Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          Hu400LVTMj4eHj/JtxIA6uT2RMvI6HUBM4atOR5hyjg=
Subject key identifier:   FC:FC:6B:F0:B4:EB:4A:B4:9C:07:9B:86:21:45:FB:FB:6F:DC:4E:32
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019D3C0AB3BB14B0C4EC76F6E1A3056B2DF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          18D8
Signing time:             Mon 30 Mar 2026 00:00:27 +0000
Manifest this update:     Mon 30 Mar 2026 00:00:27 +0000
Manifest next update:     Tue 31 Mar 2026 00:00:27 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: r03nZVCQnKBT9Vx0tmjO1LA+WEM/RsVUb/dIJx3e9is=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3c:0a:b3:bb:14:b0:c4:ec:76:f6:e1:a3:05:6b:2d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Mar 30 00:00:27 2026 GMT
            Not After : Mar 31 00:00:27 2026 GMT
        Subject: CN=fcfc6bf0b4eb4ab49c079b862145fbfb6fdc4e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1a:d3:83:84:15:30:20:58:3c:d6:9f:6e:25:
                    8a:ad:d4:1f:21:18:86:00:d3:4b:19:0f:2f:e0:82:
                    27:30:e4:68:1e:c1:66:d2:a4:7b:d7:89:8a:e2:71:
                    3d:1b:c7:4c:93:d8:c6:a3:0a:12:b4:cc:f5:57:a8:
                    44:1c:6f:0f:bb:69:5a:d2:84:fb:77:69:5e:f9:00:
                    29:c8:c3:80:38:78:8d:07:d4:9c:c7:2d:91:af:8c:
                    08:16:f5:74:95:77:7a:09:28:e4:8f:0b:07:e6:85:
                    52:b5:35:ed:12:4a:d2:1e:38:eb:dd:08:1e:fb:6b:
                    33:78:f4:bd:4e:16:08:6d:84:06:26:b9:e4:16:96:
                    af:b5:d8:06:ff:b5:0a:04:7f:58:7a:2f:9e:01:1b:
                    fb:c0:8a:12:e2:56:01:03:90:f7:a7:21:6f:23:cc:
                    fa:20:dc:cd:71:27:d1:d8:8a:0d:2c:f4:c1:31:9b:
                    8a:8a:21:cc:73:ad:35:65:46:37:52:4e:be:35:9b:
                    27:61:a4:1c:bb:e3:b9:3f:76:fd:e1:01:f7:67:80:
                    29:01:cf:62:82:1b:7e:40:ab:bf:de:51:12:72:74:
                    bc:4f:49:20:5e:06:2e:9f:46:ef:28:dd:10:62:de:
                    3e:c5:68:0e:a8:ee:00:4f:3b:4b:f0:6b:de:e2:dd:
                    14:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FC:6B:F0:B4:EB:4A:B4:9C:07:9B:86:21:45:FB:FB:6F:DC:4E:32
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b5:ee:14:65:31:84:e5:63:52:69:fc:f8:a6:a8:fb:cf:72:
         00:01:73:a9:7a:a9:33:3e:ab:7f:66:31:75:05:cc:b7:de:76:
         4c:e5:54:5d:ba:85:3c:6d:e7:fd:b8:8b:9e:78:9b:1d:ef:f8:
         4f:cd:30:aa:53:28:3e:f3:e4:63:e3:d7:b9:90:21:17:74:99:
         29:9c:db:d8:66:5d:fc:60:79:40:61:d2:88:5f:82:10:0d:f1:
         31:1f:2d:e4:da:46:10:f8:5b:0e:ee:94:14:8f:10:0b:aa:27:
         a9:a7:d5:15:13:30:cc:1a:df:8c:0c:74:f1:2d:04:96:8d:19:
         63:86:f8:b1:75:4e:f0:1c:80:2b:cb:1a:42:84:11:ab:2d:c3:
         52:7f:39:28:cd:0a:eb:91:aa:bd:71:4a:db:32:0f:d1:53:cc:
         15:41:21:c4:72:c9:c6:37:e6:51:36:4b:6e:fa:3b:79:04:91:
         c3:87:fa:73:69:88:2c:4c:50:93:1d:de:db:96:ba:53:bb:d2:
         0a:65:65:f1:ba:ef:90:9c:ca:b4:cc:c9:1d:66:10:67:cf:d3:
         44:63:f5:26:e6:60:ef:08:49:16:0c:0f:4b:e0:8f:1e:ca:8b:
         2b:17:11:7a:2e:b5:28:78:72:99:73:c9:21:7f:d9:e2:08:5e:
         8a:54:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 03:32:56 2026 by rpki-client