Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
File:                     EX-Mmn_H8TZY1ir76285iC2lEcw.mft (raw, json)
Hash identifier:          SPPkt/dfNhlYS3rVRnf0G2z/sxLR1sqVYrLuhtWG1I4=
Subject key identifier:   B9:E1:13:DB:8D:24:56:02:D0:15:3A:B4:52:03:22:46:07:B6:D3:12
Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
Certificate issuer:       /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Certificate serial:       019CC14E7269FAF2E22D354A3934B1B34176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
Manifest number:          1853
Signing time:             Fri 06 Mar 2026 04:01:09 +0000
Manifest this update:     Fri 06 Mar 2026 04:01:09 +0000
Manifest next update:     Sat 07 Mar 2026 04:01:09 +0000
Files and hashes:         1: EX-Mmn_H8TZY1ir76285iC2lEcw.crl (hash: HWCxQmISBZw4xgTrjTCifdJ2anXmtU4Lkc/X01fAwS4=)
                          2: yZepWYso39Ktfsnpae8Nahf1b8I.roa (hash: Yiho9bvazJTbyZ+iL2xK6Eorgx+qR/zGpVpEPxoE5ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c1:4e:72:69:fa:f2:e2:2d:35:4a:39:34:b1:b3:41:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
        Validity
            Not Before: Mar  6 04:01:09 2026 GMT
            Not After : Mar  7 04:01:09 2026 GMT
        Subject: CN=b9e113db8d245602d0153ab45203224607b6d312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:4b:14:e3:63:50:a7:41:73:24:45:55:17:
                    c5:b0:e2:8c:8e:f3:93:3a:41:ed:1d:85:78:0d:49:
                    6c:68:51:26:94:bf:45:b5:e7:37:2e:7d:b4:1c:c1:
                    89:d1:eb:42:12:a6:a4:98:33:e4:41:d7:25:90:ec:
                    7c:44:50:11:9b:e4:c6:4b:8b:84:26:3f:63:85:84:
                    d0:3a:0a:b2:08:f3:76:6a:77:4b:2b:16:98:65:2c:
                    58:bf:b0:1b:15:68:5e:48:22:ea:e4:1b:23:f3:cb:
                    b3:be:69:65:cd:ea:91:59:73:c3:1c:60:57:69:8d:
                    50:19:f1:ac:f0:8e:9f:c1:e0:a2:94:f1:33:ac:9c:
                    25:dd:15:4b:e9:4e:b9:b5:8b:12:4b:79:12:f0:84:
                    32:22:6f:b9:a1:a3:d5:b2:ed:29:3a:70:c0:e0:c2:
                    2e:71:44:d4:cb:7d:de:93:93:b4:2d:84:d6:d8:5b:
                    6d:d7:ac:d0:b2:67:c1:90:82:a9:93:0a:4f:45:04:
                    f1:b3:81:ab:7e:b0:ff:20:9d:95:c0:99:38:67:59:
                    62:88:7c:29:5d:d3:c3:a8:c4:17:3b:c4:95:92:af:
                    9a:70:c9:1f:83:8b:82:bc:d2:4b:9a:e6:0e:5a:0b:
                    64:31:eb:4d:4c:d5:38:f9:b6:d6:92:87:90:9e:f7:
                    52:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E1:13:DB:8D:24:56:02:D0:15:3A:B4:52:03:22:46:07:B6:D3:12
            X509v3 Authority Key Identifier:
                keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:d6:1f:28:a1:a6:34:58:2d:01:f4:12:74:e2:21:79:30:ee:
         bd:ab:45:a7:92:e3:66:6a:e8:af:ca:cc:c7:8f:c8:ec:74:0d:
         37:5f:ee:bf:d6:2d:52:52:ab:22:f8:4f:ff:9f:d7:a3:a4:d6:
         b3:6e:4c:0b:73:0b:f5:68:9d:5f:74:fd:88:06:fa:b0:d0:c3:
         89:71:de:e0:32:e8:65:06:a0:20:62:b6:98:3c:f7:ad:96:d8:
         23:0a:80:e8:81:5f:37:c4:08:86:7f:68:c0:05:f4:d0:b6:0c:
         7a:08:11:f5:c6:15:dc:d0:a3:c7:8e:7f:e1:b3:98:04:d6:03:
         6f:ed:ac:61:a7:f4:b2:ba:c1:08:0d:ae:5e:48:1a:b6:ca:49:
         13:2a:8d:49:75:fe:5f:ca:1c:69:da:94:ab:2b:16:a3:a8:0a:
         aa:08:29:b8:e5:83:7a:b9:5e:01:a4:ae:38:f1:46:d1:2c:4a:
         5f:25:7a:35:80:94:2c:4c:bb:9e:3c:4b:9b:a3:20:75:9d:eb:
         10:fc:55:1d:86:ae:0f:10:dc:91:85:f1:1a:a4:2f:d6:1f:a5:
         21:7e:c9:6d:19:e8:36:32:12:38:77:75:70:bd:13:ea:9a:69:
         f5:51:d3:c7:21:b2:c8:89:f5:65:49:b8:14:62:ad:ca:70:e2:
         03:c4:c0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 06:15:06 2026 by rpki-client