Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File:                     00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier:          4t/3VdI9zdhdfH5R1k3hoDFzb3AoKaitpcEWTx9sFOE=
Subject key identifier:   4E:C0:F4:48:ED:0C:44:71:13:10:C7:BE:FE:5F:97:C3:0D:9B:97:67
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer:       /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial:       019D65749E8F752A1A3C036ED277E385622A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number:          122C
Signing time:             Tue 07 Apr 2026 01:00:34 +0000
Manifest this update:     Tue 07 Apr 2026 01:00:34 +0000
Manifest next update:     Wed 08 Apr 2026 01:00:34 +0000
Files and hashes:         1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: 552vg0CuoAsQ6hOi4LLw/p1DW2kFbKUD/8prM+vUnkE=)
                          2: 9cUez0lt6Mmw_B9XzRcaxVFdcD4.roa (hash: nOpET7s1tBcctYg3BftSbHVRYi4Bukh6zTqeOERZX48=)
                          3: KiGqqB6_C_ieZKJBT6I3N4MMdDE.roa (hash: rhV7ftUdpJwNEXvedltkn1lDN8x7VUAPfzQjlu6gj8U=)
                          4: Km329xYl0mWvscl4C7smwLfJLZM.roa (hash: y92Zjmkk3O0mYFiCM2kvamv5Zo1ZKqAX4wwIWsbkyjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Apr 2026 01:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:65:74:9e:8f:75:2a:1a:3c:03:6e:d2:77:e3:85:62:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
        Validity
            Not Before: Apr  7 01:00:34 2026 GMT
            Not After : Apr  8 01:00:34 2026 GMT
        Subject: CN=4ec0f448ed0c44711310c7befe5f97c30d9b9767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:de:40:e7:76:27:b5:fd:a5:d9:2c:24:e7:
                    52:67:38:96:2c:e3:3b:fd:bb:13:89:4f:b0:ad:b8:
                    db:2f:3a:25:f0:43:1c:d4:50:34:98:74:06:8b:8b:
                    91:7f:92:18:ee:4c:1e:a0:7f:a6:dd:7c:11:f0:a5:
                    1d:0e:88:d8:7f:12:cb:07:c7:d6:1b:3f:7a:a2:b6:
                    d9:a9:7b:16:a4:ac:70:17:62:44:55:99:c0:69:18:
                    34:55:cb:b0:b8:4f:cc:8e:71:e1:93:fc:76:eb:6a:
                    2a:93:99:fa:ff:2a:7c:d1:8c:5e:47:1a:20:66:61:
                    5e:3b:89:8a:c9:47:22:01:66:26:f4:6d:d0:aa:fa:
                    ce:28:f5:0c:00:66:3d:e3:dc:31:ec:59:0c:06:22:
                    96:2a:ae:9f:2f:81:1b:fe:5b:09:2b:5f:df:8e:a8:
                    92:48:36:c9:f4:47:04:33:67:f4:30:7c:b3:c5:c9:
                    a4:39:34:00:25:10:c0:a3:83:0a:1e:55:cc:2b:4f:
                    fd:db:70:3a:2e:e4:be:25:cc:2f:3c:5b:f3:6e:97:
                    b0:40:33:52:8e:bb:6d:80:f9:b8:74:d6:7a:d9:1c:
                    f6:bb:3d:21:07:0a:23:d3:ee:80:27:aa:ad:43:9c:
                    64:68:03:69:ec:7c:55:e0:11:e2:1b:f2:3c:a5:ed:
                    c9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C0:F4:48:ED:0C:44:71:13:10:C7:BE:FE:5F:97:C3:0D:9B:97:67
            X509v3 Authority Key Identifier:
                keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:35:26:71:7e:8c:95:e1:4b:81:53:6f:a2:2a:b5:16:0a:f6:
         e3:66:0f:7b:9d:a8:98:1f:25:ca:10:70:a7:9d:8b:67:ef:3d:
         cf:25:1c:95:92:38:6d:61:82:b7:0d:0b:75:4f:d7:8b:1a:2d:
         05:a6:8d:05:05:f6:33:3e:11:05:64:06:1f:4a:03:6b:3b:05:
         cc:97:d0:8e:f5:51:73:37:75:2a:29:f7:6f:2a:64:d4:23:26:
         ba:e4:23:76:14:2c:4a:f1:39:a9:d4:21:05:31:9a:89:bd:8e:
         4d:53:94:8e:a4:4a:82:00:1d:d4:ae:a0:73:29:d9:7b:49:06:
         08:42:15:41:33:23:ac:b3:1b:07:85:d8:d1:13:2d:84:f7:a1:
         6b:f7:0c:0d:81:80:b8:63:b7:e9:81:c2:f4:40:82:06:b7:b3:
         8e:e4:59:ea:3f:01:7a:91:65:0f:53:d1:9e:25:26:b6:d8:78:
         d2:b5:c0:60:13:e8:09:49:df:6f:bd:72:c3:e6:b9:5a:aa:e8:
         c0:03:82:8a:21:c6:85:c5:21:b7:df:c7:2a:f3:d7:11:56:60:
         d5:4d:52:44:62:75:18:66:13:fe:25:5b:f2:b5:1e:4b:28:b5:
         5f:21:a6:9c:b0:3e:0c:8d:c1:d2:99:29:0e:f0:c5:cb:94:f0:
         c6:d2:7d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:08:17 2026 by rpki-client