Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          IIPm+sHmNEyYNnnKM+2E7evtgk0QGzKelAmSblK9uuU=
Subject key identifier:   FA:0F:45:40:FB:2B:12:BA:3C:48:A8:60:51:12:7A:75:26:02:96:64
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       01A128B1747544236F7678770B17AC541D71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          1AF4
Signing time:             Sun 11 Oct 2026 02:01:20 +0000
Manifest this update:     Sun 11 Oct 2026 02:01:20 +0000
Manifest next update:     Mon 12 Oct 2026 02:01:20 +0000
Files and hashes:         1: 3gWFQ3R94nXeJm9H7CFp_7HY4yM.roa (hash: 7jmJB1ip1ePV21qy2oJjMtrZOP/BQAW7WRPsDMK05o0=)
                          2: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          3: 7liLho7mm8qK1hKdo9pzuzDUrKI.roa (hash: eORnpEQIWy2dF7BiQX+y/iU7zzf2f5oTCK8LoTwy4OE=)
                          4: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          5: EhNzvLSC2w82PV1I7edE46JD00g.roa (hash: 8imX79Cl8FQAhroM1zoc51Sw8fwWvmrfU4DcIMWxqiM=)
                          6: FbsD3IaJEYz-fngs_BkxMzDcei8.roa (hash: sIhRNJSFg1QvsagQ533HplVxtNWu8BYrTJIuHiVYaZw=)
                          7: I6-j-8BvQfa7uemDIhOjpDrfaIo.roa (hash: 4oPWEYVGarVF168W3qSKbbTkYi3cD0iLoXF1q+SMw64=)
                          8: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: hUjBy8pzV+RhoX7kvYVwn2Tv4mW6nKp7LDhVFT7B18U=)
                          9: T-qUaTppWdjXOEe8zDVxP2wl2mU.roa (hash: BctL7i3w8G6/dn3DlfdZ96WAphGXQa+OTA6hPMPwVs4=)
                          10: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          11: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          12: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          13: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          14: jwzq316YRIYxB2dWQOOXkN8ZJ50.roa (hash: 4AUyfiPaPdOkjAJK1elfVHLI1HzkuX68VSkqUCY1eNU=)
                          15: o1M2nS6jpYqNPr4PmmyksnsPNkU.roa (hash: jZ7Fzk5UdE4bi+zoHAjfUyUn+7hvus7ThrXaF9l7HRE=)
                          16: pFnqQ8OxY0QNC7HRy-4FkWixiwE.roa (hash: fU2bUXH43phXIA3gQxBK8wzLYma3/YTLay/lAz3pmTg=)
                          17: plplcojObk3dawLZH3Mnt5_h870.roa (hash: Gar10ZJnWDhjrWeDdE6koBMvPsyWvXDelCNNbF7bBp0=)
                          18: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (hash: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=)
                          19: wyBaD-xrWNM3oZ7omW2NVE0N4wg.roa (hash: nsnhyDk/6uhCCDvXfECiZ8RZAYd1WeMo4ansEBsj3V8=)
                          20: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:b1:74:75:44:23:6f:76:78:77:0b:17:ac:54:1d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Oct 11 02:01:20 2026 GMT
            Not After : Oct 12 02:01:20 2026 GMT
        Subject: CN=fa0f4540fb2b12ba3c48a86051127a7526029664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:44:7e:98:89:e4:3a:f3:03:58:49:dd:6e:48:
                    9f:b8:6a:37:a0:2a:57:f3:43:d0:8f:59:6a:2b:25:
                    a5:24:b1:ca:18:e2:0c:41:8e:87:69:92:57:ea:ca:
                    e5:00:2b:57:58:da:59:49:e7:15:dd:27:13:cd:79:
                    9a:3a:0a:cd:28:ce:84:fc:d6:69:35:f7:5c:db:23:
