Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File:                     00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier:          feDOiTNJEa5pGFlvZ02kiqtNqAZ42UJ1tpUv/W2gElg=
Subject key identifier:   CC:F2:29:53:56:06:C3:9B:EE:A0:18:E1:00:0D:67:F0:5D:B7:CD:F0
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer:       /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial:       019FAABE69EB7F72B7C338F96B4E2E191D13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number:          1359
Signing time:             Tue 28 Jul 2026 22:00:33 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:33 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:33 +0000
Files and hashes:         1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: FQnqowMpZXxTguKpN8wBvM1lolsqdxcrz7bph5DarXo=)
                          2: 9cUez0lt6Mmw_B9XzRcaxVFdcD4.roa (hash: nOpET7s1tBcctYg3BftSbHVRYi4Bukh6zTqeOERZX48=)
                          3: KiGqqB6_C_ieZKJBT6I3N4MMdDE.roa (hash: rhV7ftUdpJwNEXvedltkn1lDN8x7VUAPfzQjlu6gj8U=)
                          4: Km329xYl0mWvscl4C7smwLfJLZM.roa (hash: y92Zjmkk3O0mYFiCM2kvamv5Zo1ZKqAX4wwIWsbkyjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:69:eb:7f:72:b7:c3:38:f9:6b:4e:2e:19:1d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
        Validity
            Not Before: Jul 28 22:00:33 2026 GMT
            Not After : Jul 29 22:00:33 2026 GMT
        Subject: CN=ccf229535606c39beea018e1000d67f05db7cdf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c6:9a:1f:fe:e2:be:0c:2c:38:7c:39:19:6c:
                    ce:29:60:e7:ce:0a:5e:ba:bb:c2:5d:08:1b:7d:7f:
                    54:85:e2:4f:8b:95:d3:16:fc:8d:ac:f5:40:e1:ef:
                    81:a4:12:72:aa:c4:97:a0:cd:5f:b6:49:66:2d:6f:
                    32:4c:8f:a8:bc:52:d3:d9:fb:76:cc:f2:b9:5b:8b:
                    44:82:5c:4a:9b:d4:cd:c5:bc:03:7f:b0:57:01:73:
                    37:aa:58:f6:86:df:90:97:ff:6d:21:d2:87:d0:f5:
                    95:ca:65:6c:f7:83:49:0e:7c:89:38:67:b1:ed:5c:
                    f4:f7:a1:3a:26:4a:11:4b:0c:db:8b:0b:97:e4:bc:
                    ff:5c:7b:2c:c2:2e:10:b2:89:ba:8f:aa:1b:c9:e4:
                    ad:6e:eb:07:f0:ad:82:59:f6:27:82:aa:e1:3e:4b:
                    36:31:26:18:0a:c1:0d:16:54:26:65:85:e6:ee:90:
                    e3:d7:50:aa:95:be:8f:f1:3e:79:11:12:d0:bf:10:
                    ce:b7:ee:1b:56:d9:09:c9:36:39:5d:e0:0c:31:e9:
                    b5:73:e5:24:b3:e2:57:48:2f:a1:0f:41:40:ea:95:
                    a9:ab:d7:3c:a1:84:ca:7e:10:e4:07:6d:c2:b1:57:
                    c5:48:00:43:69:ac:6e:be:79:13:e5:30:50:81:25:
                    23:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F2:29:53:56:06:C3:9B:EE:A0:18:E1:00:0D:67:F0:5D:B7:CD:F0
            X509v3 Authority Key Identifier:
                keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ba:86:f7:3f:13:f3:56:30:38:f2:f6:57:d6:5c:2e:1c:df:
         35:7e:e6:c5:9c:83:5f:0f:13:b6:ab:73:2f:72:81:da:13:8f:
         72:8c:ba:0b:72:35:48:ee:50:09:4b:16:24:e8:a1:a6:21:cf:
         ef:33:86:7a:55:ee:b5:47:5f:1f:a5:7d:af:11:f7:72:af:84:
         4a:ae:78:61:e1:fc:7d:46:c1:23:1a:76:86:a2:86:5f:b4:9f:
         a7:c1:e1:63:7c:da:e4:99:c4:ae:a7:7a:1d:e7:74:f0:23:b9:
         67:ab:90:61:93:a4:2a:6c:f1:da:13:1f:fe:e1:54:3e:03:a8:
         a0:e7:c3:ad:92:fd:aa:ed:20:fb:e2:18:af:3e:0e:dc:06:86:
         c9:8a:a1:fc:ef:b9:98:e5:16:1f:ef:ef:e1:38:98:1b:41:fc:
         fb:7f:35:32:9c:fb:10:20:50:ab:46:91:6b:81:60:05:2e:1c:
         23:e2:aa:5d:29:36:d0:ab:ea:07:30:db:9e:a0:22:8a:db:e5:
         75:a9:ef:6b:a7:8b:ae:59:95:26:1b:82:75:f2:1e:86:9b:c7:
         d5:8f:83:54:cb:d4:e5:5b:f7:b8:fd:60:cb:a0:8b:92:2a:6d:
         47:d4:40:7b:4f:a4:5a:74:10:97:86:66:f1:fc:d4:db:f7:a2:
         d1:64:7a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:49:07 2026 by rpki-client