Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          pX+qo8Rvf6i4IWFpo3ZdXMKpF/oKlIHWS9ThP+5FFVw=
Subject key identifier:   CC:8B:3B:A3:30:21:50:28:3E:4B:81:5F:29:96:B8:B4:6F:86:65:55
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       01A0E62D32D969C3089A729EA02AE33EFB0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          1ACB
Signing time:             Mon 28 Sep 2026 04:01:56 +0000
Manifest this update:     Mon 28 Sep 2026 04:01:56 +0000
Manifest next update:     Tue 29 Sep 2026 04:01:56 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: 7liLho7mm8qK1hKdo9pzuzDUrKI.roa (hash: eORnpEQIWy2dF7BiQX+y/iU7zzf2f5oTCK8LoTwy4OE=)
                          3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          4: FbsD3IaJEYz-fngs_BkxMzDcei8.roa (hash: sIhRNJSFg1QvsagQ533HplVxtNWu8BYrTJIuHiVYaZw=)
                          5: I6-j-8BvQfa7uemDIhOjpDrfaIo.roa (hash: 4oPWEYVGarVF168W3qSKbbTkYi3cD0iLoXF1q+SMw64=)
                          6: ITVk_BbTGZGBY8i_CGHM-CWi2Nk.roa (hash: NotHge1XMsDsDTu5BSWNG9GRaLH4tUNLXybnZGu/knM=)
                          7: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: ZqaOtQXkwWPsGx0P5/XGwv4dW5HO5Sj6fGv67detC2o=)
                          8: T-qUaTppWdjXOEe8zDVxP2wl2mU.roa (hash: BctL7i3w8G6/dn3DlfdZ96WAphGXQa+OTA6hPMPwVs4=)
                          9: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          10: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          11: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          12: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          13: jwzq316YRIYxB2dWQOOXkN8ZJ50.roa (hash: 4AUyfiPaPdOkjAJK1elfVHLI1HzkuX68VSkqUCY1eNU=)
                          14: op5I0zZmxj_KZWaz0I1w-PMQtiM.roa (hash: UqBj2kYM4AhsljyiEXdBTgXWr+0Yw8Z9/cE6WVYCTko=)
                          15: pFnqQ8OxY0QNC7HRy-4FkWixiwE.roa (hash: fU2bUXH43phXIA3gQxBK8wzLYma3/YTLay/lAz3pmTg=)
                          16: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (hash: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=)
                          17: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 04:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e6:2d:32:d9:69:c3:08:9a:72:9e:a0:2a:e3:3e:fb:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Sep 28 04:01:56 2026 GMT
            Not After : Sep 29 04:01:56 2026 GMT
        Subject: CN=cc8b3ba3302150283e4b815f2996b8b46f866555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:56:18:89:0c:b1:bc:b1:0a:27:7f:6d:14:
                    b8:f5:1f:3e:7d:e8:8b:79:b9:66:49:aa:2a:bc:b4:
                    5a:17:e0:67:f9:b3:92:24:73:40:34:c6:37:33:5e:
                    84:e2:29:51:31:1c:53:b1:2c:d3:2f:f9:ab:5e:ae:
                    95:6d:82:26:ec:b0:69:3d:ae:d6:47:08:af:fe:13:
                    eb:2e:d3:28:dc:14:bd:d7:79:2f:6f:41:bc:14:f4:
                    3c:6b:17:b2:f4:0f:9a:f8:fc:09:f1:9f:a2:ed:61:
                    cb:57:ab:dd:ac:fd:41:3f:3e:e3:5a:cb:fc:f0:88:
                    83:f1:9b:81:c8:3a:54:31:72:5d:a0:a7:03:99:20:
                    a1:7e:3e:90:6c:3a:f1:0a:ca:86:d7:a7:d4:ed:d5:
                    ad:9f:1f:b6:c6:c3:06:69:25:13:a8:79:35:cb:84:
                    7d:2d:2d:43:67:93:1c:65:ff:6d:fa:ad:ec:60:41:
                    d8:8f:0b:4c:40:27:cc:d2:91:68:48:54:9a:c6:63:
                    bd:b3:2e:19:98:e9:19:2b:31:88:2f:f0:e3:74:50:
                    6d:a2:21:30:36:cd:b8:4c:14:fc:7e:fe:be:4d:28:
                    3d:f1:b6:f9:21:b0:74:4d:e3:06:01:7e:d1:1f:50:
                    e5:39:d5:05:59:5a:18:22:02:62:6a:a3:8a:f9:4f:
                    ba:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8B:3B:A3:30:21:50:28:3E:4B:81:5F:29:96:B8:B4:6F:86:65:55
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:43:d9:67:6c:19:94:c2:3d:78:1d:42:5a:89:78:ee:e3:6b:
         66:44:2b:7d:0d:4b:e1:e9:56:2f:8c:99:07:64:6c:f4:6f:f3:
         5c:66:9d:40:b0:66:6c:ed:16:ea:60:14:4d:f9:4b:0e:02:ef:
         cb:d8:ac:0d:f5:e3:16:19:30:ca:d9:55:00:f2:62:dd:c2:31:
         f8:c5:36:1a:33:20:24:fb:d9:09:ca:3e:a3:ac:c2:0c:c9:6e:
         d0:28:94:90:56:10:ae:fd:2c:ee:ee:73:b1:f6:65:4f:cd:1d:
         94:13:db:e8:4a:43:8b:39:f7:f6:6a:b6:93:e7:8e:20:76:2d:
         f4:05:52:66:41:40:9e:38:03:54:08:bb:a1:1d:84:42:ff:32:
         ea:76:52:d5:f1:d3:3d:77:12:b7:12:74:fb:28:13:b7:a5:1b:
         14:50:9d:bf:bb:f2:69:70:f1:9e:2c:2e:cd:69:e7:56:89:a9:
         5b:16:66:ae:88:e3:61:6c:c1:48:42:3c:89:01:1f:d0:0e:09:
         31:c6:fa:98:21:69:26:2c:c4:18:0f:ed:7f:33:0f:83:a1:6b:
         ee:04:12:69:4f:6c:76:47:99:40:63:f2:6a:64:bf:a2:98:96:
         50:16:f6:a1:49:b5:8e:ae:d5:ef:9f:6a:ce:41:b4:21:7a:26:
         01:13:b8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:35:34 2026 by rpki-client