Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
File:                     13yGmob-yDN5Pu7azNSx98pEM-k.mft (raw, json)
Hash identifier:          TlArBk/jfSTeugV0x4r7qwO5EM4NV1BXZr+SqwPBac8=
Subject key identifier:   A3:06:6D:E0:AF:CA:5D:C7:52:A0:C7:46:B5:89:89:72:E8:6E:79:4A
Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
Certificate issuer:       /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Certificate serial:       01A0D727A7E533B6F634AB960554160522A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
Manifest number:          1856
Signing time:             Fri 25 Sep 2026 06:01:35 +0000
Manifest this update:     Fri 25 Sep 2026 06:01:35 +0000
Manifest next update:     Sat 26 Sep 2026 06:01:35 +0000
Files and hashes:         1: 13yGmob-yDN5Pu7azNSx98pEM-k.crl (hash: IBMsKmmVp5Qvq63NtxyUq43Nxd/OIf+bhUnMny0pz5Y=)
                          2: H3UZwuAp9rSpSKUa2W4mA_Q1udI.roa (hash: 1AEX5MF9asrj6WNrnWzO3bQ5bregGi6ctVtR6cHklb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:27:a7:e5:33:b6:f6:34:ab:96:05:54:16:05:22:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
        Validity
            Not Before: Sep 25 06:01:35 2026 GMT
            Not After : Sep 26 06:01:35 2026 GMT
        Subject: CN=a3066de0afca5dc752a0c746b5898972e86e794a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:eb:dc:b0:c2:88:1d:43:f0:3e:c0:56:a6:2b:
                    e9:0e:20:9f:3b:c0:94:df:32:66:5a:a8:be:7d:6f:
                    10:0d:5e:a6:f6:61:75:79:ce:67:f4:68:db:a0:21:
                    3c:65:f7:9f:a0:c4:59:82:7f:27:fb:9a:78:e1:27:
                    6f:51:5e:e8:4c:28:6e:b8:1c:74:94:fb:58:7e:05:
                    bd:95:7d:0f:ee:d4:5a:42:7b:57:f8:ec:f0:34:6d:
                    0c:2c:b4:81:c3:68:a8:b5:33:f1:2b:db:0e:78:3b:
                    4b:77:27:af:0b:c4:b8:3a:69:55:39:93:e8:da:b8:
                    9f:81:c8:f3:c4:55:e2:80:7e:5f:70:6f:76:b1:6a:
                    7a:d3:66:e1:22:ac:0a:54:3c:a6:b9:3f:4e:b4:62:
                    61:6c:a2:cd:ec:7f:63:55:79:0c:82:e8:be:d5:d5:
                    8c:e4:f3:ba:3b:08:d4:dc:96:cc:87:c0:6f:54:12:
                    74:72:5b:bb:8c:62:91:b6:d3:26:0a:fc:be:33:fa:
                    5b:64:54:97:6a:86:f3:30:1a:f6:92:d5:98:d7:b9:
                    ad:06:1d:4c:6e:b8:75:8c:26:7b:a7:4f:92:9a:ad:
                    e8:2b:ee:cd:06:64:7e:de:04:65:f7:6c:de:e3:da:
                    3c:3f:59:a1:00:a3:82:bf:01:e9:7a:13:ad:78:07:
                    7d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:06:6D:E0:AF:CA:5D:C7:52:A0:C7:46:B5:89:89:72:E8:6E:79:4A
            X509v3 Authority Key Identifier:
                keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e3:6b:d0:fc:3e:11:60:be:ad:ff:99:54:b6:66:36:08:04:
         66:56:7f:85:b1:20:73:47:25:53:37:e5:05:3d:59:dd:ae:91:
         16:3c:e6:8e:1f:6a:b6:a6:16:6a:c7:29:9a:9b:f7:f1:d8:8c:
         d9:4d:55:a8:9d:64:6f:8f:e8:e2:b1:5a:68:5d:55:34:9b:8c:
         7b:8d:57:cd:42:3c:9c:2d:ed:bd:66:8a:c8:82:7f:7a:e1:cb:
         f9:44:68:ff:37:52:4e:0b:79:ab:b6:4a:b1:d8:2c:c5:a8:36:
         f8:20:3f:45:5f:79:5b:49:12:4f:d7:5a:a1:5e:8e:2c:70:9f:
         1c:9c:76:ca:ce:c4:cd:a0:39:9e:29:e2:42:27:bf:1e:5b:b0:
         a0:a6:4c:39:72:63:a7:e5:45:6a:84:28:3e:2a:bb:97:38:a9:
         bf:30:ce:21:b5:19:41:1c:26:56:48:22:af:3c:08:aa:f5:4f:
         71:38:c6:10:e3:d4:f0:18:eb:f2:4f:de:9f:9b:a6:49:ca:b3:
         f9:88:1e:17:a1:90:08:8c:c6:9e:93:a7:0d:83:24:59:34:2b:
         50:11:b3:29:bf:99:d1:30:a3:86:55:4e:ec:c0:58:10:27:9a:
         82:d6:97:a2:ef:e0:80:4c:cd:98:c4:9f:2f:ec:94:62:39:e6:
         8c:56:81:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:17:04 2026 by rpki-client