Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File:                     00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier:          +AI3Awb3LhLF9ynPlbFzccgfLo5t1E9GFhllZEXhctA=
Subject key identifier:   61:F3:DF:13:1E:AF:69:B3:F3:23:B4:88:0E:70:57:8D:E0:4E:41:A7
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer:       /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial:       01A0C88F6E08CB9390185D887795C734D880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number:          13ED
Signing time:             Tue 22 Sep 2026 10:00:37 +0000
Manifest this update:     Tue 22 Sep 2026 10:00:37 +0000
Manifest next update:     Wed 23 Sep 2026 10:00:37 +0000
Files and hashes:         1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: YWwT5OquvxARZx10ukKqhnBDSYvDh/uPdVkAfNFWfmc=)
                          2: 9cUez0lt6Mmw_B9XzRcaxVFdcD4.roa (hash: nOpET7s1tBcctYg3BftSbHVRYi4Bukh6zTqeOERZX48=)
                          3: KiGqqB6_C_ieZKJBT6I3N4MMdDE.roa (hash: rhV7ftUdpJwNEXvedltkn1lDN8x7VUAPfzQjlu6gj8U=)
                          4: Km329xYl0mWvscl4C7smwLfJLZM.roa (hash: y92Zjmkk3O0mYFiCM2kvamv5Zo1ZKqAX4wwIWsbkyjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 10:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:8f:6e:08:cb:93:90:18:5d:88:77:95:c7:34:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
        Validity
            Not Before: Sep 22 10:00:37 2026 GMT
            Not After : Sep 23 10:00:37 2026 GMT
        Subject: CN=61f3df131eaf69b3f323b4880e70578de04e41a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f9:6d:d6:5e:3a:d4:bd:22:2e:f7:a0:67:e4:
                    e0:32:4e:91:49:7b:68:c1:3f:85:64:8a:9a:42:8b:
                    28:79:f1:b3:95:d4:0e:87:0e:7b:52:8b:55:d5:4a:
                    03:15:b9:f6:3a:a1:57:bd:33:78:c0:f0:26:65:e3:
                    30:67:26:6d:51:8c:c8:03:80:41:ad:83:8a:e0:e3:
                    72:13:42:23:55:71:b8:9a:59:d2:ac:5c:7a:cf:03:
                    2e:48:e4:d2:47:84:20:a2:76:96:e0:88:6e:a7:eb:
                    1d:57:83:dd:d1:38:b2:30:8a:f5:f2:30:4b:42:4c:
                    5f:ae:dd:f0:f8:08:40:ad:1d:76:c5:1c:9c:9f:bd:
                    b2:50:8d:64:72:be:a7:da:0c:28:75:23:0f:7b:a5:
                    a8:7e:b1:09:84:bd:ea:7a:9f:5a:0d:5b:92:76:17:
                    8b:1c:6a:3e:40:2d:7e:80:a8:da:c9:69:4d:14:f4:
                    c2:6d:5c:39:aa:53:c3:8a:0c:de:73:41:c1:5e:80:
                    fe:6e:0b:9e:a5:11:d8:74:aa:a3:da:06:80:6b:18:
                    72:ac:83:0c:fb:f5:71:27:fd:d2:40:63:f4:f4:dc:
                    8f:cf:e1:5f:a0:ff:e4:e5:1c:e3:db:30:b8:18:76:
                    ff:52:fe:31:02:0d:43:4a:25:5f:c6:3e:8a:5b:62:
                    74:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F3:DF:13:1E:AF:69:B3:F3:23:B4:88:0E:70:57:8D:E0:4E:41:A7
            X509v3 Authority Key Identifier:
                keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:69:6f:2a:7e:06:f7:f0:ad:73:91:e2:63:08:5b:5f:20:91:
         bd:33:96:0b:11:2b:11:a1:85:22:cb:06:e5:8d:db:f2:f5:7c:
         1d:92:16:92:a4:00:a6:dd:d8:2d:06:56:69:38:de:55:53:16:
         f0:90:12:51:13:52:59:31:15:fe:01:87:ef:0e:ec:5c:f7:dd:
         33:50:e7:2e:69:30:61:eb:e5:7a:d8:28:71:97:1c:92:80:af:
         b1:e4:80:54:5f:db:71:42:68:da:6f:73:49:13:81:16:18:8a:
         fc:96:6e:18:d7:a6:a1:8b:85:6b:ef:5b:00:2d:5a:6e:5e:97:
         8e:4d:6a:c3:41:64:8d:84:1d:c0:87:b0:cf:f9:e5:20:fa:89:
         0a:e4:0e:09:b6:4f:1e:1e:be:60:9d:29:38:72:4c:46:72:5a:
         b1:e8:11:5f:37:7a:88:fa:fb:5a:3d:ff:dc:07:6e:8c:44:07:
         40:17:4a:77:24:41:ce:77:f3:bc:87:55:c5:03:b4:8b:f3:ea:
         e4:94:8c:f2:ec:41:d7:fd:18:7e:99:fc:99:ae:4f:df:f6:e4:
         05:71:d9:d9:68:83:b7:40:a0:7f:93:07:b2:a2:fe:7e:59:d4:
         ef:e6:4f:20:db:9d:53:c8:f2:4a:ce:9c:3e:ec:18:fb:09:29:
         da:a2:c6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:41:32 2026 by rpki-client