Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          SU8G62d6l3DHZ3AIR0OfacLr0eKrK7GbKr/p33a68Qw=
Subject key identifier:   6A:66:D1:D9:E8:31:5C:76:4C:E4:90:2F:8A:F9:24:7B:05:DF:FD:80
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       01A0B23E6F68A22A6A45BD76DD2B9F37037F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          1AAB
Signing time:             Fri 18 Sep 2026 02:00:31 +0000
Manifest this update:     Fri 18 Sep 2026 02:00:31 +0000
Manifest next update:     Sat 19 Sep 2026 02:00:31 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: 9xcDq5BERTPl-taAcvBbAPdIa2s.roa (hash: /rCSnPIAiOhKYzHr0b4Aa11HLmoGu1kBXDiI9N5EJA0=)
                          3: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          4: FbsD3IaJEYz-fngs_BkxMzDcei8.roa (hash: sIhRNJSFg1QvsagQ533HplVxtNWu8BYrTJIuHiVYaZw=)
                          5: ITVk_BbTGZGBY8i_CGHM-CWi2Nk.roa (hash: NotHge1XMsDsDTu5BSWNG9GRaLH4tUNLXybnZGu/knM=)
                          6: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: I3ZaIyYNT+HV4rvQ/Js8GJDy0SnF8TQQi9iXSvP53ts=)
                          7: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          8: Wu9fqzsO0e3dDW7pg9IW4kd8ca4.roa (hash: DnNwN484bQ2o81uJz2zDwIJLdkB1zuHM5PscTbmg5Ns=)
                          9: ZsvTx9SfJapFLF0M3RriUR8HtMM.roa (hash: lxhDwbf/d9lixiDK0WW+B7DIvTUm3qDzeV3VF8OSC8M=)
                          10: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          11: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          12: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          13: jwzq316YRIYxB2dWQOOXkN8ZJ50.roa (hash: 4AUyfiPaPdOkjAJK1elfVHLI1HzkuX68VSkqUCY1eNU=)
                          14: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          15: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (hash: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=)
                          16: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 22:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b2:3e:6f:68:a2:2a:6a:45:bd:76:dd:2b:9f:37:03:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Sep 18 02:00:31 2026 GMT
            Not After : Sep 19 02:00:31 2026 GMT
        Subject: CN=6a66d1d9e8315c764ce4902f8af9247b05dffd80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:96:2f:7d:52:52:f4:d0:90:a8:06:ae:e3:ad:
                    84:04:81:7d:25:ce:74:cc:75:48:4d:89:d9:71:4a:
                    f3:94:b1:40:f9:64:ba:92:3a:2a:9b:29:59:c7:d0:
                    69:d1:09:27:ba:88:1b:61:aa:4a:05:f2:09:fa:b0:
                    e2:47:6d:6f:39:7d:f4:2d:3a:91:9f:ef:4b:ec:99:
                    f0:9a:f4:ac:49:a1:82:33:3c:18:cb:10:bc:0a:e6:
                    3a:59:f3:e0:42:9b:84:80:72:53:bb:57:a5:ce:e4:
                    3c:a7:a6:71:85:40:89:47:a7:ed:14:3c:40:06:42:
