Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File:                     00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier:          Zrx9FoA0updEsL7Db+CGnjd3VNq3CAchdMrE7+cDyqM=
Subject key identifier:   FC:42:9B:10:31:34:7F:98:0A:BB:6D:E8:6A:CE:05:71:3E:C7:34:A4
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer:       /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial:       019D6762FD958C603DBEF3DDB1D4F39AACE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number:          122D
Signing time:             Tue 07 Apr 2026 10:00:33 +0000
Manifest this update:     Tue 07 Apr 2026 10:00:33 +0000
Manifest next update:     Wed 08 Apr 2026 10:00:33 +0000
Files and hashes:         1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: Y4YStVGULeahoAtwdwJilLnyNyDzJNQZyZB8X5taYDQ=)
                          2: 9cUez0lt6Mmw_B9XzRcaxVFdcD4.roa (hash: nOpET7s1tBcctYg3BftSbHVRYi4Bukh6zTqeOERZX48=)
                          3: KiGqqB6_C_ieZKJBT6I3N4MMdDE.roa (hash: rhV7ftUdpJwNEXvedltkn1lDN8x7VUAPfzQjlu6gj8U=)
                          4: Km329xYl0mWvscl4C7smwLfJLZM.roa (hash: y92Zjmkk3O0mYFiCM2kvamv5Zo1ZKqAX4wwIWsbkyjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Apr 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:67:62:fd:95:8c:60:3d:be:f3:dd:b1:d4:f3:9a:ac:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
        Validity
            Not Before: Apr  7 10:00:33 2026 GMT
            Not After : Apr  8 10:00:33 2026 GMT
        Subject: CN=fc429b1031347f980abb6de86ace05713ec734a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f6:1d:70:48:5d:52:5c:d3:60:0a:69:a4:9a:
                    cb:84:9f:e9:38:14:7a:bb:6c:a7:1b:74:4e:fa:ce:
                    d3:58:b3:28:f1:c7:d4:c0:9c:fd:dc:43:73:3c:ef:
                    9b:92:e3:04:c1:b9:bd:f2:13:96:ea:7d:e8:e8:06:
                    c8:c7:f2:9c:87:da:6b:49:72:ad:9e:da:60:e5:cd:
                    6b:62:f9:fd:76:12:2b:0b:15:23:de:81:ac:3c:2e:
                    88:c9:94:23:7f:26:d7:73:3b:65:fd:99:02:3d:ba:
                    91:6d:52:54:cd:a5:fc:dc:2a:b1:51:3c:cd:59:e9:
                    74:f4:23:68:bb:cd:97:a7:94:67:98:d4:b2:90:7b:
                    14:f0:71:e0:a9:f4:2c:c7:23:1a:b9:77:61:e9:b7:
                    76:75:c8:65:d0:bf:63:f9:fc:df:40:ec:bf:a8:6d:
                    a3:37:f1:88:55:6b:83:a1:8e:5c:d5:c5:a9:c1:08:
                    2b:e6:cf:4a:44:c5:d4:a6:b3:b3:d2:79:91:02:cd:
                    4b:36:3a:3d:c3:1b:94:63:9b:90:cf:e0:17:46:c2:
                    eb:02:4c:35:d7:6a:88:88:e5:05:24:59:03:38:b6:
                    e2:8a:68:77:72:df:d8:b3:68:3a:6c:d9:a2:ae:7e:
                    8c:57:b3:7d:89:a7:eb:04:a4:a5:8a:39:a3:c1:c9:
                    54:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:42:9B:10:31:34:7F:98:0A:BB:6D:E8:6A:CE:05:71:3E:C7:34:A4
            X509v3 Authority Key Identifier:
                keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f9:17:e9:2b:c1:3b:46:b6:61:1d:a4:4e:8d:6a:79:4a:02:
         91:4b:fa:8f:3e:91:e9:2d:c7:da:8d:b4:d5:ba:d7:6c:42:68:
         b9:ff:e8:53:65:2b:45:4e:51:ef:ae:d5:63:3e:78:2d:3f:46:
         e7:6e:3d:bb:19:ac:7c:bd:80:a3:a5:46:05:2d:85:2a:49:78:
         d3:53:3c:af:63:48:12:40:92:46:7d:4d:ed:3d:42:be:7f:33:
         73:1c:02:f3:b9:75:3c:fc:8e:61:9c:67:b5:2b:71:12:38:47:
         b6:5e:15:16:ab:ad:8b:b9:be:28:54:52:64:a8:5d:17:3c:af:
         2f:23:6b:ac:29:72:c6:78:f7:3e:6e:f0:1c:c3:25:c8:05:e4:
         34:8a:2e:32:62:38:2b:13:5d:e6:8a:ea:50:d2:b8:46:b2:2c:
         21:c3:e4:9f:ec:2e:79:63:70:d5:c0:3c:67:01:d2:26:07:c7:
         ec:bc:a0:93:50:3b:7b:d5:d9:da:f2:70:29:6b:74:3d:80:ea:
         13:1d:92:a4:af:94:51:a9:25:3d:f3:bd:c8:30:c8:8c:1b:6b:
         61:c1:1d:fa:26:2d:a9:9d:e7:14:37:c9:c9:6e:38:f6:35:ba:
         0e:16:02:ce:57:b8:5e:ea:12:03:96:2e:2b:03:bc:c6:af:4b:
         0a:c7:1b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:31:18 2026 by rpki-client