Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
File:                     EX-Mmn_H8TZY1ir76285iC2lEcw.mft (raw, json)
Hash identifier:          AP03XUDs5uoLK01tDkS7lI0Fp3CtTl0K9FoOrS7Jne0=
Subject key identifier:   7F:6E:3A:3D:2E:75:49:A5:6A:37:DC:99:63:08:EF:56:AD:66:F1:E2
Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
Certificate issuer:       /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Certificate serial:       019926D765543B29E2E7C766D5DAE9F83901
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
Manifest number:          1675
Signing time:             Mon 08 Sep 2025 01:01:14 +0000
Manifest this update:     Mon 08 Sep 2025 01:01:14 +0000
Manifest next update:     Tue 09 Sep 2025 01:01:14 +0000
Files and hashes:         1: EX-Mmn_H8TZY1ir76285iC2lEcw.crl (hash: 8XE0aQ4ELP9qi9PZ1ENuqDLd+iwdU2CXIJr9jB5g008=)
                          2: ibWU2hc-15QgZKi7MldaZ8Rm5_8.roa (hash: bP6Dry9UHojDKjvZz2pROS6WfkRMKw8CNymma91NgNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:26:d7:65:54:3b:29:e2:e7:c7:66:d5:da:e9:f8:39:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
        Validity
            Not Before: Sep  8 01:01:14 2025 GMT
            Not After : Sep  9 01:01:14 2025 GMT
        Subject: CN=7f6e3a3d2e7549a56a37dc996308ef56ad66f1e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d5:d5:93:11:5f:44:31:57:89:23:2d:75:5d:
                    e0:2d:48:0b:a8:06:6e:34:cb:2f:37:cd:ce:f8:9d:
                    7f:9a:66:dd:69:7f:db:5e:00:c7:5b:e6:5f:96:5d:
                    e9:73:bd:5e:c6:a5:03:ad:c4:8b:86:9a:f6:08:c2:
                    d7:07:17:a9:91:2b:84:2a:b6:5a:cd:c0:af:83:ca:
                    22:da:80:15:cb:e3:67:8b:82:74:e2:38:6c:a7:be:
                    05:2e:0a:ba:d7:c6:4c:c5:39:a4:b4:53:9a:69:d6:
                    44:58:db:5c:09:19:e0:43:a6:69:cb:fe:80:8d:9d:
                    e8:03:8c:e8:13:e2:25:ea:77:48:21:2a:2a:a3:50:
                    e3:28:92:07:cc:05:d5:6b:e8:1b:e0:3f:b9:db:32:
                    b1:bc:b6:52:80:fd:86:63:56:d8:dc:00:83:d2:47:
                    fe:4b:0e:fc:13:d4:98:64:63:52:aa:83:43:de:6f:
                    87:b1:6a:e5:ce:b5:af:c0:96:e0:dc:a7:05:9e:27:
                    a1:ac:91:d9:ea:31:24:8c:48:91:60:e1:20:de:f0:
                    e2:b0:f6:41:89:9d:43:76:08:9c:b4:92:49:e7:62:
                    e7:56:c8:59:9f:0f:67:9b:92:f3:a5:c3:56:59:fb:
                    56:6a:cc:6d:45:83:2d:97:35:6f:16:b2:65:8f:22:
                    19:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6E:3A:3D:2E:75:49:A5:6A:37:DC:99:63:08:EF:56:AD:66:F1:E2
            X509v3 Authority Key Identifier:
                keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a8:f6:3c:2b:65:20:78:3d:d9:6d:1b:e7:ae:53:35:dc:a0:
         40:3b:ab:e0:9c:58:ba:84:3f:1a:8d:3e:91:b6:80:a0:ae:05:
         dd:cb:aa:5c:44:1c:1e:fa:08:dc:1b:4b:8b:8e:3a:15:80:37:
         19:11:be:80:f8:a8:8e:cb:73:ae:c6:d5:e2:cb:80:f0:33:af:
         4c:4c:e7:79:bd:d1:17:5b:9d:af:df:1b:3a:3c:13:72:ad:b0:
         54:bb:72:0f:fc:71:6d:b3:b9:20:82:ed:54:08:e9:3e:0a:6c:
         3e:fa:85:a3:fe:c5:0e:ac:59:67:ab:c8:45:7b:d7:de:9f:37:
         85:a4:58:50:13:59:21:2e:42:12:c1:b0:be:51:68:9f:82:17:
         58:bb:fe:9f:b2:7a:bf:2d:69:d4:9f:e7:c2:09:4f:1c:ae:a7:
         62:8e:eb:91:48:93:c3:04:b3:b1:2c:7a:81:01:fb:02:ee:53:
         f8:3a:1e:82:98:64:65:f6:cf:5a:5f:9c:e2:a7:7c:3e:bb:44:
         d0:7f:50:3f:24:79:39:4b:47:25:13:d5:79:35:46:03:6f:73:
         68:12:29:c8:84:7c:3e:26:33:ce:ab:b7:0f:6f:52:24:e1:33:
         49:82:7b:24:9f:6a:a4:85:82:cb:a9:66:d8:e6:6d:21:d1:29:
         e1:da:e1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:15:10 2025 by rpki-client