Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
File:                     13auCasbyUrOg_pv02rFIoZ7kuo.mft (raw, json)
Hash identifier:          KZVA9UyujmXDvi9gWPSk2/4lTJYTmA7lip5N2jbERys=
Subject key identifier:   F6:21:88:14:A9:77:38:64:DB:1E:87:22:43:A7:B3:59:50:DF:17:51
Authority key identifier: D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
Certificate issuer:       /CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Certificate serial:       019D28F23A5CA2FC2373695777ACB2C61D2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 07:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:56 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:56 +0000
Files and hashes:         1: 13auCasbyUrOg_pv02rFIoZ7kuo.crl (hash: R2b65LQo/YxubsddyXoorv/JU8LS1POajOcynzpfsJg=)
                          2: yQF_oqKXVguMAr3971D21MlrR_8.roa (hash: rXFsVsTmW2PojlnuQAcJtT+oQ2/oW7PggfH906SCVtQ=)
                          3: ywVR7woUIzneTMtjfuoirWk196k.roa (hash: i+MATSFKerXwDHLKNUICE818LV3sf8RvOyqaZnW8Yrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:3a:5c:a2:fc:23:73:69:57:77:ac:b2:c6:1d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
        Validity
            Not Before: Mar 26 07:00:56 2026 GMT
            Not After : Mar 27 07:00:56 2026 GMT
        Subject: CN=f6218814a9773864db1e872243a7b35950df1751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:b3:18:f2:13:3c:57:17:93:10:a7:ca:72:
                    4a:04:df:1b:05:f5:28:03:dd:15:01:5a:de:bd:bc:
                    da:58:fe:a3:2d:68:19:e0:6b:b4:4b:6c:a7:b4:fe:
                    4b:50:fa:b4:5d:96:33:25:a0:22:82:fd:ba:cc:ca:
                    a4:6a:17:45:2d:63:f3:ae:c6:35:b8:6f:42:7d:e6:
                    cf:7b:1a:62:5e:f5:3f:92:b9:4a:f9:c5:82:cd:c7:
                    73:8e:2c:d5:f8:f8:ce:e5:84:24:31:3b:a9:cc:69:
                    4e:59:50:1c:9f:24:15:c5:33:cc:cd:bc:67:68:31:
                    87:9c:90:20:2a:1e:ca:fa:7f:58:f7:ef:08:a9:41:
                    c3:15:cd:c8:4d:bd:50:e7:03:c0:72:a2:06:ac:c9:
                    ec:ec:5c:b0:2a:46:fd:4b:d9:92:24:a4:a8:e5:82:
                    84:3c:66:e4:b2:6b:f4:f0:ab:4e:7f:14:67:47:c9:
                    fa:8a:52:c6:fb:19:b4:aa:6f:03:e7:96:4b:35:39:
                    07:a3:24:58:a3:47:9f:84:c0:9f:41:1e:57:56:27:
                    04:16:21:f6:c1:b5:27:c2:20:fb:0d:0b:31:2e:7e:
                    69:f9:b0:77:69:2f:8a:83:21:0d:db:15:4f:8a:3d:
                    50:84:ef:57:50:ca:b7:f4:96:03:84:ca:5f:a8:2e:
                    67:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:21:88:14:A9:77:38:64:DB:1E:87:22:43:A7:B3:59:50:DF:17:51
            X509v3 Authority Key Identifier:
                keyid:D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:7c:9b:92:47:94:16:13:9f:15:c6:25:de:dc:ee:02:b8:af:
         76:2c:dd:9e:df:79:b5:57:02:60:c7:ce:6b:8f:c3:18:d0:eb:
         51:fb:04:ce:c8:be:88:99:5e:e5:e8:18:a8:05:52:8e:b0:be:
         3c:81:80:fd:7d:4d:33:a8:ff:95:7f:a0:ca:fa:5d:4e:36:7a:
         cb:0b:01:d4:45:66:e3:24:79:be:5e:17:46:c9:79:1e:70:59:
         45:7e:23:9a:cc:23:7a:fa:3b:24:6c:b6:d1:0d:55:34:d2:e5:
         ad:cc:21:3c:b4:52:4e:12:4b:65:3d:d6:14:b7:08:b1:07:f0:
         16:e0:26:c1:48:5f:28:24:06:94:67:e7:1e:66:59:33:66:6c:
         f6:c5:c0:7c:72:a4:57:dd:59:cb:a4:28:e5:13:bf:ea:dc:9b:
         9d:cf:1c:fb:e5:00:bd:b6:b3:46:8a:d1:fb:24:25:d4:e0:fb:
         e0:0a:53:66:99:10:8f:48:f5:82:db:50:57:48:4e:7e:f7:e3:
         d6:f5:82:c3:b7:e9:fc:04:03:02:ef:72:23:34:c7:5a:55:62:
         0f:9b:fb:20:d9:a0:ec:e2:f5:77:8b:6e:ad:f0:6c:f5:91:04:
         29:85:0b:6a:44:58:59:bf:47:76:10:89:b3:0b:a7:b2:1f:eb:
         4d:d9:1a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:09:19 2026 by rpki-client