Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          JBVJr1vd3oiW2VGRZM2pFHjRYLWNv8UFAbgACjA0Mas=
Subject key identifier:   2B:9E:37:1F:29:81:8B:2C:43:3C:D8:13:F3:0B:E4:67:C2:45:C5:81
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       01A1A6A69BAAD9AAC0383D54F326A375302C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          1B39
Signing time:             Wed 04 Nov 2026 13:01:38 +0000
Manifest this update:     Wed 04 Nov 2026 13:01:38 +0000
Manifest next update:     Thu 05 Nov 2026 13:01:38 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: 5lZSlukstep8t8iGtcspGGIXudc.roa (hash: 2HisxFB+lIfH6x5qfJ2BbD71zUZkoyCOyQw011g7v5Y=)
                          3: 7liLho7mm8qK1hKdo9pzuzDUrKI.roa (hash: eORnpEQIWy2dF7BiQX+y/iU7zzf2f5oTCK8LoTwy4OE=)
                          4: FbsD3IaJEYz-fngs_BkxMzDcei8.roa (hash: sIhRNJSFg1QvsagQ533HplVxtNWu8BYrTJIuHiVYaZw=)
                          5: I6-j-8BvQfa7uemDIhOjpDrfaIo.roa (hash: 4oPWEYVGarVF168W3qSKbbTkYi3cD0iLoXF1q+SMw64=)
                          6: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: nKF3nGlZT0C5tmbMFNXS4nVQbQDVLUimYSaVSPlNj2g=)
                          7: T-qUaTppWdjXOEe8zDVxP2wl2mU.roa (hash: BctL7i3w8G6/dn3DlfdZ96WAphGXQa+OTA6hPMPwVs4=)
                          8: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          9: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          10: e7qy2cTt6p5gNaMBLvc92aaNc_Y.roa (hash: 9Mx+CD/LnDGLKhs7WTJY4mZKGHAB4Ii0cAqMmkj5NmM=)
                          11: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          12: o1M2nS6jpYqNPr4PmmyksnsPNkU.roa (hash: jZ7Fzk5UdE4bi+zoHAjfUyUn+7hvus7ThrXaF9l7HRE=)
                          13: pFnqQ8OxY0QNC7HRy-4FkWixiwE.roa (hash: fU2bUXH43phXIA3gQxBK8wzLYma3/YTLay/lAz3pmTg=)
                          14: plplcojObk3dawLZH3Mnt5_h870.roa (hash: Gar10ZJnWDhjrWeDdE6koBMvPsyWvXDelCNNbF7bBp0=)
                          15: r9cyYz5gQDHO7JEIkBDX-MYg38Q.roa (hash: HRtQbXTLeClS9SRzwe/ZSriRk7p5DeNMKB9PPL2Rh68=)
                          16: wyBaD-xrWNM3oZ7omW2NVE0N4wg.roa (hash: nsnhyDk/6uhCCDvXfECiZ8RZAYd1WeMo4ansEBsj3V8=)
                          17: zbTHDH9LU749bEfUed073aAvOHA.roa (hash: if3xsyUoOBbtpFgR7N97hqm8tjyBtb1quPPeOE4N1vI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a6:a6:9b:aa:d9:aa:c0:38:3d:54:f3:26:a3:75:30:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Nov  4 13:01:38 2026 GMT
            Not After : Nov  5 13:01:38 2026 GMT
        Subject: CN=2b9e371f29818b2c433cd813f30be467c245c581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e5:4a:a2:71:e7:5e:db:31:93:df:7b:03:bd:
                    9d:84:98:31:87:37:5b:de:1b:e8:ff:78:ac:85:cb:
                    5f:49:35:e3:c4:bf:61:f1:8d:d2:37:88:ae:37:5a:
                    40:f9:94:49:71:d1:a3:32:45:f2:e0:07:7e:f2:1c:
                    ba:1e:a0:f3:24:9b:0f:6e:bf:b9:08:ac:70:b1:1d:
                    70:2a:ec:46:a2:9a:ed:23:b9:cf:a9:b6:5b:42:e7:
