Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
File:                     EX-Mmn_H8TZY1ir76285iC2lEcw.mft (raw, json)
Hash identifier:          MH1CnpOmXagK2nMJYVQoE/1vZeXYUtPhWWRHo5xsUGI=
Subject key identifier:   E1:04:6A:D1:9E:22:C8:78:7F:9B:C8:EF:68:14:17:EE:E8:BB:9C:1B
Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
Certificate issuer:       /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Certificate serial:       019E91DD694AF74BCB0F63B37C791B02FB82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
Manifest number:          1944
Signing time:             Thu 04 Jun 2026 09:01:07 +0000
Manifest this update:     Thu 04 Jun 2026 09:01:07 +0000
Manifest next update:     Fri 05 Jun 2026 09:01:07 +0000
Files and hashes:         1: EX-Mmn_H8TZY1ir76285iC2lEcw.crl (hash: 3O36hB9k0sCd5955wh7WKPnoO9SJ/PppRLatR7sZ0/s=)
                          2: SaMF96xLyBtRjlXyqIBkI5Lo-HI.roa (hash: 1jxriPcwCeY6MbbyRlMEMRxDnzF9Ffc0HNYjQkdX0Ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:dd:69:4a:f7:4b:cb:0f:63:b3:7c:79:1b:02:fb:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
        Validity
            Not Before: Jun  4 09:01:07 2026 GMT
            Not After : Jun  5 09:01:07 2026 GMT
        Subject: CN=e1046ad19e22c8787f9bc8ef681417eee8bb9c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:9f:e1:95:1f:5c:b3:cc:49:62:e1:d8:21:
                    52:fe:aa:f2:ad:50:4f:be:e3:39:49:65:f2:b8:3f:
                    37:27:ec:47:fc:b5:9f:36:b8:a3:17:ae:91:e0:51:
                    bc:fe:34:c1:6f:b1:72:5b:50:e3:4b:36:29:20:d9:
                    36:9c:5b:05:25:9d:eb:80:d4:01:08:f5:a9:06:29:
                    d4:cd:86:6d:ed:d6:62:45:f3:33:5d:9c:08:c6:b8:
                    b0:d3:08:82:ce:1e:1f:7c:d7:25:a6:f1:ae:87:6b:
                    62:d5:85:d6:a6:6a:17:5c:14:11:2a:e9:6f:69:f4:
                    33:8d:08:5e:54:03:d3:d7:13:c7:f4:fd:dd:e3:e0:
                    a7:58:51:d8:c3:17:e1:b2:46:5f:a0:2c:05:64:70:
                    f9:c2:53:ae:93:cd:14:36:cb:7d:aa:5a:02:52:30:
                    e7:3b:92:b3:0d:84:18:80:bd:03:e5:5b:b5:d2:b9:
                    a9:b8:3e:af:bd:a6:44:a8:38:85:da:4e:98:41:b0:
                    1f:86:6e:5c:b0:ec:31:db:16:94:f7:c0:e5:09:31:
                    fa:3a:e5:2a:f2:77:d6:53:a6:23:fe:9a:68:43:5a:
                    2a:75:09:fb:80:3b:f8:5d:bf:7b:96:f2:84:2e:44:
                    4c:43:a7:29:a0:36:0e:0b:6d:6d:56:99:8b:9b:a3:
                    9c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:04:6A:D1:9E:22:C8:78:7F:9B:C8:EF:68:14:17:EE:E8:BB:9C:1B
            X509v3 Authority Key Identifier:
                keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e4:8a:db:4e:72:b2:2d:57:37:b1:a5:ce:9b:c8:3a:9b:5e:
         04:01:7a:c3:54:32:b4:c8:d8:b3:90:90:1c:39:ae:51:3b:cf:
         b6:e9:d8:0c:a0:b1:23:8b:7b:f1:ba:fe:a7:6a:87:c2:10:1f:
         00:8d:f0:15:38:f7:ab:08:bb:2f:40:2e:21:9e:1c:36:5e:18:
         94:93:c1:5d:93:55:13:be:0c:10:84:fa:45:9a:2a:d3:dd:d9:
         9b:e0:92:13:4c:38:be:40:b8:c4:4b:8b:41:7c:7f:39:df:47:
         8b:9a:6a:8a:2d:d0:5c:7a:0f:9b:af:48:c3:eb:d5:86:3e:c3:
         4a:9d:d0:49:e2:49:ad:fe:46:bc:e7:3a:e7:1a:83:c6:41:cf:
         da:b1:1f:60:f2:5f:3e:74:51:7c:ee:b7:75:84:6f:c7:46:13:
         2b:3c:65:92:9b:7b:0a:1f:c3:23:64:f2:da:86:2b:5a:44:8d:
         02:af:26:08:9c:41:f6:44:f3:5d:37:93:18:4a:e4:5b:d7:45:
         d6:c9:03:93:12:c4:6d:2c:8e:fd:2f:76:f7:0f:e1:a7:7f:48:
         3d:3b:e2:ff:f9:26:f7:a1:78:82:fa:8a:ef:c8:99:2b:b1:53:
         be:4c:ea:68:d3:ea:0d:60:b7:48:51:b6:30:ea:47:59:01:6a:
         83:cf:32:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:08:55 2026 by rpki-client