Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          FfxYeNUsd3zWStKroWiHRZzH7dX4VQhE9kyZgHOs5lo=
Subject key identifier:   56:D7:D7:47:17:24:93:46:1D:22:16:F0:22:67:38:BE:79:2E:C9:85
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019D3DF9019848E3CC34CEF41A7B4B7DA3FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          18D9
Signing time:             Mon 30 Mar 2026 09:00:21 +0000
Manifest this update:     Mon 30 Mar 2026 09:00:21 +0000
Manifest next update:     Tue 31 Mar 2026 09:00:21 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: CEUIfiHHIELRrwjySi+hr/Up72+x0jmMdmMDkyn55JE=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 31 Mar 2026 09:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3d:f9:01:98:48:e3:cc:34:ce:f4:1a:7b:4b:7d:a3:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Mar 30 09:00:21 2026 GMT
            Not After : Mar 31 09:00:21 2026 GMT
        Subject: CN=56d7d747172493461d2216f0226738be792ec985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:92:51:81:d7:f9:5a:d7:c2:2a:00:3a:eb:3d:
                    dd:6a:26:c9:62:f6:08:ff:a1:69:8c:19:f0:01:f0:
                    77:b6:48:76:77:99:66:64:b4:76:fd:e9:40:c2:59:
                    b4:0d:a4:43:93:7c:66:46:3b:e1:d4:92:f3:34:d2:
                    21:f9:a1:b1:52:7b:60:c2:1c:0d:0c:df:61:9d:ad:
                    64:f7:d0:0b:68:d8:72:d0:87:b2:41:27:a0:f6:db:
                    34:06:a8:9a:3b:44:99:1b:45:58:95:35:95:30:07:
                    b1:cd:be:8d:d9:ba:07:30:af:5e:18:f6:cd:cb:77:
                    fb:23:68:04:19:d6:76:8c:81:08:82:18:80:85:ac:
                    d3:0c:5d:d8:71:11:3a:ad:5a:f1:6e:bc:ed:a1:ef:
                    b8:e1:3d:77:36:a6:dd:d2:e8:a7:10:ad:0a:db:a4:
                    60:1d:42:d7:5e:26:15:07:d0:0d:6c:10:8e:59:bd:
                    6d:01:32:e1:96:56:bd:02:8c:b0:21:4e:a6:ad:6e:
                    63:e6:a7:cf:c5:28:c9:3a:88:86:7f:f0:3f:8e:d0:
                    cf:5e:ec:53:1e:b9:70:0a:95:38:31:68:20:ff:4c:
                    e1:4e:33:08:87:58:d8:83:b5:07:f0:5b:bd:ec:35:
                    41:df:7a:45:49:4e:30:60:84:f2:9a:c9:4d:be:a0:
                    24:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D7:D7:47:17:24:93:46:1D:22:16:F0:22:67:38:BE:79:2E:C9:85
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:0e:84:61:39:3d:f7:58:6c:dc:1a:5b:92:30:0f:de:2f:1f:
         40:76:6b:70:9f:f4:61:90:d1:a7:15:40:b9:41:a3:68:33:c6:
         f7:dc:40:59:eb:bd:a3:df:a6:2d:f4:af:91:21:d5:05:02:5a:
         91:9c:66:88:c2:02:68:7e:fb:8c:83:b3:02:c0:3f:c4:9b:aa:
         88:b0:32:b4:fb:aa:21:e6:27:34:a2:14:36:f2:b1:77:45:2d:
         7d:69:d3:c8:15:d1:c4:81:6e:67:30:9c:ef:39:ba:10:6f:83:
         bd:d3:ca:ee:65:a2:94:65:2c:d9:5b:b2:2e:4e:0a:79:4d:27:
         75:0f:ff:84:04:d5:71:0a:32:a1:d2:7b:48:3c:1e:34:19:82:
         12:d2:11:fd:56:c1:4e:bb:60:20:de:33:f3:82:d7:56:ae:04:
         eb:c3:77:ad:aa:52:c9:3a:96:e3:28:ea:a0:48:c1:83:2c:42:
         0e:7e:b2:54:4e:a4:b5:2c:6f:95:20:a6:a3:b0:dd:09:c8:32:
         7f:a4:48:9d:d7:60:ca:a5:e4:ee:68:f2:07:08:45:2e:9f:cd:
         db:18:45:33:9a:59:aa:29:b8:17:ec:a3:80:a2:d3:cc:5f:b0:
         e2:81:58:4d:e0:c2:75:b3:af:73:51:3d:b8:fd:48:a8:c8:4b:
         76:e4:d0:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ09+QGYSOPMNM70GntLfaP+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjYwMzMwMDkwMDIxWhcNMjYwMzMxMDkwMDIxWjAzMTEwLwYDVQQD
Eyg1NmQ3ZDc0NzE3MjQ5MzQ2MWQyMjE2ZjAyMjY3MzhiZTc5MmVjOTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJJRgdf5WtfCKgA66z3daibJYvYI
/6FpjBnwAfB3tkh2d5lmZLR2/elAwlm0DaRDk3xmRjvh1JLzNNIh+aGxUntgwhwN
DN9hna1k99ALaNhy0IeyQSeg9ts0BqiaO0SZG0VYlTWVMAexzb6N2boHMK9eGPbN
y3f7I2gEGdZ2jIEIghiAhazTDF3YcRE6rVrxbrztoe+44T13Nqbd0uinEK0K26Rg
HULXXiYVB9ANbBCOWb1tATLhlla9AoywIU6mrW5j5qfPxSjJOoiGf/A/jtDPXuxT
HrlwCpU4MWgg/0zhTjMIh1jYg7UH8Fu97DVB33pFSU4wYITymslNvqAkEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbX10cXJJNGHSIW8CJnOL55LsmFMB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcA6EYTk9
91hs3BpbkjAP3i8fQHZrcJ/0YZDRpxVAuUGjaDPG99xAWeu9o9+mLfSvkSHVBQJa
kZxmiMICaH77jIOzAsA/xJuqiLAytPuqIeYnNKIUNvKxd0UtfWnTyBXRxIFuZzCc
7zm6EG+DvdPK7mWilGUs2VuyLk4KeU0ndQ//hATVcQoyodJ7SDweNBmCEtIR/VbB
TrtgIN4z84LXVq4E68N3rapSyTqW4yjqoEjBgyxCDn6yVE6ktSxvlSCmo7DdCcgy
f6RInddgyqXk7mjyBwhFLp/N2xhFM5pZqim4F+yjgKLTzF+w4oFYTeDCdbOvc1E9
uP1IqMhLduTQhQ==
-----END CERTIFICATE-----
Generated at Mon Mar 30 18:35:44 2026 by rpki-client