                    5e:56:43:ab:4d:a8:e0:7c:0d:cc:ed:1b:67:94:2c:
                    3f:0b:cc:fa:72:db:6f:a2:b9:34:83:8b:1e:9c:60:
                    6d:02:fa:fd:35:8a:36:58:f4:2a:97:14:d1:15:53:
                    77:19:f7:37:c3:c3:b2:8f:9c:f1:ca:f8:5c:59:c1:
                    ae:fc:31:8b:b0:29:93:2b:41:e9:86:39:89:e7:65:
                    e5:b9:39:72:92:d7:2e:ee:3d:49:e1:3b:68:20:81:
                    72:46:c6:79:f9:69:79:a5:b0:23:1e:c6:1e:06:18:
                    5d:b9:e0:fc:33:a7:cf:68:3b:73:e4:bb:02:96:a2:
                    87:68:d3:5e:b8:ca:ef:c2:61:c3:86:3e:7f:bb:45:
                    7e:f3:cd:44:20:87:8f:9a:ff:c9:16:d2:00:db:ed:
                    71:d8:40:34:1c:57:62:35:4d:b0:ee:62:a4:70:57:
                    7b:1d:3f:a5:af:53:40:79:2e:bd:d7:d4:9a:77:cd:
                    d0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0F:45:40:FB:2B:12:BA:3C:48:A8:60:51:12:7A:75:26:02:96:64
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:84:08:ac:7a:f1:b7:3f:5e:78:bd:e0:8c:27:79:56:f1:51:
         30:2d:95:46:08:91:2f:13:e5:88:09:44:4d:8c:0b:79:02:dc:
         e2:ea:f3:20:06:33:58:28:f7:73:89:2a:f2:b3:12:20:77:4f:
         75:ac:74:58:72:9f:66:03:87:78:43:67:eb:68:d1:a2:c0:8e:
         23:8d:ba:8b:ba:6d:84:2f:3f:af:db:75:55:ba:5c:38:f9:9f:
         ba:6f:94:7f:49:df:3d:2e:1a:3c:2f:48:c9:04:8b:cb:b3:c7:
         3b:43:50:d7:21:19:07:69:5e:30:1d:52:8f:3b:b4:a2:97:dc:
         ec:bb:91:c0:6a:cf:8e:b5:ed:e9:74:e7:e0:fc:d1:4a:40:3e:
         33:be:ac:48:fd:a1:21:fe:c6:28:08:4b:f5:a5:34:3f:90:9f:
         a0:24:e6:6c:11:13:a5:bd:c3:d3:ac:18:aa:75:1c:66:e5:2f:
         fa:ee:f6:ad:9d:de:0d:53:ab:27:26:f9:f4:a1:be:7b:05:6d:
         a3:a5:04:51:e1:dd:83:b7:7c:54:0e:02:df:e7:6b:40:e1:c6:
         ed:57:b4:c2:c4:56:14:f4:ad:69:6c:a2:17:0a:3a:ad:cf:de:
         0f:ec:96:4f:c5:e0:1c:67:93:de:a2:5f:e0:62:0c:2e:e1:74:
         c5:79:27:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEosXR1RCNvdnh3CxesVB1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjYxMDExMDIwMTIwWhcNMjYxMDEyMDIwMTIwWjAzMTEwLwYDVQQD
EyhmYTBmNDU0MGZiMmIxMmJhM2M0OGE4NjA1MTEyN2E3NTI2MDI5NjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkR+mInkOvMDWEndbkifuGo3oCpX
80PQj1lqKyWlJLHKGOIMQY6HaZJX6srlACtXWNpZSecV3ScTzXmaOgrNKM6E/NZp
Nfdc2yNeVkOrTajgfA3M7RtnlCw/C8z6cttvork0g4senGBtAvr9NYo2WPQqlxTR
FVN3Gfc3w8Oyj5zxyvhcWcGu/DGLsCmTK0HphjmJ52XluTlyktcu7j1J4TtoIIFy
RsZ5+Wl5pbAjHsYeBhhdueD8M6fPaDtz5LsClqKHaNNeuMrvwmHDhj5/u0V+881E
IIePmv/JFtIA2+1x2EA0HFdiNU2w7mKkcFd7HT+lr1NAeS6919Sad83QRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPoPRUD7KxK6PEioYFESenUmApZkMB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANoQIrHrx
tz9eeL3gjCd5VvFRMC2VRgiRLxPliAlETYwLeQLc4urzIAYzWCj3c4kq8rMSIHdP
dax0WHKfZgOHeENn62jRosCOI426i7pthC8/r9t1VbpcOPmfum+Uf0nfPS4aPC9I
yQSLy7PHO0NQ1yEZB2leMB1Sjzu0opfc7LuRwGrPjrXt6XTn4PzRSkA+M76sSP2h
If7GKAhL9aU0P5CfoCTmbBETpb3D06wYqnUcZuUv+u72rZ3eDVOrJyb59KG+ewVt
o6UEUeHdg7d8VA4C3+drQOHG7Ve0wsRWFPStaWyiFwo6rc/eD+yWT8XgHGeT3qJf
4GIMLuF0xXknQw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:16:20 2026 by rpki-client