Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft
File:                     Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft (raw, json)
Hash identifier:          CiIzcnN/YVA7YplzlttQQLPa08ZyZjmnaUYIVEYsblA=
Subject key identifier:   1B:6C:B8:1D:31:7A:89:4A:5B:02:B7:51:25:61:4D:5E:33:0E:C5:B3
Authority key identifier: 4A:FC:7F:0B:EA:C2:26:07:02:D0:5B:69:DD:7B:7A:3F:B2:DD:D6:9E
Certificate issuer:       /CN=4afc7f0beac2260702d05b69dd7b7a3fb2ddd69e
Certificate serial:       019D38D39B8B2B9224EF42A1B03362D559E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft
Manifest number:          0F52
Signing time:             Sun 29 Mar 2026 09:01:25 +0000
Manifest this update:     Sun 29 Mar 2026 09:01:25 +0000
Manifest next update:     Mon 30 Mar 2026 09:01:25 +0000
Files and hashes:         1: Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.crl (hash: ZZMFXRr3i1l0Ws4xdFdCiYdFStiOGtIEmQx1jSnZE3c=)
                          2: sSJsUOAlPcueTMDVf03cvkO2mBo.roa (hash: u4Tw6GiocTK5pzOnprh78w1qnCIDHoYD0rSSiCSOx1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:9b:8b:2b:92:24:ef:42:a1:b0:33:62:d5:59:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4afc7f0beac2260702d05b69dd7b7a3fb2ddd69e
        Validity
            Not Before: Mar 29 09:01:25 2026 GMT
            Not After : Mar 30 09:01:25 2026 GMT
        Subject: CN=1b6cb81d317a894a5b02b75125614d5e330ec5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3e:b2:aa:a3:3b:85:83:63:c2:f6:e9:65:d9:
                    8f:00:14:bc:40:f8:03:8f:02:84:dc:3c:25:02:89:
                    94:10:a7:f2:0a:16:ff:5e:90:25:01:48:17:93:f7:
                    db:a4:c7:7c:26:bf:7f:b3:b5:6f:71:88:73:a0:6a:
                    0d:5b:ec:ee:80:eb:ad:d4:78:c8:4d:17:57:50:c9:
                    6f:bd:db:0f:97:b4:52:96:d5:40:50:90:a0:4f:7e:
                    7c:81:50:9e:0d:59:f0:41:f1:04:1a:bc:0f:d7:dc:
                    1c:b7:e2:16:fe:d7:58:0d:6f:4c:9e:05:f1:e1:ec:
                    ba:3f:40:64:5a:e2:72:64:2a:64:e1:2a:21:04:9b:
                    fb:c3:df:49:b9:a4:83:4a:72:a1:b8:9a:3a:52:e1:
                    24:9a:66:c5:8c:c5:cd:ad:67:cb:1d:51:fa:1d:34:
                    2e:d4:3c:fb:5e:48:ab:4e:51:ca:7d:84:d6:80:69:
                    b5:3f:b1:39:e7:fe:f1:56:34:b8:20:e2:c2:52:93:
                    48:39:1d:56:d4:af:65:78:65:be:64:35:35:4e:d6:
                    a5:4d:32:52:ed:c9:52:1e:35:2f:b9:13:80:11:10:
                    77:3c:82:31:14:be:ca:fd:0a:a3:98:e0:0e:c7:20:
                    f7:91:39:77:a6:ab:ff:bc:4d:4c:11:d1:c9:fb:98:
                    ef:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6C:B8:1D:31:7A:89:4A:5B:02:B7:51:25:61:4D:5E:33:0E:C5:B3
            X509v3 Authority Key Identifier:
                keyid:4A:FC:7F:0B:EA:C2:26:07:02:D0:5B:69:DD:7B:7A:3F:B2:DD:D6:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4f406a-2981-4aaf-8b61-f4ce22ecae34/1/Svx_C-rCJgcC0Ftp3Xt6P7Ld1p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d4:01:75:8e:b6:24:cc:d9:6f:62:30:43:a9:c6:be:13:95:
         e5:b2:f5:64:d3:90:21:d0:6c:ae:3f:35:65:cc:0e:26:e5:c3:
         6b:c7:73:be:aa:e2:4c:44:53:9c:81:02:fb:cd:d3:47:1f:87:
         b9:f0:a2:65:d3:0e:57:e8:56:88:a1:d2:46:ee:2c:35:2a:93:
         04:4c:f5:a8:a8:2c:b3:1e:29:20:7a:53:66:a9:28:96:40:12:
         69:e0:cc:97:3f:7a:1c:69:74:aa:1c:99:b6:9a:54:dd:03:bf:
         e0:bb:d8:97:ac:cb:c3:0a:95:15:1c:9a:f1:c7:43:c9:a4:bb:
         cb:7c:93:84:5e:bd:1f:a9:b9:c0:8f:53:a9:86:e1:73:14:ed:
         79:cb:7c:7c:82:bf:ce:7a:b1:9b:b0:dc:99:69:a7:e0:53:93:
         f5:28:37:55:11:52:26:bd:ca:f1:b9:97:f3:97:51:1a:c6:1c:
         5e:57:57:bc:47:04:a9:6f:df:34:08:4a:fe:25:5a:47:05:ef:
         73:5d:bf:52:2e:53:a6:3c:1e:e6:4e:63:9f:bd:cf:2b:db:db:
         2c:ac:01:e4:22:c6:40:e5:1f:3e:dd:aa:73:ef:c0:6b:f2:b8:
         ce:1e:b6:7e:e0:d5:2d:9a:06:f1:12:ad:72:a8:99:2e:15:74:
         8a:e6:f3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:51 2026 by rpki-client