Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft
File:                     Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft (raw, json)
Hash identifier:          N/s+XC/q6Oww1L7QapelCdReWMnqebTi6lS0GcnAbSg=
Subject key identifier:   0C:8C:02:68:49:9E:1B:CC:15:84:B9:7D:D0:29:95:63:7F:97:D9:26
Authority key identifier: 32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9
Certificate issuer:       /CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
Certificate serial:       0197428A6F8FA5DECE5B4175028502C2ADC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft
Manifest number:          155C
Signing time:             Fri 06 Jun 2025 00:00:58 +0000
Manifest this update:     Fri 06 Jun 2025 00:00:58 +0000
Manifest next update:     Sat 07 Jun 2025 00:00:58 +0000
Files and hashes:         1: 2Z7EtqMWz7jdGLOQTCkczOOupVQ.roa (hash: bipDGw88FluLLp9GhPHHNjUegq603G3YCRelI4f1Izo=)
                          2: FhZd88jZ9jh03466aEP-twQcEMw.roa (hash: GqVz3280439YQWP+4ZwFNVQsgWkyoEgtpCqfdDxqe8Y=)
                          3: HsoHvy4vaHG-GoulbRb3ifQ_PuU.roa (hash: 69uYqrq0xGq1JO0hUhdXdKRopq7RJQhoaRro9AjlRJc=)
                          4: Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl (hash: ++uKRUhAlBnN2fqIXnHO6zcXvWY70BZOhFMCfDNopt4=)
                          5: PGMK1-OlWgKaP3bJNRajQpxu8vA.roa (hash: VP1Lh654Pjz3OCgsDqSZJzeq8ULo1rSLNHx/bHWXvAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 20:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:42:8a:6f:8f:a5:de:ce:5b:41:75:02:85:02:c2:ad:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ee1bcd8ce393d98a7583ac13f1425d4faf27c9
        Validity
            Not Before: Jun  6 00:00:58 2025 GMT
            Not After : Jun  7 00:00:58 2025 GMT
        Subject: CN=0c8c0268499e1bcc1584b97dd02995637f97d926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:87:bc:18:43:e1:63:91:90:26:c6:a7:65:
                    a8:3e:0d:3f:ed:dc:44:42:13:8a:48:33:98:8c:18:
                    e0:65:62:02:e2:ed:1d:ee:db:dd:c3:79:f6:95:b7:
                    34:ce:d9:eb:3a:ad:9a:08:4f:97:0a:6a:e1:31:33:
                    5b:9e:fa:6c:13:ec:4f:31:0a:6f:28:5b:ec:7d:b1:
                    94:54:12:3f:56:c3:76:20:7e:9b:9e:4f:aa:3c:f0:
                    02:80:09:72:8f:62:bd:a8:21:c7:ca:97:95:92:bb:
                    fd:70:84:94:c1:a8:b8:f6:23:a8:01:09:ee:bf:c2:
                    d2:f5:f6:77:65:96:15:19:bc:59:1a:a2:66:51:b1:
                    66:40:da:02:c9:d7:63:18:4d:e2:40:d5:cc:a5:3f:
                    bc:f4:82:bc:11:fc:c7:39:a8:0b:71:fa:aa:d2:cb:
                    ae:36:a8:0c:32:64:42:e5:23:9c:31:c2:38:9c:56:
                    7d:64:e5:17:38:d8:09:41:4f:31:51:80:7d:9d:e6:
                    5a:ff:61:bb:d5:e3:73:c6:73:db:bf:95:2b:b4:3f:
                    51:5f:52:90:df:52:09:a4:14:74:ce:4b:ee:82:36:
                    d3:28:54:a8:bf:08:70:0b:cc:46:6f:b0:72:2f:02:
                    f1:5a:ad:3d:8b:6b:aa:d3:fb:1e:0d:29:47:15:c8:
                    27:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8C:02:68:49:9E:1B:CC:15:84:B9:7D:D0:29:95:63:7F:97:D9:26
            X509v3 Authority Key Identifier:
                keyid:32:EE:1B:CD:8C:E3:93:D9:8A:75:83:AC:13:F1:42:5D:4F:AF:27:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e4e89f-0aad-4707-865a-40012c82979b/1/Mu4bzYzjk9mKdYOsE_FCXU-vJ8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:33:d5:69:9b:c2:3c:cb:83:7d:31:a0:60:9c:f5:e0:d3:66:
         cf:1b:9a:59:b5:56:f7:45:93:b5:a5:c2:79:98:42:32:39:fe:
         22:dd:6b:a1:26:54:fe:93:2e:a3:73:5b:50:04:38:15:f1:17:
         10:a8:d9:3d:0d:38:b1:80:06:71:f8:f8:60:c5:70:cb:d2:ff:
         10:30:b7:86:d6:7c:02:01:f8:81:e1:79:3a:69:53:9e:47:b8:
         4f:ca:58:f3:8c:cb:9c:50:c8:ae:a1:ca:9c:fe:b8:25:35:7e:
         a8:a3:d9:f8:85:a0:45:90:19:4e:7a:4b:58:8f:7f:99:a0:9c:
         a4:32:e0:33:bc:52:10:3f:2d:bb:3c:e7:07:3f:0a:c6:37:47:
         dd:d5:d5:80:b7:ae:34:58:52:15:35:ec:c9:25:96:07:10:cd:
         dc:0d:e3:34:7c:4f:6d:c2:7c:ee:12:7b:da:fe:83:25:2a:d4:
         b0:3e:28:e5:b3:b7:72:eb:5a:0c:12:11:77:b6:01:3c:bb:a4:
         6c:99:3f:ae:81:37:25:c0:16:40:37:52:01:05:6f:16:c0:24:
         6b:ba:bc:20:5e:7e:cc:1c:02:87:4d:91:e2:e2:be:3e:20:9e:
         a1:f9:3e:53:e3:ec:19:42:4d:16:78:c7:7c:96:38:24:8d:39:
         38:47:59:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:11:56 2025 by rpki-client