Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
File:                     EX-Mmn_H8TZY1ir76285iC2lEcw.mft (raw, json)
Hash identifier:          UwQ6Y0K4K77h7V1WHZM+sxxQoW0+yKTsdAF11EkkaL8=
Subject key identifier:   A3:16:0D:75:5F:7C:44:41:B6:3C:8F:66:37:9E:A3:81:09:A0:4B:E5
Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
Certificate issuer:       /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Certificate serial:       01976C98872B4C4B0E9EC0E5508DC145D8E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 04:00:24 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:24 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:24 +0000
Files and hashes:         1: EX-Mmn_H8TZY1ir76285iC2lEcw.crl (hash: uEwSskHgtpDe21pKgBGdbCKLzhRNW/9u9Q/Cg/xU6HM=)
                          2: ibWU2hc-15QgZKi7MldaZ8Rm5_8.roa (hash: bP6Dry9UHojDKjvZz2pROS6WfkRMKw8CNymma91NgNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:87:2b:4c:4b:0e:9e:c0:e5:50:8d:c1:45:d8:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
        Validity
            Not Before: Jun 14 04:00:24 2025 GMT
            Not After : Jun 15 04:00:24 2025 GMT
        Subject: CN=a3160d755f7c4441b63c8f66379ea38109a04be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ad:e2:e9:d8:e7:10:b9:56:89:c3:45:c2:27:
                    df:55:6b:da:e3:2c:18:bd:d0:cf:4d:d1:fe:e2:96:
                    73:4f:ba:8d:08:6a:16:ab:4d:7b:ef:91:3f:79:8f:
                    94:a0:84:8f:74:43:89:34:5e:dc:b4:c8:85:ad:33:
                    73:bf:34:c4:a7:dd:03:47:65:05:f0:77:f9:e6:e8:
                    32:b3:c9:2f:cc:32:78:17:87:b2:b1:57:f9:29:c6:
                    b2:5b:09:17:4c:fb:52:dc:fa:fc:62:78:71:9f:b8:
                    30:d1:75:97:6f:9b:ef:c9:40:b8:18:06:45:8d:f1:
                    b8:5b:b8:70:c6:92:1f:13:14:9b:4c:78:d4:34:94:
                    dd:88:df:d0:21:c0:a4:47:07:7f:cb:07:86:08:49:
                    3e:e1:f7:17:92:cc:d0:6d:72:64:38:d2:47:35:62:
                    24:32:56:f1:3e:92:48:e7:36:61:c5:60:83:3c:5e:
                    6e:2b:d9:02:4b:49:b5:dd:72:22:78:2c:4c:83:ae:
                    f3:68:6e:fd:b7:2a:a0:d1:fa:22:02:d5:68:d2:da:
                    46:4f:f4:e1:24:c1:d2:0e:ab:33:a7:d3:3d:97:aa:
                    d4:50:00:8a:45:81:3b:dd:f2:d8:0b:9b:fe:b1:5f:
                    09:bc:f2:c0:0e:1e:a4:af:14:4a:a4:af:f4:e1:bf:
                    8d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:16:0D:75:5F:7C:44:41:B6:3C:8F:66:37:9E:A3:81:09:A0:4B:E5
            X509v3 Authority Key Identifier:
                keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e8:ad:eb:b4:a9:63:3a:19:e7:56:5d:6b:60:70:ae:b7:86:
         01:82:fe:90:c3:4c:45:9d:32:83:a2:99:c0:5c:46:fe:b5:4a:
         37:ed:13:14:e0:1b:ee:6d:08:06:13:7e:ed:d8:0d:76:76:79:
         d3:78:3c:5b:40:c9:44:fa:59:0a:4f:09:16:24:35:3d:9c:06:
         7e:74:da:79:5d:6d:86:9e:fd:6f:55:38:3c:94:ca:3b:00:7c:
         66:51:3c:c1:b4:e9:57:17:aa:64:b7:03:06:dc:a4:55:2d:20:
         29:e3:04:e7:ac:b6:6b:26:05:60:cc:86:6d:4c:a5:5d:74:6a:
         b8:5e:b7:9d:c1:fc:25:da:a9:42:09:f8:ed:d5:7b:b0:87:fc:
         49:92:bc:63:1c:c1:fd:99:0b:5a:ce:b5:fa:8d:36:28:98:b5:
         b4:6c:3d:5e:40:71:d8:ed:d8:08:79:0c:2c:3c:c2:14:aa:1b:
         2c:cc:f9:6a:5d:8e:c6:c2:d7:c2:84:c4:db:12:b9:68:83:d1:
         bf:a5:1a:46:bc:f9:c3:a5:a4:72:60:c4:a8:2e:3b:bf:2c:2a:
         11:f9:d8:dd:05:61:e7:73:3d:39:d1:29:c5:78:2e:e6:5a:1a:
         54:69:a8:2c:ae:78:d0:56:12:7b:8f:00:a0:92:12:8f:d7:1a:
         48:a1:07:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:16:05 2025 by rpki-client