Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          Rpa3/zNIQnqvcLcpU/sCFPaXRws5LhFwxKK5BpOXVOQ=
Subject key identifier:   58:A2:A0:28:D6:F3:D5:C0:16:C6:E9:69:A0:EF:D6:79:11:8D:FC:3B
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019E1267B6DF7F01E5DBA150FEE1A74E49C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          1947
Signing time:             Sun 10 May 2026 15:00:47 +0000
Manifest this update:     Sun 10 May 2026 15:00:47 +0000
Manifest next update:     Mon 11 May 2026 15:00:47 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: M0cFOTkabdW5J4G9Vk+xohoHHK7OYSOo0P4e/8j8EQs=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:12:67:b6:df:7f:01:e5:db:a1:50:fe:e1:a7:4e:49:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: May 10 15:00:47 2026 GMT
            Not After : May 11 15:00:47 2026 GMT
        Subject: CN=58a2a028d6f3d5c016c6e969a0efd679118dfc3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:42:45:68:d2:5e:ea:1a:46:4d:9b:73:68:d1:
                    e3:c3:f4:c8:d8:94:1b:f8:ea:60:22:08:11:a6:26:
                    4d:dd:3e:60:43:f9:7a:a6:33:99:d2:ac:59:ae:e3:
                    05:2e:ae:bf:fe:29:bb:8b:c3:fd:f1:28:0d:72:e1:
                    99:a1:1a:fe:a4:30:cb:cf:65:ad:61:da:89:a5:76:
                    f9:80:3f:4d:b0:c9:32:01:6e:19:f5:4a:9a:74:25:
                    73:80:6c:d2:9a:f9:71:9b:05:d1:11:35:9e:dd:09:
                    b1:65:cd:1c:9f:6f:37:a3:b1:a0:8b:59:00:20:d3:
                    c1:8c:f6:86:df:36:36:2b:18:e5:4c:5d:6d:7e:a0:
                    1a:a5:56:e4:ce:ba:f3:32:e3:b7:3e:ac:72:2f:6f:
                    04:67:f0:96:98:f0:eb:6b:9b:50:0e:d9:d9:6f:f3:
                    e0:12:d9:96:ae:e2:6d:ae:fc:9d:5e:cf:12:94:b8:
                    92:ee:c8:fc:f0:eb:c8:df:63:5b:6d:5f:a4:23:2f:
                    97:d8:b0:3d:c3:35:5b:3f:0e:76:4a:75:8b:bc:ad:
                    53:ac:dd:30:b7:52:63:41:6f:28:ed:42:af:b0:f9:
                    16:22:fc:d4:d6:ed:d4:21:70:ce:6e:df:f4:0b:f6:
                    8b:d2:61:b2:67:7e:96:49:17:44:8d:59:1b:4e:c0:
                    8a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A2:A0:28:D6:F3:D5:C0:16:C6:E9:69:A0:EF:D6:79:11:8D:FC:3B
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b2:84:22:2e:c8:3e:bc:4a:36:b7:1e:6e:56:d1:d7:de:c8:
         5f:99:2c:43:a8:0f:57:96:a2:e3:46:e7:1e:b4:eb:cc:bc:88:
         77:97:6d:58:fb:0d:85:cd:a7:5f:d2:aa:2d:b1:9d:0c:da:ff:
         c0:b6:46:94:c8:8f:8a:17:c1:13:3c:f6:53:2f:11:44:d2:3e:
         dc:04:0c:3b:ca:f6:b4:84:69:94:cc:33:3a:22:6d:c3:7d:89:
         4d:a6:be:fd:4b:da:ac:c6:b3:8c:fc:09:02:3f:b0:12:64:b2:
         ff:be:1e:dc:8e:fa:18:b9:4b:3e:a6:f0:72:2c:76:83:af:5d:
         ec:7b:51:e8:f1:60:d9:f4:62:51:17:15:2c:67:1c:d3:1e:e4:
         01:df:0d:6f:bf:60:22:d4:e0:18:bd:28:74:aa:54:18:f7:a8:
         70:cc:be:aa:f6:ac:c3:cd:04:2b:a4:3b:63:3e:ef:6a:d2:5b:
         e1:71:88:07:7b:55:17:e1:00:2c:0d:01:12:1b:5a:65:c0:03:
         21:ad:d4:c7:3e:2a:03:45:99:b7:4b:84:a0:e7:1e:34:70:a8:
         a6:ee:fa:f8:97:f8:ba:85:95:84:07:40:92:38:93:1a:5d:64:
         b6:59:cb:77:73:23:23:2b:24:d4:4e:99:04:5f:35:cf:06:7d:
         ce:9f:4b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 23:45:42 2026 by rpki-client