                    36:43:8b:b5:bd:4d:f1:66:e2:28:64:0f:5e:64:8e:
                    11:be:f2:11:ab:38:fc:2b:42:12:e5:c8:c0:db:03:
                    5c:41:97:b1:5c:29:e1:48:75:5f:9b:7c:92:71:b2:
                    7d:92:cd:ef:d5:58:a7:76:0c:b3:80:1c:e6:17:65:
                    77:8f:7b:6f:d9:74:e1:e5:72:8c:08:a9:df:32:b3:
                    c8:16:15:af:ac:92:b1:a4:20:2c:50:a8:88:49:f0:
                    a2:d0:ac:7a:17:ee:cc:a8:fa:4a:28:da:d5:7a:dd:
                    ab:bb:b3:e4:60:18:c1:98:3d:ef:96:36:8f:66:46:
                    96:d6:e8:37:7e:92:13:ee:2c:4f:e2:7b:7c:5a:85:
                    db:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:66:D1:D9:E8:31:5C:76:4C:E4:90:2F:8A:F9:24:7B:05:DF:FD:80
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:f4:7b:cd:6d:3f:7a:15:0b:b8:ff:27:d1:43:e1:b5:18:c1:
         71:41:d5:e2:7b:3e:a4:9f:b0:2d:0d:b0:bf:03:59:b6:98:4a:
         56:8f:2d:8b:8e:55:06:f5:c2:80:40:b9:0b:52:43:35:bd:f5:
         96:11:ea:7c:10:0e:fb:07:b1:1e:6c:04:71:d6:30:58:4f:a8:
         41:a2:ea:98:30:0a:58:2a:68:f0:b3:49:c9:da:8d:80:da:78:
         be:f3:dd:b2:ad:c7:a7:e2:b8:4a:1d:d8:6d:69:34:2a:d3:a9:
         0a:c8:49:e4:23:a3:ea:7d:13:89:7e:ef:2b:a1:4a:86:7f:88:
         25:4c:cb:8c:d2:10:cd:8a:9e:4d:63:b2:f8:e3:38:ce:c5:c4:
         69:7d:1f:6b:55:43:4a:78:18:06:ac:e7:37:d9:ea:67:f3:cd:
         11:d6:7c:58:0a:f0:18:2c:f0:5b:fc:63:05:98:ee:b6:a6:57:
         1f:13:17:34:a4:fe:ff:e3:be:bd:65:d2:4c:bd:47:79:11:d4:
         77:4a:5d:f5:0e:b9:7e:d6:40:da:6e:32:38:75:3b:73:30:82:
         aa:2c:58:b2:f3:80:d4:ea:51:ce:77:94:ad:56:c8:de:21:8f:
         6f:6c:b0:a1:e2:4d:3d:e5:bb:c7:5f:2d:2a:88:c0:b7:bd:fa:
         8e:53:f6:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCyPm9ooipqRb123SufNwN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjYwOTE4MDIwMDMxWhcNMjYwOTE5MDIwMDMxWjAzMTEwLwYDVQQD
Eyg2YTY2ZDFkOWU4MzE1Yzc2NGNlNDkwMmY4YWY5MjQ3YjA1ZGZmZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJYvfVJS9NCQqAau462EBIF9Jc50
zHVITYnZcUrzlLFA+WS6kjoqmylZx9Bp0QknuogbYapKBfIJ+rDiR21vOX30LTqR
n+9L7JnwmvSsSaGCMzwYyxC8CuY6WfPgQpuEgHJTu1elzuQ8p6ZxhUCJR6ftFDxA
BkI2Q4u1vU3xZuIoZA9eZI4RvvIRqzj8K0IS5cjA2wNcQZexXCnhSHVfm3yScbJ9
ks3v1VindgyzgBzmF2V3j3tv2XTh5XKMCKnfMrPIFhWvrJKxpCAsUKiISfCi0Kx6
F+7MqPpKKNrVet2ru7PkYBjBmD3vljaPZkaW1ug3fpIT7ixP4nt8WoXbAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpm0dnoMVx2TOSQL4r5JHsF3/2AMB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvR7zW0/
ehULuP8n0UPhtRjBcUHV4ns+pJ+wLQ2wvwNZtphKVo8ti45VBvXCgEC5C1JDNb31
lhHqfBAO+wexHmwEcdYwWE+oQaLqmDAKWCpo8LNJydqNgNp4vvPdsq3Hp+K4Sh3Y
bWk0KtOpCshJ5COj6n0TiX7vK6FKhn+IJUzLjNIQzYqeTWOy+OM4zsXEaX0fa1VD
SngYBqznN9nqZ/PNEdZ8WArwGCzwW/xjBZjutqZXHxMXNKT+/+O+vWXSTL1HeRHU
d0pd9Q65ftZA2m4yOHU7czCCqixYsvOA1OpRzneUrVbI3iGPb2ywoeJNPeW7x18t
KojAt736jlP2AQ==
-----END CERTIFICATE-----
Generated at Fri Sep 18 06:34:57 2026 by rpki-client