Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File:                     00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier:          e58pvdAljv1SQAzSHvoN90MQ9SdUVOnA9rZLb///M/I=
Subject key identifier:   08:D2:0D:31:08:AA:81:C8:44:1A:01:10:F8:64:91:D5:9A:56:80:75
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer:       /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial:       019F91A44DFDD118692FAA10DF7725DDF2B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number:          134C
Signing time:             Fri 24 Jul 2026 01:01:31 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:31 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:31 +0000
Files and hashes:         1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: ow1jZoKFJKkOKkJXjDXOIs4PD8eV/I7+RJYzI1OM+60=)
                          2: 9cUez0lt6Mmw_B9XzRcaxVFdcD4.roa (hash: nOpET7s1tBcctYg3BftSbHVRYi4Bukh6zTqeOERZX48=)
                          3: KiGqqB6_C_ieZKJBT6I3N4MMdDE.roa (hash: rhV7ftUdpJwNEXvedltkn1lDN8x7VUAPfzQjlu6gj8U=)
                          4: Km329xYl0mWvscl4C7smwLfJLZM.roa (hash: y92Zjmkk3O0mYFiCM2kvamv5Zo1ZKqAX4wwIWsbkyjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:4d:fd:d1:18:69:2f:aa:10:df:77:25:dd:f2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
        Validity
            Not Before: Jul 24 01:01:31 2026 GMT
            Not After : Jul 25 01:01:31 2026 GMT
        Subject: CN=08d20d3108aa81c8441a0110f86491d59a568075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:50:7a:72:ec:53:e1:bb:d6:b3:89:23:78:
                    e0:9e:21:57:e0:62:d7:00:b9:2a:78:09:f4:0e:73:
                    1d:20:48:da:87:b2:33:7d:36:f0:ea:88:7a:8f:37:
                    51:0b:32:da:9e:8b:7b:1e:d1:1e:1c:cd:9b:20:ee:
                    f3:0f:ec:f3:0c:e4:99:34:6a:58:fa:78:ee:82:01:
                    4d:56:6e:8d:c5:db:cb:62:e0:4b:60:0b:e6:70:f8:
                    5f:55:5b:72:70:dc:c7:67:23:89:15:4f:13:1a:6e:
                    7d:ff:f1:14:9b:89:14:00:8f:33:7f:6c:39:0e:66:
                    f6:7f:0b:75:37:6d:ec:8a:81:bb:6f:70:e4:54:b8:
                    c5:5b:0b:44:37:30:80:29:d1:54:02:10:59:b8:0c:
                    2f:3c:08:da:86:11:69:9d:fe:1b:8a:79:d5:64:51:
                    76:e8:61:c4:a9:af:23:f5:4e:05:e0:6f:5a:6a:d4:
                    29:2d:92:6a:43:c9:15:38:f7:c0:8a:37:19:0e:5c:
                    77:5f:48:11:db:69:d8:71:ab:79:b7:b3:8a:e3:09:
                    47:9f:97:70:96:25:5e:2b:df:d8:6d:30:22:9a:ae:
                    f1:ee:46:9b:c9:57:dd:2b:e6:ad:59:48:d8:70:a6:
                    e8:6c:64:c8:77:2d:a3:ab:38:73:21:20:d8:df:9f:
                    e4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D2:0D:31:08:AA:81:C8:44:1A:01:10:F8:64:91:D5:9A:56:80:75
            X509v3 Authority Key Identifier:
                keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:58:04:31:07:4c:7a:31:f5:e8:2e:b2:21:3d:33:b7:08:49:
         95:79:5f:f5:d7:00:3c:21:3e:8c:de:50:07:16:b8:d1:9e:3d:
         47:99:68:e2:45:5e:1c:e8:7e:ce:25:f6:c5:d4:dc:bc:62:4d:
         61:f6:00:dc:19:0a:1b:6b:dd:15:f7:8d:5b:dc:fa:69:4d:63:
         dc:03:c2:5f:86:df:2b:27:8b:57:7c:cc:06:d0:32:e5:64:75:
         c8:83:dd:22:ac:f4:d4:42:8b:06:7e:32:60:38:31:4e:9c:c1:
         21:c9:83:82:d0:41:29:9a:d7:30:93:66:90:68:0a:19:f9:56:
         90:7b:36:7c:2b:33:8d:2f:ee:54:e4:da:db:0c:3f:4a:ac:6c:
         31:be:32:d6:2e:6f:fb:de:8c:e8:ff:97:0a:dd:fd:53:fa:a6:
         67:2f:18:54:29:a2:92:12:04:ea:bc:dd:50:ec:9d:a5:8f:24:
         35:6f:dd:35:61:1f:fa:f7:0b:dc:71:bd:f4:1f:29:98:98:d6:
         0c:0a:23:ce:0c:d5:7f:d4:c8:e7:fd:41:ff:12:f6:e6:84:7f:
         20:67:dd:df:03:69:89:05:db:ce:3c:ed:9a:3e:8b:14:4a:00:
         99:9d:c9:6e:fc:10:0b:e1:e3:1a:c9:e7:49:d0:53:ce:5a:37:
         5c:74:89:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RpE390RhpL6oQ33cl3fK4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNGZhNmJlM2Y1YzM4ZjRiYjdlMDYyYjY3MDc3NDdmNDk2
MWEwNDgwHhcNMjYwNzI0MDEwMTMxWhcNMjYwNzI1MDEwMTMxWjAzMTEwLwYDVQQD
EygwOGQyMGQzMTA4YWE4MWM4NDQxYTAxMTBmODY0OTFkNTlhNTY4MDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJRQenLsU+G71rOJI3jgniFX4GLX
ALkqeAn0DnMdIEjah7IzfTbw6oh6jzdRCzLanot7HtEeHM2bIO7zD+zzDOSZNGpY
+njuggFNVm6NxdvLYuBLYAvmcPhfVVtycNzHZyOJFU8TGm59//EUm4kUAI8zf2w5
Dmb2fwt1N23sioG7b3DkVLjFWwtENzCAKdFUAhBZuAwvPAjahhFpnf4binnVZFF2
6GHEqa8j9U4F4G9aatQpLZJqQ8kVOPfAijcZDlx3X0gR22nYcat5t7OK4wlHn5dw
liVeK9/YbTAimq7x7kabyVfdK+atWUjYcKbobGTIdy2jqzhzISDY35/kSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjSDTEIqoHIRBoBEPhkkdWaVoB1MB8GA1UdIwQY
MBaAFNNPpr4/XDj0u34GK2cHdH9JYaBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEt
OTgxMTg0ZGVlMTMxLzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEtOTgxMTg0ZGVlMTMx
LzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFgEMQdM
ejH16C6yIT0ztwhJlXlf9dcAPCE+jN5QBxa40Z49R5lo4kVeHOh+ziX2xdTcvGJN
YfYA3BkKG2vdFfeNW9z6aU1j3APCX4bfKyeLV3zMBtAy5WR1yIPdIqz01EKLBn4y
YDgxTpzBIcmDgtBBKZrXMJNmkGgKGflWkHs2fCszjS/uVOTa2ww/SqxsMb4y1i5v
+96M6P+XCt39U/qmZy8YVCmikhIE6rzdUOydpY8kNW/dNWEf+vcL3HG99B8pmJjW
DAojzgzVf9TI5/1B/xL25oR/IGfd3wNpiQXbzjztmj6LFEoAmZ3JbvwQC+HjGsnn
SdBTzlo3XHSJfw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:59:03 2026 by rpki-client