Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
File:                     13j4yccHK3MEiPnjISjdiVveMtM.mft (raw, json)
Hash identifier:          +dmU2KRt62uLSIPCdbK1otwomkZSK9IaSYFBObWYjmg=
Subject key identifier:   6E:09:71:E2:A7:A7:28:AE:5F:3B:48:5C:14:97:40:63:9A:18:47:34
Authority key identifier: D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
Certificate issuer:       /CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Certificate serial:       019F9022F86840F779C3E6A862ECC183059F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
Manifest number:          09DF
Signing time:             Thu 23 Jul 2026 18:00:38 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:38 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:38 +0000
Files and hashes:         1: 13j4yccHK3MEiPnjISjdiVveMtM.crl (hash: OXuFsgXhVYcoDGWkW8rzXlT64xs95txQ/gAvSWNVJ6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:f8:68:40:f7:79:c3:e6:a8:62:ec:c1:83:05:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d778f8c9c7072b730488f9e32128dd895bde32d3
        Validity
            Not Before: Jul 23 18:00:38 2026 GMT
            Not After : Jul 24 18:00:38 2026 GMT
        Subject: CN=6e0971e2a7a728ae5f3b485c149740639a184734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:66:ad:77:59:1a:8a:3a:55:61:18:27:cb:
                    d3:3a:af:b6:41:d8:e2:9b:64:1b:cb:d3:ac:b8:0a:
                    47:4e:21:ee:68:08:0d:78:df:a1:0b:a9:d9:4a:01:
                    06:70:1a:79:2a:70:b7:dc:e3:d5:70:cc:da:c7:ba:
                    16:40:72:2e:a1:df:ad:a5:ec:58:bf:29:5a:7f:5c:
                    e9:09:9c:d3:aa:dc:0f:bc:05:28:75:df:40:9e:de:
                    b0:f8:5d:d7:41:71:e5:b4:02:33:04:b7:48:26:a3:
                    3e:c0:fc:bf:06:f1:2f:e4:5a:e8:17:87:5a:b2:87:
                    e8:78:89:cb:e6:19:de:0a:d6:17:42:e5:02:da:45:
                    27:5d:93:c9:6a:54:63:89:f6:09:04:1b:bf:22:c5:
                    e3:a5:be:4d:cc:85:39:4c:8b:72:48:a9:df:5c:07:
                    1e:d6:ca:51:0f:22:42:2f:ca:d6:d3:7d:4c:e9:53:
                    c0:a0:35:7e:14:c2:2b:65:cb:77:64:4f:d7:95:a4:
                    9b:53:f2:82:98:af:37:be:b0:62:a4:ad:82:65:83:
                    4a:86:ce:98:7c:96:37:34:cb:ca:db:10:19:78:93:
                    65:da:93:29:bc:2a:e5:46:cd:9f:4b:1c:51:b3:e7:
                    e6:11:4f:3b:35:03:e4:c0:6e:14:e9:5e:29:9f:5f:
                    49:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:09:71:E2:A7:A7:28:AE:5F:3B:48:5C:14:97:40:63:9A:18:47:34
            X509v3 Authority Key Identifier:
                keyid:D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f5:03:3e:18:21:00:f5:48:09:09:e1:c4:11:21:1c:60:22:
         15:64:be:51:3a:7e:ea:d3:d3:bb:e0:26:a0:e8:99:3f:09:15:
         05:85:d8:9d:5b:df:08:c1:44:b5:48:8e:52:82:16:41:a4:01:
         52:35:d2:c6:22:06:9a:8d:63:13:b6:77:77:f6:d7:a2:e1:90:
         63:be:1f:c3:a6:31:8f:1e:4d:50:c1:8a:00:1c:9c:22:de:fc:
         15:77:d5:3c:63:bd:80:8f:c7:64:b1:a8:cd:23:92:c9:fc:74:
         b9:79:f3:2c:d9:03:52:27:09:0e:75:e3:c1:ac:e4:f5:8d:b0:
         2d:25:5d:66:41:65:71:0c:fa:3f:20:84:6f:14:94:70:fa:72:
         4a:51:c9:18:7b:09:0e:de:f7:ac:ec:cb:b0:a3:47:22:d3:19:
         39:ac:77:19:45:08:ff:a5:6c:1a:83:c4:35:ca:c0:5a:48:f0:
         17:55:a8:84:65:8d:2b:e7:1e:ef:19:2f:94:cf:59:ae:90:b3:
         9f:d6:34:a0:1f:21:c5:73:34:42:82:9d:68:f7:9f:0a:46:08:
         5e:cf:76:dc:84:99:3d:4a:27:70:9d:98:cb:26:42:9c:42:35:
         5b:31:de:f2:c4:b6:36:37:89:0d:a7:13:7d:99:a0:ed:24:88:
         fa:5e:a3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:06:01 2026 by rpki-client