                    25:e1:1e:a8:88:a5:d0:23:1e:bd:d4:7e:2c:db:b7:
                    50:bf:3d:4c:08:8b:d5:c1:d5:9b:0c:6c:aa:75:0e:
                    12:d9:78:4f:5a:8a:10:1c:50:1f:3a:f6:6d:1b:ed:
                    de:ab:12:ad:20:20:35:92:a6:b5:d6:00:c0:89:a7:
                    1e:41:a8:51:22:e0:65:8c:b1:76:cb:f3:3d:1b:9c:
                    3f:30:51:b1:73:f2:aa:c1:74:d3:11:6b:d1:24:b4:
                    c9:b4:3a:bc:2e:06:5e:95:12:0b:9b:be:47:de:40:
                    92:9e:a1:c4:63:a5:80:90:a2:f7:f4:9a:5d:51:97:
                    25:77:3e:e4:30:c0:2d:c3:4f:5d:6b:8f:21:ee:94:
                    d3:93:9f:36:e6:a8:46:4d:d7:c3:cc:da:0a:d8:2f:
                    1d:08:cb:21:35:eb:3f:ab:3f:cb:03:35:ec:42:eb:
                    2f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9E:37:1F:29:81:8B:2C:43:3C:D8:13:F3:0B:E4:67:C2:45:C5:81
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:7e:98:9b:87:8f:a6:1c:63:f2:f5:48:bc:6d:05:da:bc:50:
         44:b2:9d:d9:3d:c8:b9:17:d8:f0:06:45:0c:b3:ba:fd:d9:91:
         d1:63:6a:b0:c8:7e:0e:83:79:1f:45:f9:19:17:8d:2a:0f:25:
         ff:dc:db:e8:83:33:48:2d:18:76:02:bf:0f:d7:3c:51:14:22:
         52:5e:25:2e:52:1d:7b:e4:3d:92:a4:87:a6:14:9e:a7:6b:60:
         1b:f2:a8:b5:3a:37:19:e4:a0:59:31:d2:73:d7:b4:da:05:36:
         58:df:9d:9a:98:ba:6b:35:18:5a:22:87:5a:38:47:7e:6f:13:
         ed:44:c2:d2:65:41:80:6f:bc:bb:25:73:f3:a8:d0:b0:c5:d1:
         0c:45:83:be:3d:a4:13:da:28:63:64:db:c8:f9:8d:d3:72:fc:
         a4:e8:8f:07:34:2a:d0:25:dc:1d:a1:43:a6:05:de:3f:02:2b:
         26:a8:45:a6:9a:70:ea:0e:d0:2a:99:56:37:4c:f6:a4:e2:3a:
         2d:e1:05:51:09:44:75:71:69:9c:3d:b7:4e:ef:37:79:33:b1:
         a6:dc:3d:44:50:39:f7:40:1b:19:05:e4:0c:e7:b8:7a:49:b0:
         62:38:ad:8c:4d:1c:8d:09:3b:6c:61:95:66:65:07:c1:fb:e8:
         89:83:03:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGmppuq2arAOD1U8yajdTAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjYxMTA0MTMwMTM4WhcNMjYxMTA1MTMwMTM4WjAzMTEwLwYDVQQD
EygyYjllMzcxZjI5ODE4YjJjNDMzY2Q4MTNmMzBiZTQ2N2MyNDVjNTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+VKonHnXtsxk997A72dhJgxhzdb
3hvo/3ishctfSTXjxL9h8Y3SN4iuN1pA+ZRJcdGjMkXy4Ad+8hy6HqDzJJsPbr+5
CKxwsR1wKuxGoprtI7nPqbZbQucl4R6oiKXQIx691H4s27dQvz1MCIvVwdWbDGyq
dQ4S2XhPWooQHFAfOvZtG+3eqxKtICA1kqa11gDAiaceQahRIuBljLF2y/M9G5w/
MFGxc/KqwXTTEWvRJLTJtDq8LgZelRILm75H3kCSnqHEY6WAkKL39JpdUZcldz7k
MMAtw09da48h7pTTk5825qhGTdfDzNoK2C8dCMshNes/qz/LAzXsQusvLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCueNx8pgYssQzzYE/ML5GfCRcWBMB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADn6Ym4eP
phxj8vVIvG0F2rxQRLKd2T3IuRfY8AZFDLO6/dmR0WNqsMh+DoN5H0X5GReNKg8l
/9zb6IMzSC0YdgK/D9c8URQiUl4lLlIde+Q9kqSHphSep2tgG/KotTo3GeSgWTHS
c9e02gU2WN+dmpi6azUYWiKHWjhHfm8T7UTC0mVBgG+8uyVz86jQsMXRDEWDvj2k
E9ooY2TbyPmN03L8pOiPBzQq0CXcHaFDpgXePwIrJqhFpppw6g7QKplWN0z2pOI6
LeEFUQlEdXFpnD23Tu83eTOxptw9RFA590AbGQXkDOe4ekmwYjitjE0cjQk7bGGV
ZmUHwfvoiYMDzA==
-----END CERTIFICATE-----
Generated at Wed Nov 4 20:25:44 2026 by rpki-client