Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          dMKBtMv7nR+TyJm+nlekyAfLaxodVB8SrJ/Qqnytz+4=
Subject key identifier:   B9:F0:B3:99:82:4E:48:2B:E2:C1:5B:44:90:A5:36:F4:B0:05:BC:70
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019CAF117DD4098BF65687724865F5FC2251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          188F
Signing time:             Mon 02 Mar 2026 15:01:24 +0000
Manifest this update:     Mon 02 Mar 2026 15:01:24 +0000
Manifest next update:     Tue 03 Mar 2026 15:01:24 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: C3A+f+gjFvtzIHmsV5tYiWI59d6T7c9ZZpF/JqeSDug=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:11:7d:d4:09:8b:f6:56:87:72:48:65:f5:fc:22:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Mar  2 15:01:24 2026 GMT
            Not After : Mar  3 15:01:24 2026 GMT
        Subject: CN=b9f0b399824e482be2c15b4490a536f4b005bc70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9b:e5:60:da:fb:66:68:a9:fb:99:58:78:36:
                    49:bf:70:6c:73:7e:c2:9b:7f:5c:b5:b9:e1:19:9c:
                    d9:6a:99:2d:6e:1d:f2:9d:51:d5:37:bf:51:c5:f1:
                    42:99:8f:b6:8a:b9:a9:84:13:73:de:85:ea:f4:8f:
                    69:08:2a:a2:55:97:32:b6:76:21:0d:3f:cf:86:1b:
                    16:49:c5:75:6d:7e:b2:40:3a:03:85:2d:f5:85:4e:
                    fe:ef:58:d3:07:d4:b0:f7:ad:90:16:08:a1:90:6c:
                    96:c1:c6:c5:43:ae:13:ae:e8:b0:d6:8d:e4:66:dd:
                    95:8e:a5:d6:12:53:92:d5:d7:c7:f8:45:35:91:11:
                    0e:c4:c5:4b:98:c0:42:fc:5a:40:0b:d8:a7:94:c4:
                    6a:b8:72:7a:47:40:0d:18:76:34:19:40:3d:1c:43:
                    33:24:65:c4:75:12:5d:f4:5c:82:a8:32:2a:fc:09:
                    6a:94:a1:0b:bc:92:ae:91:72:8a:55:5a:c1:b5:90:
                    21:46:62:b2:29:34:c9:fd:ae:92:1e:b0:9c:bd:53:
                    7b:3c:8a:2b:72:79:d0:6b:a9:28:b7:58:68:9b:7a:
                    29:06:04:b6:20:0f:5d:26:bc:83:01:4c:d8:fe:f4:
                    75:60:d5:2c:56:1d:e5:cc:3c:29:ca:82:3d:d6:ba:
                    d3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F0:B3:99:82:4E:48:2B:E2:C1:5B:44:90:A5:36:F4:B0:05:BC:70
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:8c:fb:86:23:0c:25:06:b8:3f:9c:40:63:15:25:81:dd:0d:
         96:32:24:59:c1:7a:d5:f6:28:14:98:1b:95:84:88:c8:8e:07:
         d5:7b:20:4d:66:f3:eb:54:2b:4e:82:9d:83:c4:35:a4:a8:fd:
         ef:af:14:fb:29:89:e6:d9:8c:36:1b:c3:d7:ed:ff:74:f9:14:
         74:b4:3a:46:e6:60:9b:62:46:1d:95:bd:a1:93:3e:79:e7:8e:
         9b:ad:de:67:78:af:d0:f7:8b:c9:56:a2:cf:bc:04:83:7a:44:
         b0:2a:00:c9:62:24:04:2f:dc:40:ec:10:f3:80:71:a9:b7:a1:
         10:00:52:83:16:39:00:28:13:42:bd:44:b9:f0:b7:32:b4:35:
         5a:94:40:e3:10:2a:79:f1:73:50:db:c4:b9:06:dc:e9:62:ea:
         e1:15:c9:6f:94:ab:9a:55:62:5d:a6:c8:65:aa:27:5a:f5:7b:
         f9:1b:fa:bb:55:bf:44:fe:cd:e8:f1:75:7c:18:87:e8:43:21:
         55:75:35:8f:69:f8:6d:4a:05:ef:8d:86:0a:94:dd:40:ef:09:
         d8:c1:4c:dd:1a:dd:fd:0f:50:f3:00:85:43:7d:d7:ec:a3:2e:
         c4:ad:e7:56:84:53:08:8e:94:cd:37:99:3e:ed:a0:33:98:46:
         6c:68:f9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:57:56 2026 by rpki-client