Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          jNWtc0hPuapK16LhjSWjUYYqUK1LnzRY349cqtPfbvU=
Subject key identifier:   EA:E1:15:13:69:DF:D5:7F:DC:6B:4A:E4:60:ED:3D:A4:97:EA:5A:40
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019CBAA75A15A4EF6AC41870E63969EE1797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          1895
Signing time:             Wed 04 Mar 2026 21:00:55 +0000
Manifest this update:     Wed 04 Mar 2026 21:00:55 +0000
Manifest next update:     Thu 05 Mar 2026 21:00:55 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: lerCB4bewQS0F7qHB5mbKrjKJbtXLs87FMrmQ0LzS9M=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Mar 2026 19:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ba:a7:5a:15:a4:ef:6a:c4:18:70:e6:39:69:ee:17:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Mar  4 21:00:55 2026 GMT
            Not After : Mar  5 21:00:55 2026 GMT
        Subject: CN=eae1151369dfd57fdc6b4ae460ed3da497ea5a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:01:55:10:55:ed:1f:9e:82:0e:e9:4a:f4:8a:
                    ae:35:09:35:41:07:58:31:73:f4:b1:4f:d2:85:99:
                    a4:91:3f:3f:e1:8a:ab:45:1e:3f:83:b7:c0:f4:da:
                    7f:8f:28:26:e4:fc:65:ff:41:41:2b:8f:dc:be:78:
                    7e:e2:51:22:74:60:2b:5d:b9:13:6f:ac:c0:28:79:
                    51:ff:bb:de:2e:92:3a:7d:8b:88:29:f1:cd:7a:1e:
                    27:14:c1:e2:9b:8e:7e:95:94:4a:37:10:05:04:f4:
                    69:3d:46:9b:b6:80:57:e5:54:0d:a7:a4:c3:b4:8e:
                    c4:4b:25:d7:f0:e3:ea:93:17:39:8d:c6:0a:22:4e:
                    8f:f7:99:83:c4:0b:ab:6b:d4:34:ba:3b:ec:8f:56:
                    a8:00:34:5f:d8:70:3d:ef:a1:4c:6a:e2:24:27:1e:
                    e9:1b:a6:54:5f:e6:34:53:1b:43:1c:1e:c0:de:66:
                    9e:60:d8:8c:fa:4a:83:de:83:a7:59:c4:36:01:2d:
                    9b:66:fb:5a:fe:0e:0e:0f:62:1e:6f:7e:65:03:c6:
                    f1:60:28:76:3b:ec:23:d4:1b:8d:ad:73:16:ef:7f:
                    d6:77:b3:5b:5e:73:0f:d4:7e:c0:64:53:44:70:27:
                    0b:07:37:95:ee:49:fd:70:c3:31:0a:0e:2d:8a:6b:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E1:15:13:69:DF:D5:7F:DC:6B:4A:E4:60:ED:3D:A4:97:EA:5A:40
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0e:1a:8d:98:eb:ce:d0:01:d8:8d:7f:b5:c7:ca:b4:16:45:
         bb:4e:ba:35:e1:8f:4b:2e:be:56:ba:e6:4f:b8:ef:82:87:a1:
         16:ae:2b:49:8d:38:5a:0b:47:b3:79:1f:a0:ee:76:24:30:b6:
         54:c5:75:92:9c:bd:c4:1b:15:1d:c2:35:3d:7b:3d:72:64:98:
         46:7b:9c:57:12:77:de:07:92:84:1a:c7:77:fe:be:d7:94:51:
         85:c3:dd:2f:21:5b:17:8f:6d:9a:3e:a7:1b:af:ce:87:38:16:
         30:26:dd:ff:97:78:f1:f0:58:9c:47:ee:5a:10:0c:f7:6c:e2:
         ae:ac:2d:4d:64:18:30:58:59:f0:76:1f:d1:92:5d:7b:24:78:
         26:63:9b:f4:dd:c6:19:4b:2e:59:68:fb:73:27:3a:82:c5:3a:
         9d:68:7f:1e:bc:6f:69:6b:38:ed:26:00:88:f5:83:58:71:e5:
         9b:84:72:f1:cb:f1:41:c1:4e:b6:83:7f:de:d6:8f:24:57:06:
         91:20:8f:be:2e:3b:f7:2d:88:17:42:2d:a9:3d:38:a2:a6:46:
         1d:17:86:55:eb:cc:d0:32:b5:14:07:ff:5d:bf:73:7c:8b:97:
         ad:8b:fa:9a:48:1d:76:4e:f3:80:b5:91:5c:15:09:0f:6e:d7:
         6f:7e:96:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 02:17:24 2026 by rpki-client