Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
File:                     pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft (raw, json)
Hash identifier:          /Q0QsAFgQ5mq20ePZR657+nU4HQLmd/nxshkqgcy7bM=
Subject key identifier:   8D:71:24:41:26:87:12:DA:3E:58:4C:96:25:D2:2F:4B:49:F9:8C:36
Authority key identifier: A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C
Certificate issuer:       /CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
Certificate serial:       0196501164DB862753690DD1646319E7FFE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
Manifest number:          148F
Signing time:             Sat 19 Apr 2025 22:00:39 +0000
Manifest this update:     Sat 19 Apr 2025 22:00:39 +0000
Manifest next update:     Sun 20 Apr 2025 22:00:39 +0000
Files and hashes:         1: LnuT6eEdb88-TghvQ_FZnRefVyk.roa (hash: XQk1e8dAGrgYT1azOGp5hpmR57maWf6UhLO79IbQj1k=)
                          2: pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl (hash: kXUeIAhKsBG5ZCTO2cmsQwaJhqD0jJpPajzpLmQY7ik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:50:11:64:db:86:27:53:69:0d:d1:64:63:19:e7:ff:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a440b85f0f7ba6385cd4fee8a0ec04e81841542c
        Validity
            Not Before: Apr 19 22:00:39 2025 GMT
            Not After : Apr 20 22:00:39 2025 GMT
        Subject: CN=8d712441268712da3e584c9625d22f4b49f98c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cf:e2:97:ec:2d:ad:fb:74:42:03:8e:fa:ff:
                    37:e3:7f:2e:75:67:43:54:26:2f:93:b4:90:ac:51:
                    6d:d6:40:f8:c3:8e:8d:92:8e:4b:4f:fd:9c:db:a7:
                    cf:6c:10:ee:ef:24:4c:a6:ed:bf:40:02:31:1b:c8:
                    c4:bb:46:e0:be:39:e7:ee:ba:49:4b:f0:54:93:75:
                    71:e1:98:79:cd:a3:e4:6c:cd:41:f8:1d:e7:f1:c8:
                    22:a2:b1:f6:00:54:23:56:fe:3c:1a:ad:2f:4e:87:
                    b7:bc:a0:47:db:ff:37:4c:1b:e1:1d:59:4d:f6:8f:
                    f5:94:75:f6:fc:40:ce:f6:4c:eb:63:82:4d:cf:0e:
                    d0:e5:b5:8e:ea:22:11:a8:54:ad:ac:cc:75:1a:14:
                    e3:0b:02:1e:32:ea:28:1d:a9:88:71:d7:47:0a:ed:
                    b1:82:4f:ee:f5:2b:b4:ce:e3:ea:11:b0:b5:fd:d0:
                    e6:27:19:fb:10:b2:bc:10:2e:de:81:65:ba:d9:aa:
                    b0:88:f9:c8:a0:48:3f:4c:09:fb:ed:7a:3f:29:38:
                    71:02:77:3a:75:cb:b0:01:05:94:f7:87:63:48:f6:
                    cc:78:ec:af:5c:e3:8d:f3:a0:d5:e4:77:46:27:45:
                    76:26:ca:43:75:f1:9a:a5:fb:70:f1:15:4f:50:cd:
                    e7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:71:24:41:26:87:12:DA:3E:58:4C:96:25:D2:2F:4B:49:F9:8C:36
            X509v3 Authority Key Identifier:
                keyid:A4:40:B8:5F:0F:7B:A6:38:5C:D4:FE:E8:A0:EC:04:E8:18:41:54:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEC4Xw97pjhc1P7ooOwE6BhBVCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/21ec0f-a1ec-4ad4-a749-ddcfe36f433b/1/pEC4Xw97pjhc1P7ooOwE6BhBVCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fe:74:a0:52:63:24:f4:ea:c5:71:b9:d5:5d:19:9b:8c:ae:
         20:45:61:36:65:3e:a1:79:15:b4:f2:ce:20:8e:46:42:72:79:
         24:80:56:77:76:13:cd:be:e6:df:fb:a3:4f:c1:23:e5:49:2a:
         c1:68:5c:2c:6e:1a:b4:a8:62:8a:b2:ec:55:fc:98:1e:55:66:
         e2:bf:c3:40:dd:e5:62:26:d1:3e:65:5e:c6:ce:f3:fd:5f:3b:
         c1:85:e3:b9:a3:eb:8d:d0:e9:d1:60:f1:5d:62:46:d8:29:0b:
         58:38:a2:5f:d3:27:40:2c:85:01:90:29:13:3c:8b:03:f5:71:
         72:77:e3:63:13:2b:6d:d6:4a:b7:1a:b5:e9:8e:a6:48:2e:3e:
         20:27:05:12:1b:f3:36:79:40:dd:65:03:88:b3:e6:9e:29:4a:
         d5:fa:66:8f:c3:2d:ca:04:a3:9b:d0:b7:75:3c:76:ba:97:e9:
         5c:a9:63:57:ce:c6:e4:52:40:f6:ab:82:3c:e7:ef:12:5e:73:
         ff:66:89:b3:9b:cb:79:ad:81:2d:38:ad:1b:4b:7f:06:55:30:
         9d:26:d1:c5:f1:20:d2:cc:6a:88:ee:3a:af:87:40:91:a7:9a:
         5c:01:9c:ce:3e:9c:b8:82:08:be:2b:0e:ef:41:2b:55:df:ae:
         89:bd:57:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:17:10 2025 by rpki-client