Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          ZHGpT1zkd7IyGEqFzCYM5u/WdBmY95JQhfLGco5S2qM=
Subject key identifier:   4F:F7:A0:EB:3A:FB:10:21:85:C4:C0:C6:7E:03:70:7C:F8:49:D7:B0
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019CD3C27ADE8EEB22473173393220A9077E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          18A2
Signing time:             Mon 09 Mar 2026 18:01:03 +0000
Manifest this update:     Mon 09 Mar 2026 18:01:03 +0000
Manifest next update:     Tue 10 Mar 2026 18:01:03 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: fTHOxaQLbJWB2H/r8CXI0kb0A122WEV2LmEwVpWyS6c=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Mar 2026 18:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:d3:c2:7a:de:8e:eb:22:47:31:73:39:32:20:a9:07:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Mar  9 18:01:03 2026 GMT
            Not After : Mar 10 18:01:03 2026 GMT
        Subject: CN=4ff7a0eb3afb102185c4c0c67e03707cf849d7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d6:5f:eb:87:15:c9:62:42:71:12:26:de:dd:
                    eb:8f:fa:a9:59:f8:2a:b9:4f:b8:2a:8f:06:98:bd:
                    af:f6:be:76:93:41:97:65:3c:bc:0a:7e:58:79:40:
                    13:42:96:af:c7:37:0e:e0:12:6f:86:2e:e9:6e:3b:
                    90:2d:af:a1:e7:b7:72:b6:ce:fa:57:b9:08:66:0c:
                    a5:f6:e2:68:4b:84:5f:94:45:fd:ba:ff:5b:c8:53:
                    04:d4:91:cb:b7:53:cd:09:33:aa:d7:13:5e:26:af:
                    d6:2b:15:98:f0:1b:4e:2d:d2:75:b6:aa:36:7e:37:
                    ef:a7:58:5f:bf:7c:ca:f1:56:58:d3:ac:5a:46:b0:
                    a1:c0:82:9e:98:08:38:17:3a:29:d4:0a:3b:d0:7b:
                    d3:21:7e:35:92:66:4b:15:c5:0c:b9:7b:b5:11:1b:
                    f7:de:e7:47:53:a9:a4:bc:3e:cb:58:00:e3:69:de:
                    eb:bb:1a:c6:8f:a7:8f:02:51:8f:0d:c3:85:22:32:
                    02:94:4d:6c:b5:38:94:80:9c:8a:e2:27:e1:22:9f:
                    53:86:51:87:cb:be:dd:fb:24:12:00:cd:a9:cb:de:
                    ae:b0:ca:6c:7d:07:cf:44:4b:46:b5:3e:4d:85:ea:
                    94:a0:f2:d6:25:e7:c5:28:e4:97:bf:d4:58:3f:e2:
                    fb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F7:A0:EB:3A:FB:10:21:85:C4:C0:C6:7E:03:70:7C:F8:49:D7:B0
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:cf:6f:b4:3e:60:6f:7d:b0:4b:89:96:ec:8f:e6:f3:94:d9:
         96:3d:ec:79:b3:c0:66:7b:ad:44:e4:ca:d6:a6:8c:ea:f6:f9:
         55:e6:10:f2:fa:fc:09:f2:68:1a:35:63:2c:7c:8d:19:17:95:
         6d:27:a3:19:68:85:69:5d:db:1d:ac:3e:95:8f:9e:22:f7:f3:
         f4:f4:bb:6a:27:8b:fe:18:c9:04:d4:9e:1d:f3:78:76:6c:eb:
         bb:98:56:99:5f:35:66:7b:3d:41:c4:a2:18:47:b0:98:4c:d6:
         20:42:cc:34:a8:20:46:e3:8c:19:c9:4b:df:13:af:e0:a5:ee:
         65:d6:12:8f:af:1d:69:e8:77:c4:3b:5f:e4:c8:7e:38:ac:e5:
         f8:d4:12:d0:86:da:89:69:98:8e:9f:2a:8a:e4:ec:53:2a:38:
         e6:64:df:eb:6f:03:87:1c:d0:99:15:6b:cd:77:eb:d1:5c:96:
         d1:35:22:88:72:39:13:28:b4:b3:90:73:3a:50:89:eb:c6:fa:
         df:03:49:55:39:15:fb:54:ac:98:00:f7:73:5e:92:a8:1f:32:
         d4:85:7d:e5:9d:a8:1e:e7:c2:62:3e:98:62:88:3e:9a:b6:c0:
         24:1f:8d:68:e3:25:1d:84:7f:93:25:a2:03:81:c8:62:86:b7:
         21:f5:1c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 02:20:29 2026 by rpki-client