Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File:                     AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier:          SEqRcE1gD4boBCGFx5hZPR8lnutDQhkzIWEbjaa1r8k=
Subject key identifier:   BE:66:46:8B:82:70:D0:5E:E8:1B:4B:50:60:06:F9:B0:43:E3:6E:3A
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer:       /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial:       019F8F10045D0F9AF779D26383ED8E09C69A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number:          13BD
Signing time:             Thu 23 Jul 2026 13:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:19 +0000
Files and hashes:         1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: t1mmn5oGJuGFnKGJJ6Kh5SlaaUMzFrK7LcJbbChzS/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:04:5d:0f:9a:f7:79:d2:63:83:ed:8e:09:c6:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
        Validity
            Not Before: Jul 23 13:00:19 2026 GMT
            Not After : Jul 24 13:00:19 2026 GMT
        Subject: CN=be66468b8270d05ee81b4b506006f9b043e36e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:3c:20:31:4a:28:1a:0d:3b:e4:db:c0:02:
                    dc:13:e2:10:c0:03:38:04:54:cd:b2:32:1d:99:56:
                    d7:76:09:89:07:b3:1d:61:82:70:c8:67:d5:04:95:
                    76:ae:3c:a6:9c:18:81:09:a8:9c:56:b4:6b:21:40:
                    a3:c8:d1:de:2b:33:7a:e4:38:52:b0:3a:f1:00:5c:
                    fc:fe:d5:6b:e6:ff:3b:ba:52:c4:c4:4f:0a:4a:4c:
                    1c:63:9e:ac:5f:b9:83:e8:33:82:07:21:a4:bd:99:
                    e4:37:7d:a6:66:64:72:77:3c:1e:40:32:29:45:66:
                    16:65:07:e6:ea:29:7f:26:96:92:51:c2:de:44:63:
                    f2:58:c0:af:e8:64:38:d2:7d:c2:15:e5:48:58:48:
                    b4:2c:f4:67:65:6a:0c:17:a8:bc:9d:91:66:b8:5d:
                    d9:13:62:38:8e:66:ed:e6:c2:c1:dc:18:74:21:ba:
                    a1:de:cb:9b:2c:8b:d3:64:e2:16:36:c3:d8:e2:74:
                    23:15:85:29:2f:c3:9f:17:e1:b5:b7:0d:6e:1e:ab:
                    11:f6:8b:33:a8:d1:24:58:ab:c5:15:86:69:1e:35:
                    5e:21:1f:8d:3c:64:fc:f5:50:d0:29:ec:d1:71:cf:
                    05:7b:2a:1b:ad:54:57:64:b6:62:41:51:78:1c:79:
                    a2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:66:46:8B:82:70:D0:5E:E8:1B:4B:50:60:06:F9:B0:43:E3:6E:3A
            X509v3 Authority Key Identifier:
                keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:c4:be:24:7b:d8:a4:bd:0d:e8:62:f6:1c:0b:2d:53:a9:c5:
         cf:d6:11:09:fa:1c:80:df:92:8a:69:3d:bb:33:6a:e7:5c:d9:
         36:51:9e:b5:61:5a:b8:a1:85:36:83:ac:35:22:94:93:85:7b:
         ae:42:e4:a4:d1:9a:94:82:69:1b:df:01:e0:f2:fa:7c:86:a5:
         28:a0:78:f3:3b:64:a5:c1:41:fb:2c:88:1c:64:cb:b0:5f:45:
         44:4b:9c:d7:f9:fd:a7:5b:32:6c:07:3e:e4:0b:11:08:44:b1:
         3c:6e:f8:90:01:86:02:2a:0e:0c:0e:c5:73:36:ec:18:a6:06:
         e8:61:20:25:59:a8:58:de:d4:e2:8a:17:d7:a8:9f:23:79:e7:
         0d:1c:ce:93:2f:0b:07:57:14:d2:75:5a:81:07:5a:eb:8e:7c:
         44:29:73:92:6b:74:61:4d:3a:60:eb:f1:b1:e5:03:11:70:c4:
         bd:5c:33:69:a2:8c:98:6d:6b:d7:3b:f0:d1:4b:12:d6:d2:bc:
         77:84:7b:3a:08:1f:a2:e2:4f:9f:82:d7:7c:59:f2:8c:8c:14:
         65:40:0d:78:a9:93:2b:93:e0:06:0c:8b:4e:6c:f0:c1:88:64:
         9d:73:45:20:a7:90:33:99:67:c4:83:09:3f:0e:62:f7:2a:d9:
         ff:ad:9e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:35 2026 by rpki-client