8:95:a1:6d:d5:e6:e1:81:d8:c6:2e:38:e7:
         9e:03:ca:32:01:f0:b6:e8:48:aa:cb:8c:83:8e:d4:c7:1e:58:
         96:20:e5:04:2b:50:29:4a:53:b3:19:ef:20:51:85:32:d5:cd:
         a5:20:ce:b5:2b:5a:8c:78:95:b8:22:43:7b:72:76:5d:0c:2d:
         d3:83:60:48:cb:b2:df:37:be:67:2d:58:59:8a:b0:84:e5:c4:
         86:63:47:65:a7:92:6b:92:0e:ac:00:a5:37:91:89:06:59:4f:
         c3:9a:3f:77:8c:2e:0e:5e:c9:7d:a1:f3:14:5d:8f:d6:50:34:
         83:25:3a:6f:2a:c0:e6:81:c5:8d:2a:23:22:d9:ed:1d:2e:58:
         4a:7c:35:6d:60:a0:58:53:0f:ac:7b:31:e4:b2:9f:2c:91:1d:
         69:a9:1e:1e:05:8c:08:86:56:67:3e:cf:97:2c:93:3a:fe:ed:
         95:f1:62:f0:bd:d5:d6:00:f8:29:93:1c:e3:83:72:e7:5c:8b:
         02:92:aa:4b:a0:3c:75:b5:08:89:74:a3:b8:bf:5a:25:1e:3a:
         3f:e9:e5:e0:f9:ca:bf:be:39:40:15:7f:4d:c5:10:6b:15:16:
         e0:5f:ba:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:50:13 2025 by rpki-client