Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          KJl1uSWnnPrOLfrfJcIHKG5gJ1FUgQQvuo5eGFofShA=
Subject key identifier:   7E:81:98:22:3A:C2:B5:F5:4D:56:3F:E3:69:9F:0F:7B:E4:C3:77:37
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019D77EA802FBC19AE70FDF6EC008465C6D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          18F7
Signing time:             Fri 10 Apr 2026 15:02:30 +0000
Manifest this update:     Fri 10 Apr 2026 15:02:30 +0000
Manifest next update:     Sat 11 Apr 2026 15:02:30 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: 2ePkqvMpyCWp2FS4Vxxi+PEFlq2qSPjJ/A7YhQqBs0c=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Apr 2026 15:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:77:ea:80:2f:bc:19:ae:70:fd:f6:ec:00:84:65:c6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Apr 10 15:02:30 2026 GMT
            Not After : Apr 11 15:02:30 2026 GMT
        Subject: CN=7e8198223ac2b5f54d563fe3699f0f7be4c37737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:df:c8:ac:b1:ba:21:08:e9:b0:1c:f9:4d:
                    25:62:7c:cb:c4:07:bc:62:77:18:23:d2:8c:c4:a0:
                    c8:72:3f:42:4d:6a:6d:23:47:6d:6f:87:8d:09:87:
                    0a:b4:c7:4c:59:0c:38:7b:19:97:c2:e1:2b:0f:e3:
                    b4:5d:05:f3:e4:c1:8b:55:df:d4:37:34:14:76:59:
                    79:2d:aa:02:8e:2a:c2:45:61:3d:d4:76:fc:55:a0:
                    9c:62:75:41:b1:9a:ae:03:3c:2d:34:8b:60:1d:19:
                    d4:7c:a6:15:51:7a:5d:c1:63:4c:4b:24:0c:45:89:
                    56:ff:f9:34:fe:8a:34:95:0e:54:2c:a3:8d:b5:5e:
                    ae:73:8e:51:f6:ed:ca:6f:67:2a:df:70:4f:c0:a4:
                    6d:d3:dc:d7:8b:0f:51:b7:a2:6b:0b:4a:8f:7a:de:
                    09:3f:10:63:0a:e2:77:20:7f:56:5f:cb:60:21:07:
                    ad:47:6c:38:04:c3:a3:54:4d:ad:c2:4e:4f:2b:f7:
                    6a:5d:ea:cf:30:de:a5:92:e4:f1:b3:cf:a9:ae:c5:
                    30:45:84:60:cd:4d:8b:c3:55:ee:f5:35:53:49:02:
                    1b:3c:fd:9c:f6:5e:6c:a4:de:d6:59:d8:21:a3:41:
                    32:9b:c5:ee:0c:b5:32:9f:25:1c:d6:dc:77:64:28:
                    42:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:81:98:22:3A:C2:B5:F5:4D:56:3F:E3:69:9F:0F:7B:E4:C3:77:37
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e5:c8:03:e2:db:40:fd:82:54:4e:7e:87:a1:8f:d3:5e:17:
         6c:9f:2c:2d:6d:04:09:5b:f2:e6:07:dd:f9:04:23:3f:bd:67:
         f8:89:8b:74:b4:8d:43:14:51:f3:aa:9f:c1:84:4e:e7:fe:9d:
         a6:d6:e5:c3:40:96:9e:7a:21:07:c2:74:a0:1c:11:28:4c:18:
         57:b9:24:38:59:93:32:c4:93:3d:f3:02:1c:ec:47:be:80:e5:
         3c:d3:4a:12:6a:9a:9e:1b:e6:4c:d5:3a:9e:0a:33:e9:2a:91:
         29:94:d4:67:58:13:54:10:eb:8a:55:85:87:83:71:71:fb:13:
         75:10:f8:cc:9b:d6:98:f6:c9:dc:93:18:c1:69:ec:92:16:26:
         86:0d:64:29:41:36:8d:62:34:7e:26:0b:94:5b:f9:d3:29:4d:
         17:21:c6:00:1f:c4:f6:77:64:2a:30:b1:ed:01:77:9a:dc:28:
         cc:7b:e5:bc:50:96:82:40:d0:06:da:7b:11:0c:ca:81:2a:e4:
         49:02:76:da:fa:f3:df:57:85:19:fa:97:10:85:44:04:32:04:
         2f:84:97:b7:30:83:57:f1:ea:71:fb:f4:50:10:1b:4f:1e:0d:
         9f:c6:5a:8c:ec:15:9e:e8:e4:0b:ad:40:02:81:96:4e:a0:0e:
         0f:3c:6a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 22:03:26 2026 by rpki-client