Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
File:                     EX-Mmn_H8TZY1ir76285iC2lEcw.mft (raw, json)
Hash identifier:          Tw0gpb4we2PHbNly/+VD9sl+kNScC024KSfrXfAChaI=
Subject key identifier:   A2:85:9C:53:82:AC:89:D0:40:E5:86:74:83:2A:71:46:22:2B:89:4D
Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
Certificate issuer:       /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Certificate serial:       019EC2249CFE140548FA357C876768DD3934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 18:00:39 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:39 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:39 +0000
Files and hashes:         1: EX-Mmn_H8TZY1ir76285iC2lEcw.crl (hash: nNHB87yjPEH+EULHZWr3UdpfdLpsFvNAxgctsmMdhMA=)
                          2: SaMF96xLyBtRjlXyqIBkI5Lo-HI.roa (hash: 1jxriPcwCeY6MbbyRlMEMRxDnzF9Ffc0HNYjQkdX0Ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:9c:fe:14:05:48:fa:35:7c:87:67:68:dd:39:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
        Validity
            Not Before: Jun 13 18:00:39 2026 GMT
            Not After : Jun 14 18:00:39 2026 GMT
        Subject: CN=a2859c5382ac89d040e58674832a7146222b894d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e5:dd:73:05:ff:9d:2b:96:1e:4d:1d:f9:68:
                    f9:1e:fe:71:59:ad:78:d4:4d:2e:58:4f:b7:5a:04:
                    65:73:a9:64:ae:66:d8:8d:e1:43:8e:ca:f2:5d:6a:
                    90:9b:d4:12:24:c2:f2:76:d7:98:d7:85:31:36:91:
                    13:a2:75:20:e2:2f:d0:cc:44:35:6a:cd:72:b2:a1:
                    87:c3:45:af:e9:b2:62:f7:0a:35:42:9d:05:23:46:
                    38:8b:f9:2b:ef:5a:7f:16:c8:0f:2b:2d:41:cf:c2:
                    34:ad:72:0f:11:b7:df:9c:00:75:28:25:d5:76:08:
                    31:e5:ad:2d:47:9b:1d:26:ff:8d:76:bf:4f:ea:15:
                    90:75:51:ab:94:63:aa:11:31:e8:5b:e5:9e:70:33:
                    d8:ed:2c:af:86:67:6d:d5:f3:67:1d:1a:11:6a:18:
                    67:38:a0:e6:10:84:b3:42:fa:99:7c:70:fa:1f:c8:
                    8d:11:52:3f:ce:be:00:15:37:40:8b:fb:7b:f3:fa:
                    17:5b:7b:7a:20:ba:bf:64:32:7b:ed:91:4e:d7:86:
                    a3:64:e1:74:f1:d8:ab:5a:eb:6d:09:5d:89:a8:08:
                    e3:2f:d7:93:38:ae:bc:cc:1d:9e:ad:9a:cf:ae:77:
                    82:19:f0:e6:12:b3:7b:a5:43:b2:3a:ee:6e:85:fa:
                    86:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:85:9C:53:82:AC:89:D0:40:E5:86:74:83:2A:71:46:22:2B:89:4D
            X509v3 Authority Key Identifier:
                keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:bb:e1:c3:0e:a1:9f:96:e3:7d:e4:a3:c3:60:c1:b9:b9:a1:
         8e:cc:22:01:b8:63:37:aa:8c:32:da:93:7d:5d:36:2f:69:a1:
         e2:27:f7:61:f4:26:30:a4:a2:f1:45:48:f0:9c:d3:98:12:cd:
         cb:77:1d:b0:e4:cd:b5:07:3b:3f:6a:f0:4d:13:b0:7d:7b:08:
         82:32:17:11:17:41:81:21:e6:69:d7:dc:b7:3e:54:e4:2e:25:
         44:9c:09:7c:c6:8f:10:f1:03:66:b0:3d:76:3f:23:9f:40:a4:
         6e:7c:7d:6e:4c:86:eb:e8:8c:0c:c0:ea:88:ae:a8:06:a5:7a:
         ca:5b:e3:39:28:10:49:35:1a:d4:76:3e:e8:7a:80:8c:ea:89:
         18:69:2d:5f:cc:65:54:52:8a:9b:05:2b:64:6a:da:7a:25:67:
         7f:0d:53:c4:bf:0c:7b:4b:b0:9e:bc:e9:6e:11:7b:71:10:49:
         a7:bb:8f:02:9a:02:6a:5a:a3:cb:b3:1f:f6:c8:8a:02:a8:24:
         2d:7b:5c:6b:b1:c7:d5:97:d2:d3:c1:9f:37:6a:18:e3:d0:a1:
         d0:ec:33:87:20:28:c1:b2:50:0c:fe:9f:ed:da:69:1b:e4:15:
         44:32:6b:09:dd:79:0e:c6:5b:06:26:58:b2:d3:70:69:b4:b1:
         ce:c6:5a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:26:17 2026 by rpki-client