Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          WTTfXqwiXLFEQY73ICLXavjOQtClqRWXwPXC3frUajo=
Subject key identifier:   2D:64:56:70:E3:19:01:AD:C0:1C:91:0D:69:F2:AB:EA:3F:EE:A6:03
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019CAB34B662BCCB5153FB77A7FD5593FA20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          188D
Signing time:             Sun 01 Mar 2026 21:01:24 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:24 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:24 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: cF2vfwwXRIP9JqdEvEnO3fQwmUovnNp8DKp9gRESjIo=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:b6:62:bc:cb:51:53:fb:77:a7:fd:55:93:fa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Mar  1 21:01:24 2026 GMT
            Not After : Mar  2 21:01:24 2026 GMT
        Subject: CN=2d645670e31901adc01c910d69f2abea3feea603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cc:2c:97:87:f4:5e:df:b2:0f:6b:99:b7:cc:
                    ff:cc:25:b1:bb:84:d6:27:a4:52:c9:59:64:d9:e0:
                    70:97:89:f7:55:69:af:ff:f2:e2:eb:3f:5c:7e:bc:
                    ab:3c:d6:56:3c:ed:f6:a9:d4:0f:b0:9d:21:8f:98:
                    df:6a:a7:8e:3f:6c:75:93:e2:0e:0a:06:68:53:33:
                    8b:fd:be:89:fc:66:56:13:eb:e5:a7:db:ba:7d:8a:
                    da:90:3c:d0:c6:38:93:6a:74:0b:a2:cd:05:39:5b:
                    5c:96:22:5f:7f:0d:6c:89:94:5f:00:12:6c:34:49:
                    2b:51:27:43:3e:c9:97:14:fd:8c:f0:f0:65:f4:fa:
                    f7:8d:2a:bc:c7:31:b1:02:9f:e7:c9:98:eb:76:d3:
                    22:bc:f2:60:54:55:cf:55:48:b3:ee:ae:ee:3d:3d:
                    a9:f2:af:97:ae:c1:9c:24:98:41:b9:9d:fb:ca:1a:
                    67:e4:38:2a:39:85:ae:d5:35:51:1b:c2:f4:b7:43:
                    a5:65:00:9e:d0:ac:e1:0a:7d:dd:38:78:55:5b:a6:
                    db:93:04:b2:91:46:cb:7f:b2:75:29:0f:14:6d:b4:
                    71:d5:a2:f0:aa:49:02:4b:91:04:21:82:85:e0:53:
                    5b:03:a8:63:72:83:a8:df:09:e3:ed:02:8e:ed:d9:
                    0e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:64:56:70:E3:19:01:AD:C0:1C:91:0D:69:F2:AB:EA:3F:EE:A6:03
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ca:5c:ac:45:9e:29:15:f1:68:58:ad:79:a0:51:53:47:b7:
         fa:ef:84:50:b2:4f:1d:76:06:80:c9:65:ad:01:8f:c6:5f:ae:
         96:e7:f6:13:9f:77:76:01:e5:64:75:de:2d:7e:17:81:6a:6e:
         57:c0:4c:49:22:b0:ac:98:f1:f3:1b:00:a9:de:8b:b5:d9:20:
         0a:80:0b:82:f5:e4:a7:b0:a2:5f:31:c6:3b:35:70:bf:bf:79:
         05:79:f5:e5:a3:1e:4b:a3:09:8b:98:97:00:8e:7a:c0:d0:33:
         53:3e:42:57:e2:53:a1:93:fc:11:0a:7d:27:64:ae:3a:c1:e7:
         ce:26:10:ec:27:7d:79:01:5d:76:14:f7:ad:bd:5b:d7:d2:68:
         39:df:12:d2:01:25:34:a5:8b:4a:fc:a4:5a:2b:52:09:d4:0d:
         6a:9a:9d:84:76:11:6a:c9:cf:ac:ef:bd:b1:fd:eb:b7:49:b6:
         80:ae:81:05:da:b7:56:85:e7:39:a1:0f:76:ca:d0:a8:9d:3a:
         ae:1f:6d:10:7f:20:34:91:d6:b1:40:d9:fa:a8:fc:c7:0f:43:
         e8:8e:1a:70:85:06:6c:33:44:d2:c3:78:02:73:a6:5a:3b:bd:
         44:b9:0c:6e:ca:59:a5:ea:5c:28:6d:14:67:c0:44:21:55:d9:
         26:47:a7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:59:26 2026 by rpki-client