Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
File:                     ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft (raw, json)
Hash identifier:          +gnp6mR+VMco2qsIw8L0f98W0sUMT1gjeBWG3HkioTg=
Subject key identifier:   56:BB:77:E5:96:3F:E1:26:F2:AF:C0:76:51:30:27:DF:A9:0C:FB:DB
Authority key identifier: 10:24:E6:6D:7C:BA:77:B9:77:68:55:59:C2:48:1B:B9:04:4C:5B:75
Certificate issuer:       /CN=1024e66d7cba77b977685559c2481bb9044c5b75
Certificate serial:       01976BF43C149FF22374EAA235F676A8BE1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 01:00:57 +0000
Manifest this update:     Sat 14 Jun 2025 01:00:57 +0000
Manifest next update:     Sun 15 Jun 2025 01:00:57 +0000
Files and hashes:         1: AqNcisECeia8r42sdVkCO6MArLA.roa (hash: 18o7z7bmdzyzqumEyVAcE9Q6zGKgPT0KV/iWQ82M7jg=)
                          2: ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl (hash: 68VeYL3H+fH9Tg4hOJS7qkBAU/8M6iOlAQpC/0i95Nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:3c:14:9f:f2:23:74:ea:a2:35:f6:76:a8:be:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1024e66d7cba77b977685559c2481bb9044c5b75
        Validity
            Not Before: Jun 14 01:00:57 2025 GMT
            Not After : Jun 15 01:00:57 2025 GMT
        Subject: CN=56bb77e5963fe126f2afc076513027dfa90cfbdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:30:76:4f:ed:15:bc:d0:17:66:b9:7c:af:45:
                    a2:4a:d8:d5:ea:1b:0e:08:79:dc:e1:18:89:3d:72:
                    b2:12:46:21:24:6a:43:4a:af:a7:6e:4f:46:e2:06:
                    c4:30:6a:58:0a:06:29:51:b7:40:80:ab:06:89:b7:
                    43:79:16:eb:79:b6:bd:c5:a9:98:5d:5a:f8:0f:3e:
                    25:86:98:e9:c5:6f:b7:7e:ce:cd:b5:de:42:57:6b:
                    b6:09:12:51:da:52:9a:37:c7:13:79:62:48:8c:92:
                    9c:71:58:52:a0:d4:d8:f8:f7:63:a5:dc:29:46:8b:
                    d0:32:fe:34:23:5b:6a:5c:9e:0f:1c:24:12:6d:d2:
                    34:88:56:4e:48:ba:0f:26:e2:40:50:97:09:a0:ee:
                    ac:9d:a8:ba:18:8c:a0:4d:76:ac:85:82:58:f9:a5:
                    70:7f:4b:8d:1e:72:8f:90:17:bf:b5:e9:d0:b1:8e:
                    b9:9c:93:02:db:90:d5:48:73:af:27:23:37:69:14:
                    29:b9:65:bc:96:c0:1d:52:75:08:ed:25:3c:16:5f:
                    99:6f:0f:6b:a4:18:aa:cf:43:76:07:ca:31:e2:ae:
                    36:a5:f3:bf:fd:68:6e:56:df:ed:8f:69:ce:ef:44:
                    b0:da:a4:ad:17:42:f1:28:06:ee:de:9f:ae:24:1a:
                    d7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BB:77:E5:96:3F:E1:26:F2:AF:C0:76:51:30:27:DF:A9:0C:FB:DB
            X509v3 Authority Key Identifier:
                keyid:10:24:E6:6D:7C:BA:77:B9:77:68:55:59:C2:48:1B:B9:04:4C:5B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECTmbXy6d7l3aFVZwkgbuQRMW3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a155c9-13e2-4b28-b682-47ea3f874355/1/ECTmbXy6d7l3aFVZwkgbuQRMW3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:94:61:2a:42:6d:77:30:5f:cd:36:28:b2:47:74:19:1f:e2:
         aa:4e:14:5d:5e:a0:f0:15:80:0d:07:81:92:fe:d6:65:4f:ff:
         ab:41:05:07:f6:02:e0:0f:e4:bc:db:92:d6:db:77:91:aa:69:
         61:97:12:0a:b1:5f:a7:c5:af:84:86:57:db:66:b1:e1:e4:f5:
         c6:b3:84:04:74:8d:29:14:0f:96:78:08:33:8e:5f:93:7b:f0:
         a7:14:2a:5b:d5:7a:8d:47:78:fe:ef:57:cc:49:6e:5f:8b:78:
         60:f1:cc:2f:1d:bd:63:4c:e3:5a:6f:28:11:cd:1e:2f:57:44:
         86:4b:5a:9d:41:06:fb:ec:90:aa:74:2a:59:5a:8c:1a:fe:56:
         0d:fa:f0:d1:ad:56:46:6f:45:04:e9:1f:84:2e:bc:56:67:10:
         07:72:6c:43:be:57:3e:66:fa:9e:98:18:28:a6:e6:87:d5:56:
         89:52:22:c2:73:39:1d:60:ac:1f:0c:fb:59:c8:e3:2e:40:d0:
         4e:bc:bc:45:3a:62:20:e3:88:3d:f5:6c:44:a7:d0:5a:56:89:
         c7:e7:b3:d4:36:ea:e1:8f:8e:c3:51:04:c0:fc:17:b1:e1:5e:
         de:a5:33:5d:80:e8:a9:de:dc:af:2a:3a:0d:5e:9b:cc:67:22:
         8e:a1:a4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:17:11 2025 by rpki-client