Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          aUFlZBeL6bn/CgKSV/0P9VIaqAIj8jddSM9BCygFJ5g=
Subject key identifier:   AF:E9:E7:B7:B4:AB:A4:D1:29:B1:FB:58:6D:76:E8:F9:D1:C2:36:25
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019A288BC0124023EE659A72D7DFAACF7D11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          1738
Signing time:             Tue 28 Oct 2025 02:00:38 +0000
Manifest this update:     Tue 28 Oct 2025 02:00:38 +0000
Manifest next update:     Wed 29 Oct 2025 02:00:38 +0000
Files and hashes:         1: 1k1uJi06zFolDKDkLKKvi35k2JM.roa (hash: FlOoYo71s858Sv6ZMqYB1AYn8xpWhGfgkv8prIUZt1k=)
                          2: 3NU_jczsTwLqoaX-lCYDIDK-xK4.roa (hash: 8Hfke+9D8re50lqI3eIcpPcn6OSj6q+EHma6Ds52QuY=)
                          3: 6EzBdLMFhAHXtGoqOgo2hhkKxsE.roa (hash: 6BZyqWO3dBV2T/D/HQLLEXL8wtnsNJxMwYYKl/DQzgM=)
                          4: 6ef47TXoBdfjKnlsNsow8DBixKo.roa (hash: CJVWo8/zfulxwmsfO0I8Hpt8eJudz4hqVHD23gptH10=)
                          5: G9CfAyu7MWqdi5h61nGlF_fsunQ.roa (hash: 30zImJCQoB34kk0fHQV5AKxerW3IST7q3OGUva75Wu0=)
                          6: GiScTXLFDlSkFEEGri5P1vz6Sho.roa (hash: uMhctxLibeY+IpaWynfmNEbttAIjD24+B1IvRH31TQ8=)
                          7: KbQ--oBtSgvSfZVrBwQ6M553Hwk.roa (hash: NJgK04btjY64hOecbKh54mIt3v+Yqupp2O5zCZPtgv0=)
                          8: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: EPpRouj75+gJcxX/RzyLF1GqAj88i3fn9TWE20u+xsw=)
                          9: Oi1LQnm4lsa7_1hR1J20jJ6vxNI.roa (hash: SY2CzV8LXx9B2pkUZksUiYNXDfeS5dNBeKSh1IfycAI=)
                          10: nb4wfQ7FzEgUQNDsTQT1rI6C1P0.roa (hash: XbtW2pGYp04EBEIcviRAYkU8I+ewGGN4xhpRClBs10Q=)
                          11: pZHCAjsk0quEKKapLoBOB8SLyYU.roa (hash: PkFYd+Uy2SwEBC/xRtpP2pJp1/vhJ01S2mfX0UJzqmk=)
                          12: zo7mxq2v2o0aNKJKvVs8XzMAoSo.roa (hash: hDK25txovgb427j58Xr748zftbcgjP77JZ1VaXHts3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:28:8b:c0:12:40:23:ee:65:9a:72:d7:df:aa:cf:7d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Oct 28 02:00:38 2025 GMT
            Not After : Oct 29 02:00:38 2025 GMT
        Subject: CN=afe9e7b7b4aba4d129b1fb586d76e8f9d1c23625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d9:e3:64:e9:9e:32:80:68:7e:e1:46:e4:81:
                    a1:60:0b:7a:7c:9b:af:31:59:67:e0:4a:25:bd:35:
                    89:7e:97:18:b4:40:4a:33:75:d1:ae:0b:7d:0b:2a:
                    5c:20:0d:62:98:e7:85:14:7b:bf:d9:85:d5:e9:4d:
                    d0:56:94:b1:26:6c:74:b3:d0:67:2b:81:89:71:eb:
                    4b:03:6f:88:17:b2:e9:d0:8e:38:ac:b5:3d:fe:5c:
                    57:9c:02:be:5a:06:bd:88:a2:5b:4e:bb:fc:50:25:
                    0e:4a:e7:39:53:77:ce:ac:e8:e7:2f:18:a8:9b:1c:
                    e2:ef:e7:0d:7c:3f:cb:6a:e7:70:7b:4c:f1:67:6b:
                    a6:cb:19:72:ad:cf:d4:05:80:4d:5e:d8:80:ee:5e:
                    d6:49:a8:a2:99:72:7b:6a:e3:55:99:c1:7d:bb:2b:
                    ce:82:bd:20:16:bd:68:aa:88:43:7e:01:58:a5:c8:
                    73:cc:95:9f:58:f8:84:b5:3b:fc:57:73:24:9b:e0:
                    a6:35:57:7f:cb:2c:2f:5b:cf:26:5f:f7:73:25:3e:
                    dc:23:26:93:41:01:4e:9a:18:e4:c0:d6:e1:4a:63:
                    82:92:2c:92:b5:b3:93:89:7f:be:9c:eb:1f:18:5d:
                    a8:82:6d:4b:ed:96:43:87:ee:f3:f1:ff:af:03:6b:
                    3b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E9:E7:B7:B4:AB:A4:D1:29:B1:FB:58:6D:76:E8:F9:D1:C2:36:25
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:de:c6:3c:09:92:b6:5a:73:15:c5:10:83:a4:18:36:d7:4c:
         2e:05:ba:2c:56:0f:3e:be:11:3e:d7:fd:6e:0a:db:79:63:1e:
         13:aa:ad:86:67:29:38:f0:e2:7c:ab:03:98:02:2f:65:a7:c2:
         5c:27:5d:d9:7f:86:f8:be:49:74:70:f0:a9:64:78:af:62:b1:
         23:c5:9e:08:c2:5a:c1:38:2a:c2:dd:db:75:5a:8f:c6:5f:ea:
         ce:f5:53:c7:bd:4a:21:7f:d7:af:7d:53:ab:ad:12:4e:d2:25:
         2b:54:f0:38:52:fd:5c:4d:4a:60:aa:9a:d7:e8:a6:f3:9e:67:
         e7:6a:54:37:e7:72:70:28:19:8c:8d:71:c5:4f:6d:c7:eb:55:
         03:20:f7:72:63:06:9a:93:7b:5e:4d:3c:e2:ad:d8:6a:4f:32:
         6a:e2:5a:0c:e1:31:d9:16:87:36:68:0f:2b:3e:7d:84:a7:5a:
         f2:e4:1f:49:e0:db:d8:ef:94:2a:53:29:68:8a:a7:4d:dd:db:
         16:bc:3a:cd:f1:ce:20:51:68:4d:1c:b4:ef:b5:64:ac:19:15:
         cf:cf:05:bb:d3:48:34:54:fd:c7:f4:7c:ee:2c:42:ca:0c:b3:
         24:f7:6a:f3:6e:b1:e5:bd:cb:c8:32:8e:8b:c7:42:d3:91:57:
         72:6b:c1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:34:04 2025 by rpki-client