Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
File:                     13eW4WtWXXJzZphsycqcpj0aTlg.mft (raw, json)
Hash identifier:          4clScAdRkvaRZ7C4Ano7feBHYWLPuYKCpRyKFR7DsVk=
Subject key identifier:   23:46:62:0C:CC:92:42:0E:86:18:28:25:AC:C5:5D:C5:AE:2B:78:93
Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
Certificate issuer:       /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Certificate serial:       019E1C1056D4C7284EC0FC9D0B98E3439535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
Manifest number:          0626
Signing time:             Tue 12 May 2026 12:01:33 +0000
Manifest this update:     Tue 12 May 2026 12:01:33 +0000
Manifest next update:     Wed 13 May 2026 12:01:33 +0000
Files and hashes:         1: 13eW4WtWXXJzZphsycqcpj0aTlg.crl (hash: Dr+RvQGneg/UPaeMt4QEmuahn6dCfnrpK0WgA4Y8MvI=)
                          2: Z7tPkv-KOS--LcH3raWeWv6mob4.roa (hash: 2730/QIDnBMlH2saKFE8sJJcRwFrjnSocRmwgcVBh5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:56:d4:c7:28:4e:c0:fc:9d:0b:98:e3:43:95:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
        Validity
            Not Before: May 12 12:01:33 2026 GMT
            Not After : May 13 12:01:33 2026 GMT
        Subject: CN=2346620ccc92420e86182825acc55dc5ae2b7893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:54:03:1a:45:79:76:f9:36:10:3c:1b:f1:56:
                    7f:4c:87:ab:09:59:6e:f0:20:a8:d4:78:7f:2e:f8:
                    ba:39:4c:9c:89:6d:55:cd:17:d0:9d:fc:de:f4:e4:
                    bf:61:bd:bc:e4:08:f0:77:8e:7c:d5:ec:48:72:fb:
                    c5:30:04:b3:bf:d3:8f:58:37:3d:88:8c:ae:0c:31:
                    79:a3:88:43:b8:fd:58:17:b4:f9:61:52:b2:5b:cb:
                    6d:25:7d:16:32:6e:4c:8c:21:26:4a:b9:51:d0:5e:
                    fd:ad:d4:4f:1f:fb:e2:62:94:ec:62:4f:11:ab:40:
                    a5:eb:8b:f9:2f:f5:0c:6b:19:0e:fb:7f:f5:42:25:
                    cd:4c:85:c9:05:82:27:7a:ae:f7:2d:47:32:15:49:
                    b9:7d:7e:50:e9:14:e0:4e:da:12:3a:97:43:05:d7:
                    2e:f3:3e:8f:4c:06:19:b4:1c:94:f9:34:d4:76:8b:
                    13:85:2b:30:1e:82:af:dc:79:7e:89:c8:c0:b1:cd:
                    76:48:a8:c3:00:2a:1d:4f:c2:d2:69:c9:4d:bc:e5:
                    f8:07:e8:e9:93:fb:fa:2f:11:09:c5:79:10:5e:b6:
                    40:48:3d:85:a6:27:a6:3c:1e:aa:f0:7f:56:a7:92:
                    f8:7b:dc:21:90:bb:05:95:fc:cb:16:c3:ae:ca:92:
                    69:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:46:62:0C:CC:92:42:0E:86:18:28:25:AC:C5:5D:C5:AE:2B:78:93
            X509v3 Authority Key Identifier:
                keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9b:06:42:b5:d6:09:6c:d7:4a:56:51:6d:e1:a0:c0:31:27:
         12:83:73:5b:cf:ab:00:71:46:bb:49:83:ba:4f:55:56:34:86:
         a6:fd:cf:09:d8:e7:b8:37:2b:92:0f:a5:51:76:46:4d:bb:47:
         fe:e0:34:62:18:53:dc:12:aa:22:5e:d7:bb:d3:9e:0c:e3:ed:
         c3:11:fd:08:be:13:a4:f3:a8:9f:cc:06:7a:15:00:c6:f4:50:
         ef:1c:4d:7a:17:93:cb:29:17:be:76:92:9e:35:8b:4e:c5:e8:
         0f:af:2a:6f:d3:46:32:74:49:99:f8:0e:63:01:2e:97:3f:80:
         a3:d6:c4:91:d4:2c:22:5f:1e:0b:36:71:fc:ab:0e:c2:bb:04:
         e5:39:a0:87:43:db:57:2e:80:5b:6d:5a:64:76:1d:6f:ed:42:
         88:6d:d2:32:ce:9e:67:ac:61:4f:d4:e6:e8:9a:ab:52:d5:7e:
         32:0a:b4:de:f4:c8:26:a9:d6:66:5e:99:6e:03:bd:f1:1b:00:
         f1:33:bf:cd:63:29:10:0f:8d:78:65:18:bb:b1:8b:ba:b6:9f:
         64:6f:8d:c2:d4:5f:44:d4:90:57:be:ec:17:1d:69:0d:92:97:
         a2:81:67:b4:a3:cb:bf:d8:dc:2b:c3:65:19:00:03:d0:db:4a:
         87:26:22:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:21 2026 by rpki-client