Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          fmyGkBjoEzVi5LN7psUvumURDhqkjTOB3uyD3nYpOIY=
Subject key identifier:   01:B4:F0:C0:F6:2B:B0:D5:0D:03:B0:6A:5F:76:D4:41:6B:48:D1:68
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019D4B7E9FEE91ADB751EE81EB47BE22B0C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          18E0
Signing time:             Thu 02 Apr 2026 00:01:22 +0000
Manifest this update:     Thu 02 Apr 2026 00:01:22 +0000
Manifest next update:     Fri 03 Apr 2026 00:01:22 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: EmFXNQPSEGVRMYxcCTPjjrqTbln+Gm+3qu/FGkOe/DU=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 Apr 2026 22:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:4b:7e:9f:ee:91:ad:b7:51:ee:81:eb:47:be:22:b0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Apr  2 00:01:22 2026 GMT
            Not After : Apr  3 00:01:22 2026 GMT
        Subject: CN=01b4f0c0f62bb0d50d03b06a5f76d4416b48d168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:6b:7f:33:af:18:5c:8f:dc:1f:37:b6:ee:
                    88:e2:55:5b:07:47:6f:9d:ca:24:87:17:be:99:de:
                    06:6d:49:aa:91:ee:0e:73:a9:14:11:1e:be:59:89:
                    79:b4:be:3b:f8:7d:f8:af:80:fa:05:fb:19:75:61:
                    f7:b2:1f:41:d2:a0:9a:7d:a3:53:01:ef:6f:82:d6:
                    76:83:1f:fe:cf:d9:a0:80:33:6d:89:63:d4:4b:51:
                    20:6f:b2:64:b0:de:e6:48:57:bd:a2:8d:dc:a8:cf:
                    6f:36:d0:15:a4:d2:e0:43:2b:a8:bd:1d:6f:ec:e0:
                    46:d5:e2:6b:5d:ed:8b:e6:ec:a0:9c:c9:63:56:54:
                    92:68:0b:0d:e5:96:f8:e1:1f:b9:24:53:92:78:ba:
                    03:49:4f:c1:02:27:f6:7d:82:96:01:17:90:d9:bc:
                    7c:ec:a0:d8:b5:ae:2a:4a:67:d9:13:96:0d:53:67:
                    15:cf:57:8e:e4:74:26:dd:49:2a:1c:a8:99:a7:b9:
                    20:d0:31:2a:ec:13:68:93:23:b9:49:43:81:60:2a:
                    aa:e1:89:7d:f5:4f:84:26:d7:59:e0:3b:8e:20:81:
                    df:7e:e6:d6:0a:af:a3:af:ed:56:c6:67:eb:8e:b7:
                    e1:52:59:4d:d7:17:02:ce:45:18:2d:e3:ff:d4:3e:
                    22:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B4:F0:C0:F6:2B:B0:D5:0D:03:B0:6A:5F:76:D4:41:6B:48:D1:68
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:91:55:20:75:b9:6a:53:f7:52:2d:8f:4f:77:ad:df:3d:80:
         31:10:78:ac:69:cc:e8:b7:ac:e8:8d:2f:23:36:b2:57:f1:1b:
         3b:ba:a2:fc:a0:2b:63:f3:0d:99:df:45:28:de:70:23:bc:2e:
         0a:07:e4:0d:df:74:15:c4:09:62:11:ed:ff:99:63:51:76:5f:
         c4:5b:fb:e0:3c:7d:fa:c2:c0:03:c5:16:18:67:d8:93:4f:d0:
         4b:b1:4b:22:75:be:fc:b9:f6:6c:8f:1d:60:4f:0f:4f:46:6f:
         8f:49:4f:a3:aa:b2:4b:89:69:1a:f6:89:6b:43:92:58:92:19:
         68:6e:68:1d:be:b1:32:3c:93:76:ac:c9:0f:51:24:3d:9f:8d:
         8f:2a:09:1e:6d:c3:e1:85:62:6c:7f:ea:29:46:a0:c6:73:5f:
         d4:97:87:cb:a7:f1:72:f2:d0:ef:dd:28:72:33:84:d2:47:72:
         f2:c5:5e:59:ef:be:10:f3:cf:9c:8b:a0:24:e4:d0:b2:8d:2d:
         5e:ea:28:e8:b7:55:4d:b0:7c:b7:5f:c0:40:09:b2:ff:08:f0:
         25:0e:8f:75:f6:84:a8:f0:d6:12:03:9d:b1:9c:e9:17:4e:29:
         87:44:8c:93:6a:4c:b3:76:91:7d:14:7d:df:21:de:0a:ea:02:
         b9:52:43:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 07:12:32 2026 by rpki-client