Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          +vbNmV0OrmlKJgJuoyTGG45LNqLbAdtjIt7McCFa20w=
Subject key identifier:   67:EF:76:EB:ED:9A:E9:02:2E:A8:99:4C:02:58:30:35:97:2D:0C:FB
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019DC717124E5E9FB441C665D5C146237A89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          1920
Signing time:             Sun 26 Apr 2026 00:01:11 +0000
Manifest this update:     Sun 26 Apr 2026 00:01:11 +0000
Manifest next update:     Mon 27 Apr 2026 00:01:11 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: h6NNNZ0UKKz8G8EQcbEfGeU0CnLV3Sj9UBKNrsn1RKE=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Apr 2026 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:c7:17:12:4e:5e:9f:b4:41:c6:65:d5:c1:46:23:7a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Apr 26 00:01:11 2026 GMT
            Not After : Apr 27 00:01:11 2026 GMT
        Subject: CN=67ef76ebed9ae9022ea8994c02583035972d0cfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ac:2e:db:6b:ff:85:f3:5c:89:c7:e9:f7:4a:
                    d7:cb:a4:bf:da:26:42:77:81:b5:68:02:81:9b:31:
                    31:7b:aa:15:ed:78:78:8e:4f:d2:be:66:4b:18:a0:
                    ec:37:2e:02:1b:16:cb:f3:99:6f:f8:b8:94:9f:7d:
                    9b:7f:37:e9:b1:90:ae:b2:7a:61:24:45:ca:48:da:
                    17:f4:d8:a4:51:bb:cc:6a:79:5b:1c:17:d7:9e:f2:
                    5e:b7:6e:ef:2a:d3:f0:06:f3:1b:dc:a6:13:cd:30:
                    58:91:38:a2:b8:1e:53:38:c8:ba:66:8c:be:44:fb:
                    12:58:de:9f:d2:a7:e3:69:fb:93:ad:2f:a0:48:62:
                    b0:b6:67:61:10:f7:92:b5:72:2c:c0:5e:56:ed:b4:
                    86:1d:d1:e9:7a:4d:71:b2:a4:91:61:eb:d1:20:ec:
                    a3:00:a0:7c:7e:4c:2a:26:c8:12:d5:36:1f:21:50:
                    f1:fc:17:e4:a4:9a:7e:df:58:c0:03:87:a9:55:76:
                    36:16:56:6e:76:70:c8:ea:03:d2:41:b9:6a:b9:ec:
                    de:df:05:1a:95:8c:59:b5:f9:fb:e7:08:75:6f:55:
                    10:e8:c2:c8:95:e0:14:34:fb:3b:f0:cc:08:a4:33:
                    e1:dd:f1:54:36:f0:62:bb:36:94:1f:20:35:08:1e:
                    a1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EF:76:EB:ED:9A:E9:02:2E:A8:99:4C:02:58:30:35:97:2D:0C:FB
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c5:9e:d7:bf:32:6b:a6:fa:44:7d:f5:7e:7b:ae:a4:3e:6c:
         83:2c:b8:68:2b:0b:24:13:3c:f6:21:9d:29:1b:f6:5a:5d:21:
         1e:28:22:2c:e2:05:e8:81:db:d4:7d:ac:d4:32:a3:fc:2b:ec:
         76:81:a2:55:09:3e:09:46:e4:c6:c8:97:96:df:b9:ff:da:0b:
         25:9d:db:98:8d:ad:70:73:af:50:31:dc:0a:95:18:8a:40:15:
         a3:b1:cf:b7:02:3b:c2:86:ef:b6:59:eb:da:91:f3:c6:76:2f:
         35:67:f1:5d:6c:98:cb:09:c2:8b:6a:6d:86:a7:6f:da:fe:47:
         10:5f:05:4b:5f:65:2c:0b:f8:3e:12:05:c8:61:d4:fa:01:21:
         12:c1:54:fd:75:17:72:4b:29:c9:a3:ed:cf:87:c6:e8:50:50:
         8f:6a:40:cf:d4:aa:9f:06:df:45:19:27:2d:8e:4f:05:bf:c4:
         91:00:18:20:80:ca:ca:ba:e8:38:92:80:32:51:b8:ad:82:38:
         da:8f:0d:18:95:78:e6:b4:1d:5e:f0:18:81:b1:db:ce:a9:27:
         4d:93:c8:52:2d:1a:2f:1a:da:10:97:a6:2a:9f:68:06:ff:3a:
         6d:d5:70:a7:a9:ea:b0:59:6e:3b:2b:0e:27:43:d0:d7:a7:28:
         9c:c7:27:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 26 06:55:19 2026 by rpki-client