Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          KWRzVrR1RmcYmg/fxbRqZVRKb1I/QpvCejnfxuGn9OE=
Subject key identifier:   60:7A:AB:02:D2:35:27:D6:34:D5:38:5D:3D:2C:3F:FA:27:2A:A8:15
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019FAD52166183F92585A3589C5045419B4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          1A1D
Signing time:             Wed 29 Jul 2026 10:01:05 +0000
Manifest this update:     Wed 29 Jul 2026 10:01:05 +0000
Manifest next update:     Thu 30 Jul 2026 10:01:05 +0000
Files and hashes:         1: 2jdLcJNa2rxtyqaeCiOQarFpRYI.roa (hash: 43Ap5prXIyDRPzEflFt9hAlDMzca3oA+KKkhyqilYqY=)
                          2: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          4: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 532OzIGi2fyEK9+C1yPpBhvPBWpQeO8OEBIn6ZKdbZQ=)
                          5: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          6: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          7: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          8: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          9: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          10: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          11: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:52:16:61:83:f9:25:85:a3:58:9c:50:45:41:9b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Jul 29 10:01:05 2026 GMT
            Not After : Jul 30 10:01:05 2026 GMT
        Subject: CN=607aab02d23527d634d5385d3d2c3ffa272aa815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f5:bf:34:9c:4d:32:03:10:96:00:38:13:9f:
                    5c:e2:02:fc:5c:d6:e1:51:4e:97:0d:57:2e:35:af:
                    4a:d7:02:b4:22:d1:3f:73:5d:18:d8:e1:b7:b2:26:
                    9f:30:85:d5:2d:72:0e:db:1f:41:da:73:cf:f3:e4:
                    9f:bd:36:ed:e6:e5:4d:a1:e1:cd:1e:bf:5e:35:9e:
                    3e:39:6b:3d:c4:f0:4b:2c:87:df:e5:0b:65:f6:d5:
                    22:f0:3a:39:16:91:ff:c9:b8:91:c3:54:01:2a:0a:
                    90:41:1e:d9:c4:bf:5b:39:48:d5:50:49:7d:79:ce:
                    0b:c9:23:2b:dc:8a:20:78:36:e4:3d:33:ef:67:51:
                    e9:ee:44:47:08:db:59:de:75:0b:13:e4:12:81:c1:
                    ee:25:a3:cd:fe:86:34:a2:43:20:ee:c3:da:ff:e6:
                    ac:eb:fd:ce:cd:ac:e6:78:5c:aa:3a:a6:05:90:af:
                    6f:2d:f3:d8:05:a0:97:1f:6c:d6:79:95:ed:18:ab:
                    26:20:6d:fc:19:60:fc:42:18:22:ac:63:be:77:76:
                    c2:34:91:61:fa:dd:b8:5b:42:7d:c5:69:76:3f:ef:
                    98:0b:c8:a1:20:a2:cd:3a:60:02:17:c8:ef:66:6d:
                    4f:98:b0:ae:d1:16:73:f5:ec:18:1e:3b:a3:38:9c:
                    b6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7A:AB:02:D2:35:27:D6:34:D5:38:5D:3D:2C:3F:FA:27:2A:A8:15
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ab:4e:da:a4:aa:bf:33:9c:d3:cb:c0:9d:03:89:53:bf:b0:
         cf:82:f5:40:2c:77:1c:b9:29:07:27:29:37:91:99:b7:4e:da:
         8d:45:2a:cb:87:b0:a1:70:a8:99:90:c7:ac:cb:6e:29:4f:c5:
         e0:fa:32:d4:e3:8b:de:05:22:42:fa:2b:d4:a5:08:c7:1b:18:
         86:67:d4:27:6a:58:36:82:70:d0:47:61:42:b1:15:ae:0e:56:
         2d:b5:30:e2:c1:90:83:38:2f:9d:b2:88:a6:a3:51:0f:05:e0:
         12:b9:08:89:d5:a1:ce:e4:58:f1:dc:5c:25:c1:e9:bf:c1:c7:
         54:3f:c9:d1:2e:62:c3:cf:22:ba:ce:4b:e5:f4:13:81:6f:a9:
         fd:bd:d8:7a:bb:fd:48:22:54:be:e6:ec:4f:ad:43:f0:90:6b:
         4f:11:9f:56:12:57:71:01:e2:cb:0b:07:64:a7:9a:f8:63:ae:
         0a:7d:fe:8a:26:92:06:40:89:66:e6:94:30:c6:6e:64:4e:8d:
         98:b5:3e:44:dc:ff:7a:c5:4e:71:ad:ae:58:5f:08:71:4c:dc:
         b5:0c:e7:d9:fb:60:13:a0:36:02:83:3f:10:b2:0f:a7:7f:76:
         cf:30:26:8d:a8:e2:e8:21:ac:cb:62:ac:07:46:4d:6b:d5:27:
         17:ee:39:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:33 2026 by rpki-client