Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          zA7h5P4NWNSXpuykZ3OD0Q29s2bu4ybFWdJPLZoNXG8=
Subject key identifier:   83:FB:58:31:A1:B0:74:0E:33:61:69:F4:3F:EF:71:DD:E5:EA:02:C3
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019D382DDC2EB32F66007FBCC284741A89BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          18D6
Signing time:             Sun 29 Mar 2026 06:00:22 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:22 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:22 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: RhOGzTbT9WMupb1jPCFZdZt23Qyn+TlsyEBbeClGiJ4=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:dc:2e:b3:2f:66:00:7f:bc:c2:84:74:1a:89:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Mar 29 06:00:22 2026 GMT
            Not After : Mar 30 06:00:22 2026 GMT
        Subject: CN=83fb5831a1b0740e336169f43fef71dde5ea02c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:0f:89:6a:a3:16:bc:41:bb:17:45:c0:37:
                    38:03:05:28:df:cc:4a:39:b0:5f:64:80:91:ab:a7:
                    e9:09:42:0d:6c:bf:0b:78:c4:cc:91:19:c4:80:95:
                    a5:f1:28:1d:e6:83:f2:3a:c9:05:f0:4e:15:e1:a9:
                    f9:ed:47:33:b6:78:ed:76:05:7f:11:61:20:71:63:
                    ac:34:aa:4d:ea:fa:6e:16:03:b5:59:fa:d2:a2:91:
                    45:c8:5a:60:e1:5a:a5:22:13:2f:39:88:bb:a9:02:
                    58:10:9f:ea:55:06:b6:d6:44:43:55:d4:86:e1:53:
                    d4:74:e2:ec:87:df:bb:fc:d0:01:68:8e:12:6b:44:
                    72:1c:44:3a:5f:e1:3c:a1:fe:9f:01:00:c4:05:f6:
                    f5:ab:28:49:b8:a1:ce:da:9c:47:32:93:15:28:f2:
                    02:cd:e1:13:b4:33:85:1d:52:f7:fe:0a:66:65:e0:
                    20:b3:5f:10:9b:02:d9:1d:b9:ee:15:e7:d4:08:11:
                    f7:05:08:0b:a9:38:ca:d9:8a:8a:5a:5d:ca:f2:91:
                    5e:2b:f5:be:98:3c:cf:06:df:ab:ab:eb:6e:7a:0f:
                    5c:43:e2:d6:4a:82:bf:c5:ae:6a:f1:ab:58:9d:f4:
                    97:b0:70:e2:31:ed:83:75:2b:8f:ac:c3:c5:27:9d:
                    1f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FB:58:31:A1:B0:74:0E:33:61:69:F4:3F:EF:71:DD:E5:EA:02:C3
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:16:1b:96:81:23:ca:cf:ba:be:2e:2b:04:2b:9b:c2:f4:fc:
         bb:85:0a:e5:bb:7f:69:74:39:4c:ae:13:01:9c:67:e2:53:c3:
         34:f0:7d:a3:cf:90:c9:ae:29:db:1f:ee:63:70:2e:81:bb:ce:
         d2:38:71:f0:c4:24:cb:81:cd:c3:66:1d:e5:17:5d:c7:06:9a:
         0a:d1:1a:2f:54:99:df:19:7b:61:80:48:40:b4:d3:86:f7:0a:
         37:56:fd:35:e0:60:84:0c:fc:7b:27:2e:d7:c9:33:9d:89:96:
         63:69:02:11:d9:e4:d5:49:f3:37:97:7c:39:a9:71:68:0a:a0:
         2b:a8:52:ba:68:53:6c:d6:be:41:04:9e:ad:34:b1:80:f6:24:
         82:23:81:2a:66:00:8f:91:49:2e:62:43:dd:11:c7:90:d1:9b:
         e6:25:08:68:06:58:58:dc:42:fa:40:9b:70:00:df:73:62:b6:
         ab:38:3f:7b:68:fc:c8:0a:76:0b:22:d4:f8:03:34:25:fd:3b:
         22:24:42:16:11:69:5d:76:c4:7c:ed:27:25:45:14:e9:7b:ad:
         35:0a:87:26:4e:23:56:4f:9f:f2:4d:00:0e:11:f5:38:bb:80:
         3f:71:a1:87:28:96:5e:27:2a:2a:eb:03:3b:81:a5:26:39:cb:
         45:62:67:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:26 2026 by rpki-client