Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          /03J34FRKAiWwFInMnNWXLmvMNsff9ZMhzWwrQvgt0k=
Subject key identifier:   DD:B7:01:EC:B6:A8:81:A7:EF:F0:9D:EC:E2:22:E4:BD:23:E9:18:E1
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019D571472B4B7ADF5ACCFA47591ED5FADC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          18E6
Signing time:             Sat 04 Apr 2026 06:00:50 +0000
Manifest this update:     Sat 04 Apr 2026 06:00:50 +0000
Manifest next update:     Sun 05 Apr 2026 06:00:50 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: sLT0YKaRMQd1QtKI7PmCxhMcuw1sBxkXlcLw4nq5wl8=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 Apr 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:57:14:72:b4:b7:ad:f5:ac:cf:a4:75:91:ed:5f:ad:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Apr  4 06:00:50 2026 GMT
            Not After : Apr  5 06:00:50 2026 GMT
        Subject: CN=ddb701ecb6a881a7eff09dece222e4bd23e918e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2f:ba:5f:d1:46:16:cc:c6:b6:c8:58:cf:be:
                    92:61:5d:2f:27:b4:cf:bb:d3:ad:96:81:2a:2c:65:
                    b8:66:11:a9:4f:9a:a5:3d:fe:b9:3a:96:78:e3:29:
                    de:fb:9f:2d:2e:e6:76:de:8d:3e:5a:46:3b:64:e7:
                    45:11:55:e9:99:f3:2b:15:89:31:78:30:33:ae:ed:
                    78:68:95:73:99:63:16:8f:a9:f8:ec:2b:fa:7c:27:
                    f4:bf:6b:34:ea:07:d6:ed:5e:c6:3b:d6:11:a2:b8:
                    4e:d9:36:6a:07:22:94:47:6f:1f:ab:c9:54:79:a4:
                    e6:97:98:41:b3:89:24:b5:b4:9b:18:01:54:c1:c9:
                    4e:d1:9f:6f:9d:82:b6:cd:c2:8c:72:e1:84:29:ff:
                    c8:9c:67:43:a3:dc:eb:78:33:d6:e3:94:62:fb:b1:
                    b0:16:b6:7b:d9:f9:3d:a8:e5:c6:40:3d:18:24:5c:
                    33:9e:53:42:81:a1:b1:e9:1d:f9:13:18:38:95:99:
                    02:c3:08:b9:f6:c6:f6:de:58:3c:72:ed:2e:82:33:
                    94:9c:ef:b4:f1:cd:e5:17:29:33:79:f4:f5:74:be:
                    67:24:c6:a5:af:de:67:40:12:05:89:0e:99:1b:6e:
                    81:2f:bb:fb:90:45:72:2a:67:ed:47:e0:7c:41:3c:
                    4b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B7:01:EC:B6:A8:81:A7:EF:F0:9D:EC:E2:22:E4:BD:23:E9:18:E1
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f4:36:2f:22:6d:5e:ac:39:cb:a0:7a:89:90:d4:80:71:7c:
         71:cc:83:ca:93:f4:d0:47:e3:f9:57:a9:23:9d:3d:47:1e:9b:
         2a:e0:17:7c:9d:d5:15:80:5e:aa:3c:30:73:56:21:69:bc:52:
         7f:b2:37:14:7a:df:11:f1:2b:50:6a:eb:3a:4e:bd:30:7d:fa:
         54:1a:4d:a2:55:d9:de:94:7c:ee:5b:7a:a0:9d:79:be:f2:ba:
         5c:52:6b:8e:87:5b:e9:bf:43:db:15:63:a3:8b:1a:5c:a2:03:
         c9:24:96:84:9d:60:18:14:be:c6:bd:59:f2:c2:a8:00:a9:9e:
         57:f3:14:b9:1a:26:dd:60:93:08:56:a4:84:40:d5:fc:3b:02:
         3a:14:64:81:03:68:46:30:00:f5:59:7d:9a:08:be:f0:ae:83:
         b2:43:fa:eb:88:85:53:c3:db:28:bc:05:b7:89:de:74:4e:26:
         6f:06:ac:c8:2e:09:38:94:65:0e:45:8a:bc:ad:97:08:cc:87:
         80:8b:62:54:6d:8c:7c:d6:91:0c:92:b0:d0:70:01:06:73:7b:
         48:8f:8d:04:e0:0d:a4:60:49:78:37:76:2b:92:52:97:3c:52:
         46:71:82:6e:17:79:14:d8:3d:73:6d:af:1e:48:df:c1:f7:3d:
         ea:13:a9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 11:15:59 2026 by rpki-client