Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          xROX/KrxWyj24Z0Vve2yWx5WHzldcGmf5Uu0ymkkavA=
Subject key identifier:   85:F6:86:56:9A:2C:41:8C:41:72:A1:0B:34:A4:FF:85:4A:D0:81:EE
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019DC14BC69FAD1860B8D75805F115E9CC76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          191D
Signing time:             Fri 24 Apr 2026 21:01:01 +0000
Manifest this update:     Fri 24 Apr 2026 21:01:01 +0000
Manifest next update:     Sat 25 Apr 2026 21:01:01 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: dxhSNdfgcGMev9SNsXFoyBRiUaad6/TsTf18dqnXQlY=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Apr 2026 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:c1:4b:c6:9f:ad:18:60:b8:d7:58:05:f1:15:e9:cc:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Apr 24 21:01:01 2026 GMT
            Not After : Apr 25 21:01:01 2026 GMT
        Subject: CN=85f686569a2c418c4172a10b34a4ff854ad081ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:0d:4b:70:1d:09:b5:ec:44:8e:75:51:04:
                    04:c2:5f:d9:35:0d:d8:42:98:22:97:ed:df:6b:f5:
                    28:30:3c:8c:01:fe:e5:5d:99:ec:4d:46:6f:a5:f0:
                    20:6a:da:75:79:f2:3b:ad:29:4d:f1:94:2e:95:ad:
                    68:1b:a6:b7:c1:5a:7f:01:b8:ec:51:3c:e5:a2:cf:
                    99:13:1e:7c:c4:13:9e:44:a0:6b:4f:bd:0d:61:dd:
                    35:e9:3f:8e:41:90:7a:5b:ba:26:af:45:f9:d0:06:
                    ac:3e:64:f2:fa:22:06:65:42:ce:03:ea:7e:1f:b7:
                    93:b3:ee:fd:c4:6b:2b:b5:37:c2:67:6a:7a:2e:ec:
                    74:11:8b:5c:52:f0:ad:07:f1:84:70:be:bf:a0:b8:
                    d4:e0:b1:9a:ed:4b:d1:f4:dd:77:d8:52:71:04:36:
                    b0:d5:42:f0:46:04:02:69:5c:95:4d:cc:f7:59:52:
                    be:10:da:80:ae:15:0c:5e:72:57:29:fa:dc:53:a5:
                    1a:15:7e:cb:bb:32:fc:37:32:78:a4:a2:c2:a3:32:
                    44:3c:22:86:22:d3:3a:9d:de:57:69:a9:4a:ba:e7:
                    fe:66:e9:1e:9b:41:cd:c0:2f:8d:da:8e:99:7c:2f:
                    64:f1:e5:6e:0f:c4:2b:dc:2c:49:45:55:68:ea:1b:
                    4b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F6:86:56:9A:2C:41:8C:41:72:A1:0B:34:A4:FF:85:4A:D0:81:EE
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:26:35:a8:64:c0:2b:96:e2:8b:7d:bf:9d:81:0d:cd:a1:72:
         aa:59:40:32:0a:6c:9f:df:a8:24:dd:40:f8:2c:4e:6e:66:7c:
         99:43:cb:62:74:a9:f0:95:a7:ce:99:22:cd:09:ca:37:78:1b:
         be:d6:73:66:12:0d:59:fd:55:77:f6:61:e7:fa:8e:70:cd:a1:
         68:d3:88:ec:9e:a6:e3:4e:86:6b:6c:3d:d6:45:ad:fe:4e:60:
         7b:6a:6e:73:16:af:6e:f2:cd:6c:b1:37:4c:48:58:20:6f:68:
         79:ab:1a:a1:dd:70:ba:b5:e5:f5:5d:28:81:26:d4:c7:e0:17:
         4d:8f:e0:a6:8c:5d:d1:47:dd:00:ec:49:f9:a2:e6:39:99:1f:
         c5:df:2c:c3:4f:0f:e5:10:fd:da:e5:22:b8:2e:79:0e:5d:a8:
         a0:27:0b:b3:cb:ae:08:fa:85:31:f4:f6:0b:95:78:c2:dd:6d:
         c2:2a:3e:63:a5:13:6b:1f:ca:f7:b2:f1:ce:29:eb:80:28:6a:
         e8:c0:8f:aa:fb:aa:4d:ba:2d:a9:d7:b7:02:38:1f:ff:39:b6:
         16:44:82:35:72:4e:93:3c:31:00:34:35:46:c3:a2:af:aa:c5:
         58:00:6f:14:c7:69:c6:f8:ec:af:e3:a3:9b:90:de:2c:ae:be:
         5d:07:91:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3BS8afrRhguNdYBfEV6cx2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjYwNDI0MjEwMTAxWhcNMjYwNDI1MjEwMTAxWjAzMTEwLwYDVQQD
Eyg4NWY2ODY1NjlhMmM0MThjNDE3MmExMGIzNGE0ZmY4NTRhZDA4MWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs78NS3AdCbXsRI51UQQEwl/ZNQ3Y
Qpgil+3fa/UoMDyMAf7lXZnsTUZvpfAgatp1efI7rSlN8ZQula1oG6a3wVp/Abjs
UTzlos+ZEx58xBOeRKBrT70NYd016T+OQZB6W7omr0X50AasPmTy+iIGZULOA+p+
H7eTs+79xGsrtTfCZ2p6Lux0EYtcUvCtB/GEcL6/oLjU4LGa7UvR9N132FJxBDaw
1ULwRgQCaVyVTcz3WVK+ENqArhUMXnJXKfrcU6UaFX7LuzL8NzJ4pKLCozJEPCKG
ItM6nd5XaalKuuf+Zukem0HNwC+N2o6ZfC9k8eVuD8Qr3CxJRVVo6htLgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIX2hlaaLEGMQXKhCzSk/4VK0IHuMB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALyY1qGTA
K5bii32/nYENzaFyqllAMgpsn9+oJN1A+CxObmZ8mUPLYnSp8JWnzpkizQnKN3gb
vtZzZhINWf1Vd/Zh5/qOcM2haNOI7J6m406Ga2w91kWt/k5ge2pucxavbvLNbLE3
TEhYIG9oeasaod1wurXl9V0ogSbUx+AXTY/gpoxd0UfdAOxJ+aLmOZkfxd8sw08P
5RD92uUiuC55Dl2ooCcLs8uuCPqFMfT2C5V4wt1twio+Y6UTax/K97LxzinrgChq
6MCPqvuqTbotqde3Ajgf/zm2FkSCNXJOkzwxADQ1RsOir6rFWABvFMdpxvjsr+Oj
m5DeLK6+XQeRaA==
-----END CERTIFICATE-----
Generated at Sat Apr 25 05:30:07 2026 by rpki-client