Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
File:                     MuZYUVseanK5nzMmaeBp5hVPcN0.mft (raw, json)
Hash identifier:          Utn0MaduogyCJ6uVlJyHogTQWpiFE3bs80LG5ulYOtw=
Subject key identifier:   36:5F:4B:E4:0A:01:89:F4:2F:C6:05:22:1A:09:92:23:25:57:28:C6
Authority key identifier: 32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD
Certificate issuer:       /CN=32e658515b1e6a72b99f332669e069e6154f70dd
Certificate serial:       01964FDADDF0791CF0B01FD90C9B66847F1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
Manifest number:          0FD5
Signing time:             Sat 19 Apr 2025 21:01:05 +0000
Manifest this update:     Sat 19 Apr 2025 21:01:05 +0000
Manifest next update:     Sun 20 Apr 2025 21:01:05 +0000
Files and hashes:         1: IP2TA110bw-H4O1wamCYoNbCcjM.roa (hash: hPPZWdSxmIy27LNJGRF/m5E6I6iPJVLPz81w8YZa7M4=)
                          2: MuZYUVseanK5nzMmaeBp5hVPcN0.crl (hash: AbtoQ+Q3LqXDbUYOIrgiCXA3chF9HvsEX9nSSmrx1i4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 21:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:da:dd:f0:79:1c:f0:b0:1f:d9:0c:9b:66:84:7f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e658515b1e6a72b99f332669e069e6154f70dd
        Validity
            Not Before: Apr 19 21:01:05 2025 GMT
            Not After : Apr 20 21:01:05 2025 GMT
        Subject: CN=365f4be40a0189f42fc605221a099223255728c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:27:b3:42:20:ba:c4:f4:16:88:1e:27:60:6f:
                    8a:04:38:82:5e:da:30:46:f1:f0:9e:ad:43:62:f2:
                    1d:38:ba:f6:53:1b:dc:57:f8:dc:cd:2a:81:5b:7e:
                    77:ac:c5:bb:6a:33:ea:31:12:bd:8a:c8:8e:33:ee:
                    87:f9:6d:17:10:d2:f9:0e:60:d4:0f:82:31:57:0a:
                    c1:19:6f:00:11:e3:be:60:fb:74:9d:22:a1:94:b9:
                    d2:e6:1d:d5:96:95:16:0c:cd:d7:b6:18:d3:dc:6c:
                    7c:5b:54:76:ae:00:83:e3:4a:63:28:92:ea:a6:65:
                    71:08:68:6a:30:09:19:fd:49:82:df:58:3b:a3:1b:
                    46:df:55:14:27:37:ea:16:a3:de:95:9a:2a:6d:f5:
                    69:5b:77:f1:46:16:09:05:ea:bc:22:93:e5:d7:eb:
                    5b:f6:a2:a3:ba:60:53:f3:07:f2:fe:c6:95:20:93:
                    08:57:f3:36:00:17:f4:3d:22:ab:29:64:0b:50:9b:
                    52:db:33:ad:96:17:3c:b7:5a:84:6b:5e:55:31:53:
                    d9:10:82:ba:5d:63:ef:c7:49:f1:7b:63:2e:52:72:
                    e7:c5:36:0a:58:f7:17:84:3d:80:38:77:4e:3b:f8:
                    60:4a:e4:52:00:21:6c:95:a8:ff:f1:0d:c4:84:25:
                    13:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5F:4B:E4:0A:01:89:F4:2F:C6:05:22:1A:09:92:23:25:57:28:C6
            X509v3 Authority Key Identifier:
                keyid:32:E6:58:51:5B:1E:6A:72:B9:9F:33:26:69:E0:69:E6:15:4F:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuZYUVseanK5nzMmaeBp5hVPcN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f69c42-6f9d-490e-b132-67f8e7d1137c/1/MuZYUVseanK5nzMmaeBp5hVPcN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:12:d6:a6:f2:57:c5:cc:ac:e2:7f:90:e7:5d:01:63:a9:81:
         93:32:08:4b:c5:27:2d:05:6a:87:33:33:f4:1f:be:c4:06:fe:
         d6:29:cb:c6:fc:f6:a8:52:36:c0:f4:44:6c:f9:37:79:2c:08:
         57:1f:4c:a6:00:0d:84:39:65:ca:66:e8:23:7c:c0:d9:19:bf:
         65:c5:91:f7:87:38:f0:de:40:84:1d:37:3e:f7:56:2f:bc:ed:
         ce:03:38:d0:28:2b:c9:08:60:bb:46:90:31:c2:95:2b:56:a8:
         77:fa:10:c1:fe:a8:2f:56:d1:0e:4a:25:75:31:21:6e:3d:d3:
         cd:db:15:08:09:ff:ed:21:33:17:64:4f:46:33:a7:77:ef:50:
         5f:f2:fe:21:39:57:49:4f:2b:a6:ac:e9:1e:13:24:97:f6:a7:
         29:1d:29:f2:4b:80:05:0f:e7:a6:8f:1d:08:d1:6d:9f:e1:6a:
         b3:c7:d6:77:b7:96:36:0f:54:b1:cd:db:16:b6:c7:a5:99:25:
         34:df:82:8a:60:5c:66:ad:82:0b:46:03:14:55:48:ce:72:ee:
         d8:ec:92:36:df:09:f8:bc:f6:4e:a2:b3:8d:97:56:00:98:de:
         e8:5b:70:41:65:26:47:a2:ce:bd:78:99:64:3f:ee:79:62:5b:
         2a:9e:70:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:05:53 2025 by rpki-client