Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
File:                     EX-Mmn_H8TZY1ir76285iC2lEcw.mft (raw, json)
Hash identifier:          GyznS1vF9Jt8edGgNKh7g2U4C+uChYTaR1fTfRTsOcY=
Subject key identifier:   23:69:4E:EA:D8:DE:41:48:1F:7B:C7:71:C5:9F:24:5B:F0:94:F4:C6
Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
Certificate issuer:       /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Certificate serial:       0199FD3459DA801198C9F13A1B00DB52F502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 16:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:30 +0000
Files and hashes:         1: EX-Mmn_H8TZY1ir76285iC2lEcw.crl (hash: kojQh82kr/Ed4Drpg1qedHxbtTJHQDhgfd1+chieTgI=)
                          2: ibWU2hc-15QgZKi7MldaZ8Rm5_8.roa (hash: bP6Dry9UHojDKjvZz2pROS6WfkRMKw8CNymma91NgNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:59:da:80:11:98:c9:f1:3a:1b:00:db:52:f5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
        Validity
            Not Before: Oct 19 16:01:30 2025 GMT
            Not After : Oct 20 16:01:30 2025 GMT
        Subject: CN=23694eead8de41481f7bc771c59f245bf094f4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:28:d2:ab:fb:26:aa:a7:93:0f:dc:80:15:27:
                    5d:8b:b5:ca:88:2e:ad:c7:0f:82:4a:df:a4:0e:ab:
                    50:87:99:27:59:52:65:fa:81:ae:43:39:0d:9a:94:
                    a1:1e:4c:d1:57:bb:40:c6:b6:a5:11:f1:6b:1c:ae:
                    1d:cd:88:22:23:65:cc:a5:65:62:14:10:f8:c4:c4:
                    b7:b6:07:3f:be:8c:08:fb:e2:e3:32:0d:81:1a:78:
                    41:3c:e0:57:b7:05:46:a8:7a:4d:47:a7:7b:20:fe:
                    b8:c3:8a:19:de:24:9b:71:24:cf:96:21:1c:30:e7:
                    e2:c5:34:bf:5e:84:2c:4d:34:20:b1:9a:2a:6a:77:
                    80:9f:03:99:6e:db:9a:74:61:7d:0e:c0:60:90:82:
                    10:9d:99:8a:9b:fb:3c:84:84:95:a3:12:99:7d:b3:
                    e8:92:b3:10:bd:8b:a9:8d:40:ee:c1:49:82:0d:07:
                    b0:b5:44:c0:97:1d:e9:e3:dd:6a:e5:f9:3d:c6:32:
                    35:ab:de:6e:fe:fd:f5:f8:2b:bb:9c:d5:70:0c:39:
                    a5:f8:dc:04:e2:62:04:50:43:34:c0:72:eb:d6:ae:
                    bb:c5:fc:9b:4f:1d:20:3f:59:b4:93:5f:60:f5:63:
                    f3:0d:db:a7:2e:47:d1:9b:3a:93:55:79:c5:cc:80:
                    02:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:69:4E:EA:D8:DE:41:48:1F:7B:C7:71:C5:9F:24:5B:F0:94:F4:C6
            X509v3 Authority Key Identifier:
                keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:81:00:24:96:35:4f:e0:0d:10:19:62:c9:b6:88:92:15:7b:
         ae:de:a1:01:d2:3a:08:63:49:79:3a:90:ec:24:71:2c:18:f8:
         d1:35:df:d6:2f:b8:f4:ec:6b:98:f3:02:3e:ca:3b:1f:a9:17:
         ca:00:84:3e:db:86:98:75:65:93:7c:87:ee:40:96:82:db:08:
         df:d9:2c:f6:a2:f5:de:98:a1:e9:74:27:a6:6b:5c:3d:b2:85:
         9b:55:93:16:e0:27:43:52:49:33:f4:1a:20:f3:65:d8:15:4d:
         08:4b:7e:f8:d7:02:75:ff:10:f5:eb:ae:95:21:de:e4:a7:36:
         0c:ad:5c:09:00:7e:f5:b8:fc:1c:1d:85:12:93:06:ca:2f:e3:
         17:8e:f4:c9:82:dd:76:eb:f3:26:a2:e9:ea:c3:2d:bd:9f:16:
         6a:f5:87:08:bd:8a:f5:de:13:5e:11:c9:5e:8d:ed:c3:72:e0:
         59:11:96:fa:ca:98:b9:8e:4a:39:77:86:ca:8d:d1:43:dc:8b:
         4b:52:0e:d1:72:a5:1b:77:5b:36:f5:91:9a:98:7d:81:ec:ba:
         79:d7:58:0f:f6:a4:70:11:ce:82:23:4e:fb:6e:69:dc:40:2c:
         91:0c:39:00:72:a6:a3:c9:ea:62:06:65:a5:59:de:7b:0c:99:
         d8:1e:49:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:57 2025 by rpki-client