Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
File:                     EX-Mmn_H8TZY1ir76285iC2lEcw.mft (raw, json)
Hash identifier:          cOS8/xaJn9Bh2o3wEkX2S+pWHflZq/k7fTcyru481Yc=
Subject key identifier:   82:26:03:D6:70:E5:3B:21:54:4E:E5:51:45:A3:DC:60:8C:F8:DA:F6
Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
Certificate issuer:       /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Certificate serial:       019E1DFE59147771F5557E76FF7F8D624D04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
Manifest number:          1908
Signing time:             Tue 12 May 2026 21:01:08 +0000
Manifest this update:     Tue 12 May 2026 21:01:08 +0000
Manifest next update:     Wed 13 May 2026 21:01:08 +0000
Files and hashes:         1: EX-Mmn_H8TZY1ir76285iC2lEcw.crl (hash: otQptQdp1uMBKTa8FP+WfAHH4K8rU5ql6QXmgRz7VgQ=)
                          2: SaMF96xLyBtRjlXyqIBkI5Lo-HI.roa (hash: 1jxriPcwCeY6MbbyRlMEMRxDnzF9Ffc0HNYjQkdX0Ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:59:14:77:71:f5:55:7e:76:ff:7f:8d:62:4d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
        Validity
            Not Before: May 12 21:01:08 2026 GMT
            Not After : May 13 21:01:08 2026 GMT
        Subject: CN=822603d670e53b21544ee55145a3dc608cf8daf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b6:6c:2b:e3:e7:e7:83:d4:f5:43:3b:b0:93:
                    7f:23:4a:0c:29:74:f2:a0:b8:eb:e3:9b:d2:c4:3e:
                    5c:39:c7:68:22:6d:c5:b1:79:0e:f1:92:96:54:88:
                    33:b3:71:dc:ed:43:e9:2e:d4:56:e1:db:e7:ac:da:
                    5d:6c:7f:de:79:d3:1b:76:49:a8:9c:1a:39:2b:07:
                    c5:3a:e8:86:e4:6c:72:b3:99:bc:54:61:e3:d1:e2:
                    4b:b8:12:ed:a4:07:96:a5:0a:81:de:d4:5a:08:f4:
                    e8:06:ab:4b:a7:14:da:18:66:39:2f:51:9b:d0:e5:
                    e3:f0:70:e1:b7:ac:e0:38:aa:6f:22:e1:0e:04:af:
                    e1:f3:52:1f:10:f7:0e:ad:18:1c:fc:20:48:bc:33:
                    46:2d:c4:28:d3:26:58:04:bf:fa:97:51:f2:d0:10:
                    8e:0d:1e:ba:3f:2a:1f:fe:cc:8f:08:73:fc:0f:1c:
                    26:24:20:26:fa:1c:31:ca:06:2d:55:a6:ec:16:5d:
                    9b:44:d4:ae:26:fc:ed:de:73:a9:40:a1:ec:c9:2f:
                    ad:64:7f:e5:fe:47:1c:fa:d0:69:73:7a:25:03:f5:
                    65:b0:b4:bc:88:9c:cb:18:27:41:58:8b:71:05:ff:
                    6d:35:43:cb:23:48:fd:13:83:59:9b:9f:55:c5:4d:
                    f8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:26:03:D6:70:E5:3B:21:54:4E:E5:51:45:A3:DC:60:8C:F8:DA:F6
            X509v3 Authority Key Identifier:
                keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:fd:0e:d6:3e:90:35:cd:5f:fd:d8:4d:32:9b:6c:fa:e5:b0:
         72:f2:59:1f:b4:d8:45:58:09:3c:f6:19:b0:45:bb:3e:21:c4:
         6e:0b:49:34:e6:d1:d1:b0:0b:f5:c3:13:84:87:54:c6:5a:90:
         73:45:47:bf:c7:19:2a:1d:c5:57:9a:c4:83:26:03:bb:f8:8a:
         a6:c8:2b:eb:15:88:70:36:e2:41:3f:76:01:e5:ee:ee:48:e2:
         9e:ab:d6:1a:9d:1f:43:0a:57:25:ba:a5:de:a0:41:6c:82:1a:
         bc:5d:94:b3:bf:eb:fa:ac:47:84:7f:39:16:33:2d:cc:dc:02:
         f9:aa:c2:35:ea:6f:d1:1d:52:a7:55:ec:7f:42:b3:95:b4:06:
         af:1d:59:3b:17:92:56:85:98:87:1d:1b:9a:c2:70:e3:fc:2d:
         dc:a1:9b:23:7c:6f:e8:a6:f0:2a:44:c3:fe:f7:ee:43:b8:23:
         a8:ab:89:fc:e7:69:32:e2:6e:d4:22:a4:c8:ea:8a:4b:5f:c5:
         04:20:f2:fd:69:81:d6:ae:86:10:4c:19:7b:eb:db:b6:a8:e1:
         62:1f:7b:0a:dd:28:16:8b:d5:08:83:af:47:bb:b1:98:a8:49:
         e5:ad:fe:e7:8b:ce:b6:dc:b3:86:eb:3d:c5:22:96:4a:a3:d7:
         43:d3:37:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:54:00 2026 by rpki-client