Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File:                     00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier:          iW+7uVUJJJ+Bz3YKesR6xGPvVd32vcrJQ+A4iW+iH20=
Subject key identifier:   4A:85:A2:C1:8D:30:05:B2:34:8D:76:91:19:7C:EA:B1:A0:4F:19:21
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer:       /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial:       019FA8D015E67B8A090C47622E71C5D12787
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number:          1358
Signing time:             Tue 28 Jul 2026 13:00:37 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:37 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:37 +0000
Files and hashes:         1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: 6EBik85EmmpQDi8BG3s4gYpLBjbUywyDgmTmjNF5hGI=)
                          2: 9cUez0lt6Mmw_B9XzRcaxVFdcD4.roa (hash: nOpET7s1tBcctYg3BftSbHVRYi4Bukh6zTqeOERZX48=)
                          3: KiGqqB6_C_ieZKJBT6I3N4MMdDE.roa (hash: rhV7ftUdpJwNEXvedltkn1lDN8x7VUAPfzQjlu6gj8U=)
                          4: Km329xYl0mWvscl4C7smwLfJLZM.roa (hash: y92Zjmkk3O0mYFiCM2kvamv5Zo1ZKqAX4wwIWsbkyjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:15:e6:7b:8a:09:0c:47:62:2e:71:c5:d1:27:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
        Validity
            Not Before: Jul 28 13:00:37 2026 GMT
            Not After : Jul 29 13:00:37 2026 GMT
        Subject: CN=4a85a2c18d3005b2348d7691197ceab1a04f1921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0b:b7:a8:3c:89:1a:3b:13:e1:18:fb:df:54:
                    38:f2:e5:93:82:d3:25:43:04:fd:85:cb:26:c9:2b:
                    79:95:8c:48:7c:3f:9c:f3:dd:87:17:b8:72:ca:99:
                    f3:84:50:ec:b8:92:9c:56:28:d4:7a:63:d7:fe:3d:
                    8b:d8:93:8d:f2:1b:7c:71:71:9f:dd:16:af:a7:e5:
                    26:a1:ca:e3:f9:25:70:b8:f4:ff:2f:aa:d9:e8:e3:
                    77:64:96:b8:da:83:c9:d3:11:9c:d7:45:79:95:a9:
                    1f:5c:17:f8:b3:bc:bb:85:c3:d8:b6:dd:69:3f:04:
                    d2:c2:6a:3c:c9:54:70:5d:80:09:a9:49:65:aa:50:
                    56:6d:78:3c:8e:55:02:3e:fd:4f:09:76:fe:4f:1d:
                    06:0c:2a:59:91:54:e8:7b:d4:01:02:3a:1b:b7:06:
                    1b:b9:16:a9:0a:44:18:ac:de:8f:1f:e0:3b:5e:6b:
                    48:38:43:0d:67:86:bc:51:d1:37:d8:fe:56:c0:be:
                    05:af:48:4a:cd:8b:99:75:31:7e:b4:20:a8:b3:a4:
                    4f:cd:89:8d:27:c0:d1:c1:42:9c:1f:6b:27:de:1d:
                    2c:10:61:35:1c:88:f1:b7:66:b6:ae:98:7f:e5:f2:
                    e6:e2:eb:f1:cc:9a:f9:8f:11:3b:1d:e2:54:fe:2d:
                    1a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:85:A2:C1:8D:30:05:B2:34:8D:76:91:19:7C:EA:B1:A0:4F:19:21
            X509v3 Authority Key Identifier:
                keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:15:d1:c5:cf:eb:1f:bb:82:b4:18:bf:aa:f1:c0:0b:82:ba:
         a8:d8:44:4d:35:2c:bf:9f:ad:3e:48:4c:25:dd:61:57:1e:ee:
         9c:58:5c:e4:bb:8a:e5:fd:bf:43:b0:79:4f:0f:e4:91:3b:3b:
         44:1b:7f:6d:8d:b1:af:37:15:37:db:3d:de:b9:de:89:66:10:
         74:47:e3:1a:5b:92:e6:7a:4a:81:13:2f:6f:3d:21:0d:23:6b:
         44:cf:b3:39:6e:49:26:67:67:69:5d:f3:ce:27:90:a1:d9:66:
         7f:89:76:14:ad:b4:39:3c:90:8d:7b:c5:a4:96:d0:60:23:21:
         e1:9d:c8:b1:f0:73:52:c6:0f:d3:66:6b:f5:f8:99:69:64:15:
         de:4c:74:39:50:5f:ae:82:c2:89:d1:10:b1:81:d8:c4:fe:7c:
         1e:b6:62:21:f5:4e:a6:93:80:e7:5a:ea:8c:ae:07:99:27:55:
         61:31:1f:a9:8c:dc:7a:18:b5:a2:5d:49:51:6a:6f:0b:93:85:
         4b:a4:61:e1:d2:79:f1:58:de:73:cb:da:59:52:97:29:a3:bc:
         df:7e:e5:65:25:fa:d5:a2:8d:28:3d:d3:0c:9d:cd:75:6e:8e:
         a0:ce:ea:2c:39:36:ef:7c:70:d8:84:6d:93:53:38:7d:03:51:
         6e:3a:a9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:23:39 2026 by rpki-client