Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
File:                     EX-Mmn_H8TZY1ir76285iC2lEcw.mft (raw, json)
Hash identifier:          io7o3Hu+2FzusjR5PoQQfwAQy4KVqp0nfsELb9Oawyo=
Subject key identifier:   35:60:1E:92:72:E0:D1:9F:83:C7:C2:E8:5D:93:A9:10:FE:73:90:FC
Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
Certificate issuer:       /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Certificate serial:       019CAC10501CE4135E1A49F5AE2BF7E42087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 01:01:16 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:16 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:16 +0000
Files and hashes:         1: EX-Mmn_H8TZY1ir76285iC2lEcw.crl (hash: yuGWbMZzxwhxZZW8ONRIlfwUMt2WVdD3XihX7LeKQTw=)
                          2: yZepWYso39Ktfsnpae8Nahf1b8I.roa (hash: Yiho9bvazJTbyZ+iL2xK6Eorgx+qR/zGpVpEPxoE5ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:50:1c:e4:13:5e:1a:49:f5:ae:2b:f7:e4:20:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
        Validity
            Not Before: Mar  2 01:01:16 2026 GMT
            Not After : Mar  3 01:01:16 2026 GMT
        Subject: CN=35601e9272e0d19f83c7c2e85d93a910fe7390fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:3e:de:12:71:10:e3:c8:41:26:f4:58:75:
                    7a:16:01:57:45:fb:58:70:a5:0f:5d:80:69:be:69:
                    96:8e:0b:ef:6d:e3:6b:5b:6a:8e:30:7d:9e:c4:c2:
                    a0:17:08:40:e1:dc:57:95:32:b6:e3:10:dc:ec:85:
                    22:fd:d6:21:93:bd:cd:02:27:ba:9c:db:93:22:83:
                    b5:b2:3b:8b:1a:0a:20:4f:e7:13:d6:6f:9a:cc:af:
                    91:52:e9:d8:35:2c:33:be:6b:dc:95:2d:08:54:7d:
                    40:7f:f8:5c:e9:60:4f:40:e5:52:a7:84:f1:3a:21:
                    95:8e:4d:c4:e3:28:c3:24:06:c4:70:6f:8b:f3:90:
                    03:d1:a4:1f:e7:49:65:49:30:89:e8:df:63:27:3d:
                    94:13:a2:27:e4:56:b4:f3:b2:65:c4:7b:91:8c:10:
                    e8:2e:ee:68:39:7e:d7:da:6b:97:b4:8f:47:e1:e3:
                    23:c5:df:aa:d7:24:d8:5e:16:b1:21:1e:bf:3c:3f:
                    22:06:0d:ae:bf:52:36:eb:54:7b:ed:e6:a0:a5:5d:
                    53:84:c6:89:1d:62:ed:15:f6:36:37:ba:84:89:c4:
                    d8:16:ac:02:79:5a:7e:81:98:00:2f:fe:d6:7b:56:
                    ff:40:26:17:62:42:56:ae:b5:2e:c2:30:d7:76:81:
                    45:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:60:1E:92:72:E0:D1:9F:83:C7:C2:E8:5D:93:A9:10:FE:73:90:FC
            X509v3 Authority Key Identifier:
                keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3c:b7:8b:fa:ac:71:90:14:a0:22:67:e6:21:17:9e:c2:9e:
         6a:c2:be:48:de:42:95:6e:c4:1b:08:e4:91:c4:79:60:32:f2:
         0f:f2:a1:54:7b:d5:0b:37:b4:ef:98:a4:de:f5:bb:a3:87:71:
         1e:78:e1:5b:f5:a2:0e:45:2e:d3:7b:82:e8:0e:72:c5:5e:c0:
         75:16:9d:2e:a0:5b:fa:95:a5:e0:30:14:b1:54:2a:b8:47:f7:
         fe:d7:c9:bb:68:ef:81:dc:a6:17:f3:d0:67:25:72:86:37:6a:
         3f:b2:62:b1:91:52:69:99:55:9d:85:d8:ba:4c:11:44:63:d4:
         da:6a:f4:e1:be:2d:51:0b:0f:b6:25:2b:90:24:36:17:f0:e6:
         7c:ca:75:a8:e6:ce:2d:5d:02:48:24:77:cb:79:87:39:13:68:
         ac:9c:4a:7d:b1:31:40:c3:0e:4b:d2:81:07:58:bf:85:1c:90:
         80:8f:b9:73:97:e5:ce:67:0f:b5:e2:6a:33:b1:a3:98:f6:07:
         12:b5:60:10:88:96:7d:a0:e9:6a:50:d4:f4:87:c2:08:03:ad:
         f9:26:70:26:fd:68:d8:4e:52:61:cd:16:0f:12:33:98:40:40:
         f8:b3:77:f3:04:8e:56:e7:f6:8d:4c:e3:f3:2d:99:38:53:ec:
         a1:70:6d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:01 2026 by rpki-client