Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          z57GEHqv+j/IoWDO5c4iy4pYm0qW60KSKhzZ9vkGjIw=
Subject key identifier:   F3:5E:AE:58:41:28:38:D5:F7:F7:76:33:B6:BC:11:8B:BE:DA:81:65
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019DD878E83CA504CED7EE5EF370BFAC1942
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          1929
Signing time:             Wed 29 Apr 2026 09:01:35 +0000
Manifest this update:     Wed 29 Apr 2026 09:01:35 +0000
Manifest next update:     Thu 30 Apr 2026 09:01:35 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: TQXijLDzuRktDnPGyeRcOdTEuwlXLNIfwwSnYnHvWIo=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Apr 2026 07:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d8:78:e8:3c:a5:04:ce:d7:ee:5e:f3:70:bf:ac:19:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Apr 29 09:01:35 2026 GMT
            Not After : Apr 30 09:01:35 2026 GMT
        Subject: CN=f35eae58412838d5f7f77633b6bc118bbeda8165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4d:05:62:3f:e3:d3:53:0b:4a:af:aa:68:e1:
                    2f:1f:0f:27:d8:43:bc:aa:f1:11:d7:b3:cf:08:0e:
                    5f:0c:80:6f:58:05:58:e6:1d:1d:ca:66:6d:a8:be:
                    13:57:0f:b0:90:2d:76:d2:89:19:46:d6:0a:00:1c:
                    97:ec:32:27:e4:63:15:4d:90:b8:d5:e1:62:ff:3d:
                    98:95:d3:1a:e5:0e:46:bb:d8:82:6f:7a:88:af:e7:
                    9d:af:2a:f3:92:78:b2:04:5b:ee:7d:af:61:e9:3a:
                    8b:35:48:2a:aa:0d:d3:75:fb:6b:f7:ec:b9:fb:1c:
                    70:81:20:e5:47:65:c0:55:ea:c7:d0:13:8b:89:8a:
                    9e:63:95:e4:e5:80:da:ac:a9:f8:a8:1a:14:24:ff:
                    bb:10:16:e9:01:4c:4d:46:c0:1e:4b:20:ab:c5:7e:
                    8e:01:37:6f:54:13:6b:79:8b:2c:f5:a4:d5:ec:d6:
                    1d:ee:31:b9:7e:99:2f:41:dd:10:1f:ed:e7:93:7b:
                    c8:ec:67:ad:77:63:7e:eb:80:1b:92:4a:fc:de:08:
                    46:fa:0a:0b:1a:75:f9:68:19:4e:0c:a0:5d:a5:b4:
                    a8:3c:4a:1c:d2:21:6f:2a:c3:f1:8c:f0:2f:42:1d:
                    1a:98:2d:57:e0:d0:a0:4b:04:e8:13:1f:31:83:a2:
                    c2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5E:AE:58:41:28:38:D5:F7:F7:76:33:B6:BC:11:8B:BE:DA:81:65
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:3f:95:91:1e:14:33:03:9d:f9:ec:be:6c:d9:03:62:42:27:
         d2:6d:52:b8:a1:7b:a0:fd:a2:dc:db:df:7b:4c:a2:9f:f3:f6:
         f7:c4:fd:d8:8e:d2:11:05:d7:5a:90:9f:da:e8:78:33:dd:56:
         97:b1:49:17:ae:de:31:cd:3c:88:e9:60:49:32:ca:3c:13:cc:
         1a:79:d6:27:42:01:37:20:a6:80:c1:b3:e9:4f:6c:4c:de:fa:
         20:4b:63:db:13:b3:b2:0b:04:b3:73:d5:b4:35:2d:a8:21:e9:
         44:df:f7:f3:f7:fe:a7:b1:38:c1:c8:26:61:27:d3:0f:e0:33:
         10:de:b6:e3:fb:e1:d1:92:38:26:b6:a8:9a:3c:dd:d3:ec:fa:
         88:43:4a:7c:02:78:73:a2:dd:46:9f:ee:a2:e6:19:2f:19:c7:
         45:e6:05:e0:e4:4f:93:db:54:54:22:95:a4:1f:7e:06:a7:53:
         c1:8e:e7:76:06:a8:58:0e:62:b1:de:9d:14:fc:bb:43:9a:1b:
         2d:7a:ae:c9:b8:1b:f1:5e:c4:3e:ca:74:b8:d0:83:37:d0:be:
         c4:0a:dd:57:5c:21:2b:13:4f:12:23:37:82:ef:0a:ae:8b:7c:
         92:d1:d1:e0:9f:ca:b1:99:51:48:8c:ee:dc:12:84:c8:a3:d3:
         34:9f:05:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 11:15:25 2026 by rpki-client