Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
File:                     mTfH9VuM8OdKXeCQMprZtyjGrXc.mft (raw, json)
Hash identifier:          aSezh5Y3jWm/e2wDo6aX1AcRKXFHAaklAHotQki8GLk=
Subject key identifier:   6E:AF:C8:00:1B:41:D4:AD:F4:85:66:F3:15:81:4C:6A:0D:E3:FA:42
Authority key identifier: 99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77
Certificate issuer:       /CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
Certificate serial:       01976F2BCC7BDD7091F36BBC9A26E41E5B45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
Manifest number:          1592
Signing time:             Sat 14 Jun 2025 16:00:30 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:30 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:30 +0000
Files and hashes:         1: QDRodL1Ij0kvPV6RatQCpAs4M7Q.roa (hash: 8yQMKLh2R6BvydYUR3v0EXrX6Bu8MKleBRx4SEEyIAM=)
                          2: mTfH9VuM8OdKXeCQMprZtyjGrXc.crl (hash: zxoZd7nc0HJuQ5H6lVFcXZN+LSTbt1C/wCsRH/J6xRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2b:cc:7b:dd:70:91:f3:6b:bc:9a:26:e4:1e:5b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9937c7f55b8cf0e74a5de090329ad9b728c6ad77
        Validity
            Not Before: Jun 14 16:00:30 2025 GMT
            Not After : Jun 15 16:00:30 2025 GMT
        Subject: CN=6eafc8001b41d4adf48566f315814c6a0de3fa42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:6f:1a:99:d8:a8:cf:f2:c5:3e:8e:d4:aa:
                    68:01:2c:7a:bd:eb:d7:e5:b8:a8:2c:3c:35:a4:ee:
                    54:d4:a2:c6:90:4d:3a:1e:79:7b:be:90:bd:4f:6d:
                    66:a2:28:60:b8:33:ea:3e:02:a8:13:17:ba:f4:8b:
                    0e:c8:59:6d:ab:7e:db:45:15:85:ea:d9:e1:e3:74:
                    96:e6:a2:f4:c6:21:df:97:c7:71:72:43:e2:62:c4:
                    68:2a:b9:0a:8d:af:cc:4d:37:3e:99:7d:c5:67:b5:
                    91:57:56:4b:fc:16:5a:67:16:29:b1:85:d8:12:93:
                    48:47:b2:15:43:53:12:64:3e:5c:30:2f:b4:a6:71:
                    7c:22:28:ef:16:c4:44:50:d2:43:2b:39:cb:b1:c3:
                    79:13:a4:46:ca:30:de:be:41:72:47:2b:2b:98:bf:
                    aa:97:a5:92:1e:98:48:b1:a1:03:f2:b5:5d:35:7b:
                    a5:66:b8:4d:84:3b:9a:9e:09:e8:09:db:a2:ef:cb:
                    cb:29:3a:34:73:60:1b:fb:ea:b6:ae:91:bf:ee:9d:
                    dd:d0:7b:e9:11:dc:8a:39:86:a3:d3:f2:a9:ac:79:
                    ad:7b:40:6b:59:18:f4:cf:26:a3:71:76:75:a2:af:
                    d6:93:b5:5e:85:4b:81:2b:a1:ff:6e:19:16:6c:69:
                    a1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AF:C8:00:1B:41:D4:AD:F4:85:66:F3:15:81:4C:6A:0D:E3:FA:42
            X509v3 Authority Key Identifier:
                keyid:99:37:C7:F5:5B:8C:F0:E7:4A:5D:E0:90:32:9A:D9:B7:28:C6:AD:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTfH9VuM8OdKXeCQMprZtyjGrXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4f8c2d-ec40-4d3c-8426-b75ef563720c/1/mTfH9VuM8OdKXeCQMprZtyjGrXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:6a:3f:91:55:2b:31:90:d3:78:88:02:27:44:0e:59:c9:34:
         2b:b8:df:2b:e4:c3:f1:74:69:3d:4b:a4:e6:db:80:d1:fb:6b:
         03:90:06:7a:25:b2:3a:f7:8e:8a:fb:20:f3:04:1c:76:97:9f:
         c7:10:2d:ce:cc:d6:49:87:75:7b:f5:a9:1a:38:0d:21:bd:28:
         89:27:5c:b6:50:da:c5:15:34:b2:04:45:e7:63:4a:2d:cb:aa:
         cc:ae:5d:55:3b:dc:97:26:7e:f7:37:af:2e:40:47:11:a2:0b:
         dc:c7:6e:d2:a5:8d:9a:b5:2c:31:85:b3:f0:63:44:38:df:0b:
         2a:b5:64:af:41:4b:16:54:14:c7:77:d2:7f:87:f3:cf:a3:f7:
         a4:dc:7e:3e:6f:52:d6:7e:b6:d8:06:4e:ce:5a:9f:7f:03:f9:
         bc:26:45:c1:4d:63:6f:53:02:f7:fb:60:d7:be:ce:b5:a3:55:
         d4:4b:55:f5:4f:04:d2:2e:d4:b6:02:0b:69:fe:e9:c9:4f:b8:
         a1:33:ba:9f:a9:a1:30:1f:db:2f:ad:45:69:2d:13:f3:b4:13:
         29:f0:04:5b:a8:cc:be:39:1e:f3:5e:f7:94:dd:f4:cc:85:d8:
         ec:bc:2c:3d:bf:bc:79:34:17:09:ce:ae:5d:c2:63:65:78:66:
         3f:81:63:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:13:44 2025 by rpki-client