Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          6RKczGgyhODBYRhX1VbGkJYuRdJJQfhtb13pPWqn/b0=
Subject key identifier:   12:EA:46:33:0D:E6:94:BF:7C:4B:AD:31:A2:C9:B8:72:69:67:62:A4
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019D156B1A0FE7456D0F6C6AEE3E1811A083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          18C4
Signing time:             Sun 22 Mar 2026 12:00:33 +0000
Manifest this update:     Sun 22 Mar 2026 12:00:33 +0000
Manifest next update:     Mon 23 Mar 2026 12:00:33 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: JyEcVYytTPi651WErhqM4I2Y/vFpkfp2eWLTnufvWWI=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Mar 2026 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:15:6b:1a:0f:e7:45:6d:0f:6c:6a:ee:3e:18:11:a0:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Mar 22 12:00:33 2026 GMT
            Not After : Mar 23 12:00:33 2026 GMT
        Subject: CN=12ea46330de694bf7c4bad31a2c9b872696762a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a0:c4:e6:d8:73:ac:80:da:cf:af:07:49:dd:
                    00:db:3e:8c:d7:df:c1:3d:c4:6a:08:19:8e:0a:fb:
                    07:a9:02:69:29:38:69:73:7a:c5:6f:5e:88:eb:c3:
                    55:8e:f6:40:01:05:42:a1:47:7e:5d:2b:62:48:b4:
                    8f:87:45:99:3c:fb:72:6e:61:0d:e1:4a:43:fa:87:
                    75:10:cd:50:08:9c:70:4d:aa:f8:58:45:15:8b:bd:
                    03:82:26:c7:0c:73:d6:57:74:99:31:3a:eb:50:31:
                    3a:94:0c:9a:88:76:6d:4b:9e:90:7c:b4:0d:f6:bb:
                    52:76:3a:32:f3:cb:28:d1:3f:57:9e:d6:68:97:bd:
                    aa:cd:4c:80:b1:78:80:69:5f:5a:f3:72:83:e1:90:
                    61:47:4f:9e:05:61:83:eb:ef:da:49:20:f6:f1:7a:
                    7c:6b:00:7f:41:9d:4f:90:8b:60:04:10:71:07:3c:
                    60:f3:3f:73:7e:bb:6f:91:21:38:61:7d:db:4d:37:
                    f8:61:fc:37:6a:eb:f2:64:7e:bd:be:3d:ac:36:6a:
                    d7:9c:91:7f:fc:38:88:09:46:a4:a1:62:b2:2e:b0:
                    40:c1:3d:ba:bd:59:43:68:85:62:f6:56:25:76:15:
                    49:bb:d3:2b:a2:7b:50:31:d9:43:73:da:f2:bb:6c:
                    89:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EA:46:33:0D:E6:94:BF:7C:4B:AD:31:A2:C9:B8:72:69:67:62:A4
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d7:50:9f:80:db:5d:35:6f:50:e4:e2:89:a2:76:33:06:9a:
         09:9b:12:18:6d:99:67:99:cd:c2:5a:f0:22:ba:57:98:6c:49:
         80:14:db:5a:18:85:d0:72:f1:d1:b6:29:fb:b0:97:d0:46:82:
         b3:e8:20:a4:2c:5b:42:1a:48:df:b1:82:20:eb:ae:2b:27:c6:
         59:c4:3c:f0:47:2b:77:75:59:de:57:2c:84:28:66:83:5b:15:
         f4:8d:b0:ef:8e:93:38:11:0c:55:33:4a:88:19:95:32:31:84:
         7b:f5:4c:80:7d:8e:07:37:57:ad:c1:97:db:cf:df:2c:d4:b9:
         9d:ab:d6:a5:e0:c9:3f:7c:38:bb:c6:2c:ae:1d:49:98:92:f8:
         4a:dd:a5:5b:11:20:b4:d2:6d:89:c3:c2:53:70:6e:cc:c9:2e:
         bc:f8:5e:14:f0:08:2b:77:98:e7:0e:01:20:36:da:af:11:8d:
         eb:81:65:13:81:a6:5a:88:1b:53:2a:4b:7f:8b:f5:79:aa:b4:
         c5:4d:39:47:c1:8a:d3:16:bb:70:bb:26:50:05:6d:28:17:64:
         5e:02:3b:84:a6:8c:06:b6:d6:8b:af:a4:e3:66:fc:a5:1b:26:
         85:74:88:78:f1:33:95:d6:ca:f1:6d:68:92:34:07:38:e2:c6:
         b9:44:54:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 21:42:57 2026 by rpki-client