Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          NT2y1XXs8X9+2KZ80szoq7OxHm3aVj9hsT5xR9Unhs0=
Subject key identifier:   09:DF:F5:B8:72:9A:56:2F:DC:5E:CC:8E:47:42:01:FB:22:CA:2D:E0
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019E8835C4A1ADDAB409B6CB011E8D554213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          1984
Signing time:             Tue 02 Jun 2026 12:01:25 +0000
Manifest this update:     Tue 02 Jun 2026 12:01:25 +0000
Manifest next update:     Wed 03 Jun 2026 12:01:25 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: mgVxVTbGcma4LZ23k4WIAbJgl6bILIyaFsCWEiO1I9E=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jun 2026 12:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:88:35:c4:a1:ad:da:b4:09:b6:cb:01:1e:8d:55:42:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Jun  2 12:01:25 2026 GMT
            Not After : Jun  3 12:01:25 2026 GMT
        Subject: CN=09dff5b8729a562fdc5ecc8e474201fb22ca2de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:79:05:5c:41:fe:47:2c:06:5d:db:fe:41:a0:
                    ca:ed:02:5b:d8:cb:4a:c6:1a:73:6c:5e:a8:42:f6:
                    ec:86:dd:c6:ef:e4:da:6b:dd:35:fe:49:8a:00:8a:
                    d7:a5:de:b4:c7:0c:f4:76:24:62:36:a7:cb:c2:dd:
                    8e:48:b7:4b:7f:87:ec:eb:aa:23:b8:9e:0e:5d:7d:
                    9d:ae:33:3c:4d:de:2d:53:27:56:4a:72:f0:d4:fe:
                    ed:00:0a:59:d5:05:58:12:cb:b0:18:3d:ec:cf:54:
                    f6:d4:c8:c5:ed:d7:2c:a6:cd:bf:07:d3:74:c8:2e:
                    52:5b:35:b9:cd:1c:91:07:30:89:cf:0b:dc:7d:9c:
                    29:b7:72:a5:40:5d:97:bf:12:9f:06:4b:1c:69:8f:
                    eb:ff:b1:e2:b9:25:c1:61:24:ce:0d:8d:fe:40:ec:
                    ad:48:f0:d6:9c:1a:9a:ef:53:92:fa:be:cd:71:7f:
                    46:27:af:31:01:07:1f:dc:99:b1:8c:56:dd:69:fb:
                    7f:23:71:ca:7e:5d:c7:b3:4c:08:ac:1f:35:45:1e:
                    60:91:52:95:9a:60:78:1b:6a:e6:15:08:ce:13:0f:
                    85:f5:9c:e2:d8:11:83:86:d9:3c:3c:89:9d:1a:00:
                    ac:67:ed:62:1c:58:dc:00:01:f9:59:e1:47:8e:18:
                    f6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DF:F5:B8:72:9A:56:2F:DC:5E:CC:8E:47:42:01:FB:22:CA:2D:E0
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:5a:f1:f9:f1:fc:8b:77:de:a9:11:33:b1:5a:48:4f:62:5a:
         7c:57:64:08:36:6a:fb:3f:11:22:e5:23:f0:9f:86:55:cc:b2:
         3a:5b:e7:83:c5:32:91:b2:c5:92:6b:b9:cb:b3:59:82:18:ec:
         18:16:d1:41:8b:e7:d6:0a:90:96:e7:fe:8d:64:f5:95:14:ec:
         43:93:b2:47:d0:4f:2c:4f:10:13:f2:8b:05:dd:c8:cf:29:53:
         ef:63:32:31:ef:3b:61:c8:e3:a1:69:62:31:ff:d7:3e:ac:f5:
         17:10:1a:c8:0a:04:c1:55:26:fa:15:d5:06:02:3a:7f:e9:89:
         e0:f6:99:45:6a:c0:ef:a5:3d:63:7e:9f:cf:96:e5:2d:c9:a1:
         d8:28:6c:22:d3:a6:48:a5:d2:35:8f:89:3c:f0:d4:2d:09:84:
         9c:30:8c:30:23:c5:cc:a0:c9:a6:d7:bb:23:cc:d9:f0:0d:8d:
         6b:50:29:be:e0:46:09:cf:e2:7f:7a:66:86:f9:91:d7:7f:f5:
         69:c1:3a:3d:e0:9d:a4:da:9b:a3:57:5a:6d:e6:a1:8a:ef:fd:
         d8:d4:07:75:4d:64:c7:79:ad:37:ef:47:2c:4a:a7:02:6d:42:
         11:83:ab:ff:ae:89:f9:92:ee:40:bc:ee:46:4c:0b:be:f1:a6:
         82:ac:a8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:17:46 2026 by rpki-client