Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          BVRRg0Z48e4YyCtwMUFbQLtvT/4eIzLWIOBOOvoDqgc=
Subject key identifier:   F2:F3:AB:4F:F0:28:DA:F9:A6:C9:B9:3A:25:7A:8A:57:D6:1F:98:9A
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019CA18CD238755485C45033CEB09378A1AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          1888
Signing time:             Sat 28 Feb 2026 00:01:26 +0000
Manifest this update:     Sat 28 Feb 2026 00:01:26 +0000
Manifest next update:     Sun 01 Mar 2026 00:01:26 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 1OF7rPot1lOASTykheOcR4eqy0nlW+MVos83I46tF4Q=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Mar 2026 00:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a1:8c:d2:38:75:54:85:c4:50:33:ce:b0:93:78:a1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Feb 28 00:01:26 2026 GMT
            Not After : Mar  1 00:01:26 2026 GMT
        Subject: CN=f2f3ab4ff028daf9a6c9b93a257a8a57d61f989a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:7a:82:ed:1e:b9:13:5d:07:09:01:e5:e9:
                    f5:47:c1:83:f2:70:df:73:68:5e:9b:4b:37:5c:5e:
                    f2:28:35:7f:4a:bb:1f:dd:03:50:7b:18:16:da:18:
                    3c:6b:85:3a:97:eb:c4:cc:49:4e:a1:84:38:8c:3e:
                    9b:e3:3d:df:09:d3:c8:bc:47:89:46:8c:24:38:8f:
                    2c:8f:a3:3c:95:f9:36:dc:41:6b:f1:fe:8e:53:7c:
                    a3:2f:35:bd:76:c3:8a:b6:c7:9f:d0:06:30:e3:02:
                    03:34:b1:c1:5e:d5:e4:08:76:ad:43:05:72:e5:01:
                    65:26:6d:80:f9:61:69:85:6d:bd:85:bf:bb:27:e0:
                    d5:cd:a4:93:ca:00:da:71:eb:27:63:1e:6b:d2:73:
                    a5:5f:2a:37:e7:5c:af:cb:f9:10:27:ba:2d:73:43:
                    fe:0b:5c:c8:f5:e6:76:27:da:8b:f2:73:20:80:8f:
                    bc:d1:7c:04:4d:69:60:8f:c0:78:5e:14:92:46:6e:
                    c5:99:b7:be:9d:a3:ff:f5:dc:0a:42:d9:4b:2d:8f:
                    73:ec:b0:d3:14:69:0f:56:6c:ae:a6:c9:3b:01:dd:
                    aa:f1:e2:09:04:ce:3b:f6:94:82:c1:a4:9d:00:80:
                    95:7a:99:28:7e:f9:02:49:e2:d8:4e:5a:00:4c:fa:
                    fa:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F3:AB:4F:F0:28:DA:F9:A6:C9:B9:3A:25:7A:8A:57:D6:1F:98:9A
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:70:4e:44:2c:ef:f6:78:9a:52:26:a9:a5:a1:e7:99:b2:0b:
         c8:96:c0:2d:04:2c:23:a8:fa:f3:51:dc:5a:66:6b:eb:9c:6c:
         18:8c:a0:8c:36:29:48:a1:d6:ec:8d:d5:6d:da:28:b1:58:3e:
         e3:86:38:f9:23:ce:28:f0:01:e1:ab:35:80:4e:32:68:ab:44:
         e8:e6:77:07:57:00:d0:4c:09:07:f7:fe:2d:dc:17:0e:34:cd:
         30:c7:2d:1f:cf:03:9f:58:c3:f9:a1:73:75:36:be:53:16:bd:
         5c:fc:a6:1a:9d:df:d2:4d:18:53:93:31:28:38:c2:bb:0e:f8:
         6b:d7:c0:37:2c:75:96:16:71:c3:d4:39:d6:cf:c0:fd:89:db:
         f1:9d:5f:b4:af:9c:c5:4e:81:ff:d4:ac:ef:7a:21:70:2e:f7:
         c0:36:0e:a2:ac:c5:70:21:d8:e8:a7:89:42:e6:74:b9:87:46:
         1c:80:3a:3b:21:82:c7:9e:7c:92:c0:c5:b0:ee:98:1e:c3:fd:
         6a:e0:11:c1:74:03:34:df:23:21:b2:b9:c3:c5:b6:0b:61:04:
         83:3a:d4:28:fe:76:86:36:05:7f:38:72:11:f5:e7:43:f2:b8:
         39:b7:aa:f1:7f:44:ba:93:de:6d:d7:e0:de:40:8d:02:4e:d6:
         98:9c:07:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 09:27:10 2026 by rpki-client