Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          VyyY1D1PKAHN6UIifnd1yQDf0GnW1s4cr/9xk3Rxv+Q=
Subject key identifier:   71:E6:BC:8F:61:C0:3B:36:6C:78:03:3B:93:39:41:BA:51:9F:3A:51
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       01A124D48E37B4E85BB1F3DC47013003E109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          1AF2
Signing time:             Sat 10 Oct 2026 08:01:12 +0000
Manifest this update:     Sat 10 Oct 2026 08:01:12 +0000
Manifest next update:     Sun 11 Oct 2026 08:01:12 +0000
Files and hashes:         1: 3gWFQ3R94nXeJm9H7CFp_7HY4yM.roa (hash: 7jmJB1ip1ePV21qy2oJjMtrZOP/BQAW7WRPsDMK05o0=)
                          2: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          3: 7liLho7mm8qK1hKdo9pzuzDUrKI.roa (hash: eORnpEQIWy2dF7BiQX+y/iU7zzf2f5oTCK8LoTwy4OE=)
                          4: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          5: EhNzvLSC2w82PV1I7edE46JD00g.roa (hash: 8imX79Cl8FQAhroM1zoc51Sw8fwWvmrfU4DcIMWxqiM=)
                          6: FbsD3IaJEYz-fngs_BkxMzDcei8.roa (hash: sIhRNJSFg1QvsagQ533HplVxtNWu8BYrTJIuHiVYaZw=)
                          7: I6-j-8BvQfa7uemDIhOjpDrfaIo.roa (hash: 4oPWEYVGarVF168W3qSKbbTkYi3cD0iLoXF1q+SMw64=)
                          8: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: DEC1yc75Dj89k9yuX91FkVuxOBlPWEWebUgavZUYIes=)
                          9: T-qUaTppWdjXOEe8zDVxP2wl2mU.roa (hash: BctL7i3w8G6/dn3DlfdZ96WAphGXQa+OTA6hPMPwVs4=)
                          10: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          11: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          12: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          13: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          14: jwzq316YRIYxB2dWQOOXkN8ZJ50.roa (hash: 4AUyfiPaPdOkjAJK1elfVHLI1HzkuX68VSkqUCY1eNU=)
                          15: o1M2nS6jpYqNPr4PmmyksnsPNkU.roa (hash: jZ7Fzk5UdE4bi+zoHAjfUyUn+7hvus7ThrXaF9l7HRE=)
                          16: pFnqQ8OxY0QNC7HRy-4FkWixiwE.roa (hash: fU2bUXH43phXIA3gQxBK8wzLYma3/YTLay/lAz3pmTg=)
                          17: plplcojObk3dawLZH3Mnt5_h870.roa (hash: Gar10ZJnWDhjrWeDdE6koBMvPsyWvXDelCNNbF7bBp0=)
                          18: vo9l8Al5-F3xxI_E7eoSodKnzmQ.roa (hash: MKd69gZ2Jcg9+PMYCJYIj+vJw76cSWTcSBs7Eexy3D4=)
                          19: wyBaD-xrWNM3oZ7omW2NVE0N4wg.roa (hash: nsnhyDk/6uhCCDvXfECiZ8RZAYd1WeMo4ansEBsj3V8=)
                          20: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:d4:8e:37:b4:e8:5b:b1:f3:dc:47:01:30:03:e1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Oct 10 08:01:12 2026 GMT
            Not After : Oct 11 08:01:12 2026 GMT
        Subject: CN=71e6bc8f61c03b366c78033b933941ba519f3a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:84:ff:36:54:8f:3a:53:ab:9f:7d:3c:40:1b:
                    b0:15:e9:5b:4d:9e:13:c1:34:f0:5f:26:f1:c3:aa:
                    66:7f:1f:e2:73:4d:4c:fc:93:e6:cd:19:91:9b:f9:
                    39:45:30:17:48:30:02:2a:5a:d1:a6:10:93:53:1c:
                    1c:55:b6:06:91:5a:8d:e3:79:4b:b2:d6:1f:d2:c5:
                    bd:fc:19:62:28:89:8b:ea:cc:04:08:ea:90:be:b1:
                    af:b0:40:99:ad:b2:45:1c:69:90:fc:db:5c:84:ab:
                    26:14:dd:71:b3:66:f4:63:83:52:b5:8e:5c:b9:0e:
                    08:8c:1f:18:8d:3c:63:b4:8d:80:53:7d:6f:c7:c1:
                    31:52:18:3c:23:20:42:ac:d2:73:63:07:74:9f:49:
                    f6:6c:5b:83:e7:1d:fa:c8:7d:4c:29:ab:3d:c3:76:
                    66:a9:c2:6f:74:02:22:63:0c:dc:38:ce:90:c3:28:
                    7b:11:b7:49:0b:a0:07:d2:f8:95:db:d9:41:1d:2f:
                    b1:8d:9f:f1:4f:b7:da:8f:d9:07:5c:3c:e1:67:3b:
                    32:07:78:ba:54:9a:e7:2d:09:40:4d:f6:ad:79:4e:
                    26:27:43:3f:35:56:f9:36:01:5a:92:79:15:7f:1a:
                    a1:bc:53:4c:77:bb:d9:cd:4c:62:de:a1:4f:3e:dc:
                    1d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E6:BC:8F:61:C0:3B:36:6C:78:03:3B:93:39:41:BA:51:9F:3A:51
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:8c:35:b7:df:86:1d:95:91:d0:c8:76:a5:d0:ef:bd:3f:38:
         8e:b4:04:a9:7f:40:cb:a0:9e:72:7a:90:fe:a8:e1:e9:00:21:
         81:9c:d8:87:64:26:9a:04:12:ba:23:32:bb:c2:88:1e:17:ec:
         86:f1:23:94:3e:35:59:b2:ce:63:e2:5c:33:4b:a1:8d:38:8f:
         e8:73:72:85:df:c0:6f:8a:ae:36:58:31:ed:a2:e3:7f:a8:82:
         d9:33:f3:6d:b1:50:ba:2a:31:fd:71:a0:e3:de:18:5c:4f:bc:
         37:ca:6b:8c:b3:e6:d6:67:bb:a2:17:ed:b5:f9:65:ab:b0:57:
         2f:bf:85:14:75:6d:d5:95:8d:6f:8e:58:8f:fb:40:3b:44:30:
         81:e6:2f:a6:a8:f6:e9:15:37:41:d4:30:2c:11:83:99:cd:b1:
         62:20:4e:0d:6d:6c:71:8c:d3:f0:9a:27:2d:92:cb:18:58:26:
         d8:39:81:de:38:a6:d4:bf:9a:f0:1d:7c:df:7e:fc:c9:a5:d7:
         53:8e:65:e1:4b:52:e6:f0:84:0e:ed:71:d5:a9:10:37:7a:3b:
         a7:4b:09:45:b8:68:26:b8:fc:fd:86:79:d7:1a:aa:d3:46:dc:
         f8:4f:0d:af:91:2d:76:e3:1c:3c:94:df:34:f6:eb:be:c5:e8:
         a9:52:fc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:17:36 2026 by rpki-client