Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          w2pf3nxidyLQGf6r4nKEPZmjXPn1zA4ba68AdCBieM4=
Subject key identifier:   B2:D9:F0:7A:EE:04:02:73:DD:48:D8:C0:7E:5E:A6:30:51:53:97:68
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       01A0F37A9ECDB08E0056C16B927D34251C28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          1AD5
Signing time:             Wed 30 Sep 2026 18:01:34 +0000
Manifest this update:     Wed 30 Sep 2026 18:01:34 +0000
Manifest next update:     Thu 01 Oct 2026 18:01:34 +0000
Files and hashes:         1: 1-svAPnmljbbb_Krd7AvudDIqwlw.roa (hash: Wvw833Rko2Z6uuMjUZ7h7KRYQpQ2fAXbZzDODcwqLOY=)
                          2: 3gWFQ3R94nXeJm9H7CFp_7HY4yM.roa (hash: 7jmJB1ip1ePV21qy2oJjMtrZOP/BQAW7WRPsDMK05o0=)
                          3: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          4: 7liLho7mm8qK1hKdo9pzuzDUrKI.roa (hash: eORnpEQIWy2dF7BiQX+y/iU7zzf2f5oTCK8LoTwy4OE=)
                          5: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          6: FbsD3IaJEYz-fngs_BkxMzDcei8.roa (hash: sIhRNJSFg1QvsagQ533HplVxtNWu8BYrTJIuHiVYaZw=)
                          7: I6-j-8BvQfa7uemDIhOjpDrfaIo.roa (hash: 4oPWEYVGarVF168W3qSKbbTkYi3cD0iLoXF1q+SMw64=)
                          8: ITVk_BbTGZGBY8i_CGHM-CWi2Nk.roa (hash: NotHge1XMsDsDTu5BSWNG9GRaLH4tUNLXybnZGu/knM=)
                          9: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: RtdvzxOT4HBtaZfRuLqgY+gyIz/KX1hRF6yYMnBKr3k=)
                          10: T-qUaTppWdjXOEe8zDVxP2wl2mU.roa (hash: BctL7i3w8G6/dn3DlfdZ96WAphGXQa+OTA6hPMPwVs4=)
                          11: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          12: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          13: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          14: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          15: jwzq316YRIYxB2dWQOOXkN8ZJ50.roa (hash: 4AUyfiPaPdOkjAJK1elfVHLI1HzkuX68VSkqUCY1eNU=)
                          16: pFnqQ8OxY0QNC7HRy-4FkWixiwE.roa (hash: fU2bUXH43phXIA3gQxBK8wzLYma3/YTLay/lAz3pmTg=)
                          17: plplcojObk3dawLZH3Mnt5_h870.roa (hash: Gar10ZJnWDhjrWeDdE6koBMvPsyWvXDelCNNbF7bBp0=)
                          18: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (hash: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=)
                          19: wyBaD-xrWNM3oZ7omW2NVE0N4wg.roa (hash: nsnhyDk/6uhCCDvXfECiZ8RZAYd1WeMo4ansEBsj3V8=)
                          20: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 16:23:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f3:7a:9e:cd:b0:8e:00:56:c1:6b:92:7d:34:25:1c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Sep 30 18:01:34 2026 GMT
            Not After : Oct  1 18:01:34 2026 GMT
        Subject: CN=b2d9f07aee040273dd48d8c07e5ea63051539768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:6c:e4:46:1c:3a:78:86:c0:b2:96:a0:4e:
                    43:df:a7:10:a9:25:c3:b7:ad:48:66:94:90:31:13:
                    a2:4f:b3:91:4e:eb:0e:ab:05:8f:74:7b:d7:05:ff:
                    26:e6:22:5b:39:14:bb:db:6f:e4:fa:bc:61:e5:ab:
                    e6:74:9a:f1:a8:14:9d:95:d1:51:fd:6e:ff:63:41:
                    03:19:7a:13:8d:57:2d:a4:fe:33:29:10:0a:7a:93:
                    3a:41:ef:1b:43:67:73:ce:b7:c2:56:86:ad:0b:c6:
                    ff:39:4e:75:67:58:a7:93:14:a8:e9:66:07:5e:c4:
                    53:c9:59:11:48:9a:dd:93:65:75:9c:64:15:32:89:
                    8b:a1:a1:29:b5:4a:72:bc:45:db:d9:d3:f5:82:7e:
                    fd:73:04:48:af:a8:4c:ee:53:e0:57:46:62:5e:37:
                    56:68:3f:d3:1d:0e:83:df:07:6b:cb:a9:02:92:72:
                    7e:ea:7c:e4:b0:fd:ef:19:a1:f6:f1:b8:37:a9:37:
                    f4:3e:3c:ef:dc:d9:12:03:a0:57:d6:fe:bc:ed:ac:
                    22:a4:87:98:e5:b6:ea:42:d5:e0:52:4a:4f:76:92:
                    cb:7e:ae:a4:eb:9e:2c:de:3b:51:36:79:f0:ce:36:
                    d3:e3:01:d8:4a:e3:6b:bc:d9:bd:73:a9:4c:14:79:
                    01:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D9:F0:7A:EE:04:02:73:DD:48:D8:C0:7E:5E:A6:30:51:53:97:68
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:87:cb:55:11:7c:61:49:f6:d6:0d:9c:71:a9:76:0f:5d:32:
         54:34:bc:a5:92:ec:e4:24:f5:5f:24:7b:66:ed:e0:8b:e9:bf:
         76:17:70:d9:dc:b2:2e:7b:93:ea:82:82:81:65:1f:b2:7d:5f:
         db:cf:cc:bd:9e:7c:f7:2b:7a:1e:1e:dc:9d:4d:b6:fd:14:40:
         01:6c:82:c1:df:31:e7:23:6b:d9:31:31:f0:ad:6a:a1:5b:ae:
         cb:8d:9b:33:01:3c:bf:48:9c:6b:e2:14:25:02:40:d6:39:60:
         24:e4:a1:bb:59:a8:65:cc:45:a4:a4:6c:f6:80:98:8f:f6:92:
         2f:f7:8b:a1:90:90:7e:5e:7a:39:4a:e5:71:4d:b0:eb:c2:b2:
         9a:22:22:4d:a6:27:51:b8:b9:b1:81:19:77:c2:6e:df:fb:e6:
         bc:bb:cf:4f:4c:79:17:3c:07:81:60:ae:be:32:25:df:5c:8f:
         df:bc:88:19:36:ad:30:63:7b:ae:bc:4d:10:63:86:8f:32:e5:
         7a:d5:01:5d:34:44:c7:b6:15:82:55:f2:1a:1a:39:aa:f0:d5:
         4b:62:2b:e2:5b:81:60:41:9f:a3:fc:53:61:eb:15:59:d1:4b:
         46:86:12:88:26:76:77:33:2d:6b:4c:98:f2:85:71:9d:f5:bc:
         95:c7:c1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:45:35 2026 by rpki-client