Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          /mV/haUMBpzSrudOx44ZA3d7OdxByuxUl6h3N8xl7MM=
Subject key identifier:   A8:FC:AB:59:6D:EC:D4:5D:53:01:CF:89:9D:94:D6:4A:B9:F3:A8:6F
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019F1AFA902EAC02D33E0CEA0C2A8D6AE777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          19D0
Signing time:             Wed 01 Jul 2026 00:00:56 +0000
Manifest this update:     Wed 01 Jul 2026 00:00:56 +0000
Manifest next update:     Thu 02 Jul 2026 00:00:56 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: nt3SV9AXfT2658xP46/YAFzhOfLDzCEJF/TLyPzE5LE=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 23:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:fa:90:2e:ac:02:d3:3e:0c:ea:0c:2a:8d:6a:e7:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Jul  1 00:00:56 2026 GMT
            Not After : Jul  2 00:00:56 2026 GMT
        Subject: CN=a8fcab596decd45d5301cf899d94d64ab9f3a86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:66:bc:d5:41:28:91:9f:b5:d1:ee:1b:fe:
                    8e:10:e0:6b:19:a4:c3:69:1a:04:c7:84:30:e9:42:
                    fb:5c:3f:64:db:5c:2c:64:90:6e:6d:7e:e8:f0:b8:
                    fc:16:4b:fd:6e:f7:b9:eb:77:89:b1:af:6c:54:18:
                    7c:51:30:a3:ba:5e:3b:a8:2d:d3:00:a1:dc:88:d6:
                    36:d2:7a:d6:7e:e2:f3:8c:5f:1c:6a:79:84:08:ca:
                    2a:63:65:d1:d6:9a:31:63:a2:f5:db:9e:be:b5:91:
                    8a:3a:ce:eb:fc:9e:b5:6d:41:41:80:cf:c9:fa:1d:
                    5c:eb:1a:c5:50:87:1e:8a:c1:ae:47:e7:e6:95:22:
                    7e:60:8f:d7:68:bf:bd:f9:b5:40:cc:0d:eb:c8:8d:
                    b7:59:f7:67:85:58:eb:f0:40:70:1e:03:2e:6c:67:
                    47:94:9b:9e:5b:8c:82:27:94:96:ab:22:17:3b:85:
                    7f:1e:47:8b:71:6f:b8:e9:56:04:27:b2:33:86:20:
                    67:4f:2c:91:2f:b3:47:f0:44:08:36:b3:f6:14:a1:
                    7d:4b:55:7e:eb:69:81:d2:2d:c2:14:a3:f8:8e:f3:
                    52:53:17:86:e6:18:39:d3:b7:95:7f:38:3b:95:86:
                    0d:15:10:c8:63:86:56:c2:d6:e4:93:a9:70:35:b5:
                    f8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FC:AB:59:6D:EC:D4:5D:53:01:CF:89:9D:94:D6:4A:B9:F3:A8:6F
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:fb:8b:9b:a0:90:37:16:98:fc:01:72:45:92:e6:60:1e:68:
         78:79:13:f4:d4:cb:b5:f2:e4:8c:4f:cf:3d:84:08:42:71:9c:
         9a:4b:f2:61:6f:52:08:0e:30:bb:55:dd:14:f0:b7:0c:b7:0b:
         38:54:37:24:cb:93:6b:1e:d6:70:94:d2:f1:bd:c7:44:cd:12:
         cb:3b:56:ff:03:b9:29:1d:16:20:cc:7e:c6:23:75:c7:a0:e1:
         dd:92:59:25:83:82:ed:0a:92:d3:92:12:62:f5:2c:fd:10:9b:
         fd:aa:f0:74:51:59:db:a2:31:dc:ea:d6:9d:1a:65:45:c9:96:
         8f:23:20:13:d4:fa:7f:55:55:57:74:c1:48:b5:c8:4f:47:b9:
         8e:87:49:00:17:63:61:db:ef:ba:1a:91:be:45:a2:a2:d9:e4:
         4f:69:08:7b:08:af:2d:06:00:1f:1b:bb:02:f8:d3:cf:89:6f:
         e0:c6:06:4a:2c:50:bc:24:b9:a1:75:7a:95:ef:97:7c:4c:6d:
         a8:32:d2:06:02:48:2b:51:09:21:77:05:a5:c6:e2:ad:ff:b1:
         25:32:07:cf:a6:6e:e7:73:9b:64:77:d7:f3:bb:9c:ed:b6:47:
         d6:cd:b0:51:3f:85:f1:ca:91:46:13:58:95:e5:d7:26:34:4a:
         77:f1:08:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 07:44:29 2026 by rpki-client