Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft
File:                     MUTmCeNhkT48Owp410hqpFtWJAE.mft (raw, json)
Hash identifier:          4cwzRUMifuhZV82Ha+qAV/uwbLJoAcQiHo+dcEA1d7E=
Subject key identifier:   1F:D9:A2:7F:C4:18:A0:24:AC:5C:37:FD:9A:EA:ED:25:E7:E9:79:11
Authority key identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
Certificate issuer:       /CN=3144e609e361913e3c3b0a78d7486aa45b562401
Certificate serial:       0198744FB76748B08909E37DF16D29FA4B64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft
Manifest number:          161C
Signing time:             Mon 04 Aug 2025 09:00:38 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:38 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:38 +0000
Files and hashes:         1: 0grHL5XgK1ebyYywK4lDDAZgFXk.roa (hash: 7IJm0rOyyU+pJZuljsQpmmrB2AVEaK9nH1aTnz504mA=)
                          2: 1Aaeji2MZnsxUqe7GzlTKM-kECY.roa (hash: ULIiyMRJoIy1v2cVArI/haodlXB2hhFDzw6RLH+AIt0=)
                          3: BeECX5eJFfyGwemrzzJizOKE4xI.roa (hash: LnKd8SA4nwF4lOHNh/WuPipE/qVLC5TOIq7F+R9q7zE=)
                          4: MBRhqE6-aD7iCWcMnH5h8UHWwao.roa (hash: kKLFOWBQkg10mLbq/o1kc1WLMlwid8+y8wNhwWSrsCQ=)
                          5: MUTmCeNhkT48Owp410hqpFtWJAE.crl (hash: NDEqidf669IOEntWW0vZO9mXv7DyIEvtEM6YiW58zaE=)
                          6: yMibhdeNkrtpzm1LIcJxa2aSGEE.roa (hash: FzeHPUN5/1eWMKZnzxinmg7lQbi1t/jROjMl/iHf/wE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:b7:67:48:b0:89:09:e3:7d:f1:6d:29:fa:4b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3144e609e361913e3c3b0a78d7486aa45b562401
        Validity
            Not Before: Aug  4 09:00:38 2025 GMT
            Not After : Aug  5 09:00:38 2025 GMT
        Subject: CN=1fd9a27fc418a024ac5c37fd9aeaed25e7e97911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:08:19:9d:67:c1:36:c6:63:0a:d4:13:51:fa:
                    8e:a3:28:5e:21:fd:ad:4a:a4:dc:1e:a8:c6:cd:aa:
                    4c:88:dc:7d:09:4f:d4:0f:aa:62:18:1c:42:1d:c7:
                    13:a9:c4:45:8e:98:24:fc:b4:39:79:69:e0:2a:8c:
                    51:a2:3b:02:c1:2c:ee:31:d5:33:29:fc:b8:a9:3a:
                    e9:d1:f5:bc:45:05:0f:77:b5:97:20:f2:a2:24:31:
                    d5:5d:a0:e6:70:f5:1a:79:6b:f8:f0:cb:93:ab:03:
                    8e:6a:f8:13:4c:77:a3:9c:1f:17:e3:0a:12:93:bc:
                    d9:e7:f2:76:84:5d:ff:0a:8b:07:06:3c:05:97:ce:
                    85:56:70:ea:ee:8b:fb:ac:bf:f0:f6:41:1b:42:1e:
                    2c:c3:a4:d6:16:25:17:67:e5:58:01:3c:ea:e3:59:
                    a6:66:7d:7c:71:5e:98:d5:21:f7:c1:f0:97:7b:b0:
                    41:4c:fb:c7:de:00:58:a6:3c:0c:81:f1:b0:27:f0:
                    a3:51:e4:ec:33:ee:ca:5e:ef:7a:ba:b2:19:89:9d:
                    42:87:95:91:bb:a3:72:36:57:0c:89:c4:ec:8b:fc:
                    a5:49:db:08:cf:54:96:f1:4c:1e:7a:84:fe:61:70:
                    c7:4c:0a:67:01:a9:23:d8:13:49:4b:67:8f:49:27:
                    06:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D9:A2:7F:C4:18:A0:24:AC:5C:37:FD:9A:EA:ED:25:E7:E9:79:11
            X509v3 Authority Key Identifier:
                keyid:31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f4:a9:99:1e:8f:89:57:0c:21:1a:97:1c:24:a6:35:8a:d3:
         da:e0:62:2a:f8:28:61:69:31:4c:91:14:a9:e6:c4:b0:bc:ce:
         c1:e5:71:ae:fb:11:f2:f2:66:6d:21:10:4d:35:8f:56:4f:6a:
         87:ba:bb:72:ed:a5:8a:95:3f:9a:5b:e0:5b:a0:3c:c3:85:23:
         6a:56:46:41:81:2f:40:91:a5:4e:e9:31:6c:1e:35:2f:57:1c:
         40:05:bc:d3:a5:95:26:77:3c:89:25:db:3a:63:68:96:d1:d0:
         40:c7:2a:36:f5:62:2e:82:1a:8d:89:17:74:cd:16:12:31:c3:
         56:f1:dc:25:de:8e:67:bf:21:e4:9c:01:78:d2:e8:60:b0:52:
         8a:ea:20:d1:79:cf:bf:bd:e1:3a:89:98:38:b3:ff:47:fb:c1:
         39:03:d6:f4:6d:32:84:8d:f7:69:0c:af:6b:99:bc:de:3d:5a:
         7f:b0:fd:a1:48:02:5b:d1:7c:4f:a3:6c:6d:2f:19:e4:7b:1a:
         1e:22:17:e9:4d:27:e3:dc:47:32:0d:73:0f:74:81:e9:ce:d0:
         20:04:a7:52:4a:ec:26:f0:c1:48:2b:33:07:5e:33:6a:9f:40:
         e5:2b:a0:2e:ed:64:2e:01:90:5b:78:da:4a:5a:4b:df:c2:df:
         54:5c:1c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:19 2025 by rpki-client