Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
File:                     EX-Mmn_H8TZY1ir76285iC2lEcw.mft (raw, json)
Hash identifier:          cBl+1McKpSiJdinV2xs6GvKVU5zIaLQs8I1kwdtj/7E=
Subject key identifier:   EA:B5:FF:A0:DB:59:B3:BA:0C:0F:CC:6E:55:8F:FA:A1:27:EA:38:D5
Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
Certificate issuer:       /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Certificate serial:       019747E7CE5D72A9E6A251B1B3A3F8DB58BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 01:01:03 +0000
Manifest this update:     Sat 07 Jun 2025 01:01:03 +0000
Manifest next update:     Sun 08 Jun 2025 01:01:03 +0000
Files and hashes:         1: EX-Mmn_H8TZY1ir76285iC2lEcw.crl (hash: cbyeZlrghIK5aAXOXfifEA+MtIGlC0Fv4jNoB03Gsvo=)
                          2: ibWU2hc-15QgZKi7MldaZ8Rm5_8.roa (hash: bP6Dry9UHojDKjvZz2pROS6WfkRMKw8CNymma91NgNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:ce:5d:72:a9:e6:a2:51:b1:b3:a3:f8:db:58:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
        Validity
            Not Before: Jun  7 01:01:03 2025 GMT
            Not After : Jun  8 01:01:03 2025 GMT
        Subject: CN=eab5ffa0db59b3ba0c0fcc6e558ffaa127ea38d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:71:0b:c5:02:bd:6e:e9:d0:b9:46:66:8c:b3:
                    ea:92:1b:44:4c:a7:a8:40:9b:33:3d:f1:22:76:19:
                    e7:64:06:0f:cc:d8:1e:42:f3:08:1e:d0:16:d8:03:
                    06:bc:43:42:85:37:4c:1c:e4:cd:11:7a:5c:92:00:
                    ba:63:f0:a8:63:fa:49:e2:5d:61:84:ff:52:57:a7:
                    ce:d3:78:d5:a6:5c:c6:50:b2:76:62:60:2c:fa:f6:
                    b9:3b:00:2b:a2:dd:6a:e0:37:98:70:57:07:2d:17:
                    a1:04:e2:59:78:71:d2:20:de:a7:b3:7b:4c:2d:5f:
                    00:e9:77:46:9f:19:69:c4:f9:c2:c0:48:07:22:5f:
                    7c:3d:3a:f2:a3:02:d0:38:ab:56:68:08:68:78:f6:
                    8a:1b:d6:62:40:73:40:7a:64:f5:a5:0e:90:4d:e2:
                    1b:29:84:f4:2a:60:60:2b:33:b3:57:ae:e2:de:e3:
                    5f:56:fb:af:b6:77:ed:7e:99:40:31:46:63:56:57:
                    05:ab:b4:18:69:0e:38:7d:ba:73:12:1e:53:48:ce:
                    c7:1d:5a:60:aa:04:39:33:9a:47:28:de:ed:4f:67:
                    80:b4:7c:b9:92:c2:4e:2f:4e:5c:ff:a2:de:ea:02:
                    d2:8d:6e:f6:50:7c:93:90:19:57:79:f2:06:cf:f7:
                    e6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B5:FF:A0:DB:59:B3:BA:0C:0F:CC:6E:55:8F:FA:A1:27:EA:38:D5
            X509v3 Authority Key Identifier:
                keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:07:84:ab:51:c8:72:b8:b2:c2:35:b0:5d:46:5a:72:53:79:
         98:11:48:89:3c:9e:86:f6:00:47:56:f5:f1:40:c9:26:61:20:
         5d:00:27:72:e2:e7:c1:6e:7a:4e:1a:eb:28:00:48:34:ef:78:
         34:fe:1e:28:56:27:1c:c1:32:f5:87:e4:0b:d5:bd:e0:d2:f9:
         63:cc:34:2d:3d:b0:49:fd:4c:39:3b:63:53:da:fb:58:06:7b:
         d4:7f:87:2d:f9:fe:8b:34:67:c2:38:72:19:ed:75:ba:a2:81:
         e9:91:74:d1:03:7e:c4:3a:fe:e9:bb:e9:1e:a3:e0:ab:62:38:
         55:e9:2e:44:43:dc:e6:d2:e2:6f:c2:1d:0d:06:f3:75:dd:c7:
         26:8f:27:a0:65:68:c8:20:0f:13:ac:ba:0b:af:66:37:82:42:
         51:89:7d:17:09:08:d2:22:55:61:cf:b9:06:1a:7f:81:8f:ef:
         6c:5e:84:17:41:a6:00:b1:9f:f9:48:b3:2b:89:7f:68:70:0d:
         32:04:62:84:df:6d:b9:3f:30:20:b8:0f:02:06:2a:df:ec:72:
         9d:7e:cb:0f:ef:c0:fb:6f:f5:48:12:54:9c:73:f9:56:f4:87:
         de:b0:9f:9f:3d:8b:69:fd:4e:67:ad:d1:11:04:54:83:33:c2:
         43:bd:22:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:13:38 2025 by rpki-client