Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
File:                     13BmKFIPfdrO9yQ276VGNcUs_ck.mft (raw, json)
Hash identifier:          HQxKDNsB/R39GJeeHCVBbz3m5/mS13IOrVQm8KoPATY=
Subject key identifier:   FE:F5:3F:1A:AA:6F:FC:2B:5B:2C:E6:A4:E4:54:5F:E0:50:B1:E6:F2
Authority key identifier: D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9
Certificate issuer:       /CN=d7706628520f7ddacef72436efa54635c52cfdc9
Certificate serial:       019F8F7E1563146E6CA4DDC6B3B082552781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
Manifest number:          109B
Signing time:             Thu 23 Jul 2026 15:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:32 +0000
Files and hashes:         1: 13BmKFIPfdrO9yQ276VGNcUs_ck.crl (hash: S/59m+HpgdpX3Pn0tShk62mCCa8cCFILxo0wJ6pULpg=)
                          2: DQoj2ctBiN_T5FWsMsnqhdItImU.roa (hash: 5///YJpY90e2P/CAZ06dyQ4dMtgO+abo0J7yzIB0xQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 15:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:15:63:14:6e:6c:a4:dd:c6:b3:b0:82:55:27:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7706628520f7ddacef72436efa54635c52cfdc9
        Validity
            Not Before: Jul 23 15:00:32 2026 GMT
            Not After : Jul 24 15:00:32 2026 GMT
        Subject: CN=fef53f1aaa6ffc2b5b2ce6a4e4545fe050b1e6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:fe:6f:a7:3b:73:d6:a3:f3:bc:58:f1:5b:
                    dd:f4:d2:5b:00:d7:3a:89:e0:1c:79:a3:6a:42:33:
                    9a:a0:86:72:93:c0:3c:73:ea:b1:13:2e:14:d0:c2:
                    bf:a4:71:3c:1f:79:46:a0:da:bf:e5:18:2a:29:ad:
                    82:29:e7:55:3e:ea:38:8e:61:c8:e6:fd:c2:bd:dd:
                    e6:da:fd:8e:be:50:71:af:9b:e0:7c:b5:c1:aa:ce:
                    54:ff:a3:7e:51:35:ef:b0:22:cd:4b:ee:1a:a4:ad:
                    31:45:39:87:d1:28:7b:97:b2:1d:7f:a4:c1:24:1a:
                    82:5a:c1:33:fb:04:01:6b:a2:da:53:19:a4:ca:07:
                    b7:1b:f4:44:63:a5:16:5c:a5:70:2f:48:09:ce:96:
                    02:cd:60:d6:b8:aa:0e:36:cb:63:04:3d:e7:56:31:
                    db:24:3e:49:07:61:b2:2e:ba:b7:52:0d:c8:18:84:
                    f8:48:46:4b:97:9e:09:c9:83:03:0e:c9:0f:3f:55:
                    fe:e3:f6:56:12:2e:6e:90:c8:f3:2b:9f:ce:bd:03:
                    11:12:9b:be:0f:71:1d:41:78:3b:17:63:7e:ea:5f:
                    76:4c:ca:b6:80:92:37:fe:f0:b0:0e:1f:a8:5c:4b:
                    e4:b0:91:9a:25:0e:d8:aa:f0:d6:62:0a:ec:11:37:
                    70:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F5:3F:1A:AA:6F:FC:2B:5B:2C:E6:A4:E4:54:5F:E0:50:B1:E6:F2
            X509v3 Authority Key Identifier:
                keyid:D7:70:66:28:52:0F:7D:DA:CE:F7:24:36:EF:A5:46:35:C5:2C:FD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13BmKFIPfdrO9yQ276VGNcUs_ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37529e-d976-47b5-b690-389d214af830/1/13BmKFIPfdrO9yQ276VGNcUs_ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b6:3d:9f:1a:af:c7:54:b3:63:68:b5:3f:ef:4d:48:9a:3f:
         1d:82:4b:98:42:cc:2f:29:19:2f:65:88:10:7e:05:d3:73:94:
         24:f0:ba:97:be:64:fc:a3:b3:60:0c:53:ea:93:06:a6:4d:a4:
         77:58:ab:58:8f:d5:dc:43:96:0d:2c:db:aa:4b:45:8b:e0:27:
         d6:e8:5d:72:1c:a9:98:2e:3a:7b:f2:db:9d:06:ef:b8:ff:2f:
         4f:b0:83:19:4f:f4:f5:d5:ac:ba:79:b6:2d:3a:f7:fe:b7:bf:
         7d:b6:94:15:1b:86:1b:e8:25:97:75:8b:4d:a0:6d:23:81:b2:
         50:5b:54:05:6a:ff:45:67:17:6d:0a:51:3e:e1:bc:c8:0c:cb:
         3b:83:f9:99:36:4e:91:7f:95:eb:d2:bb:68:24:5e:29:93:1e:
         b0:72:38:7a:4f:e0:7f:a5:64:ce:40:b5:a7:56:bd:8e:67:a3:
         51:4b:97:7f:ae:e0:6d:f7:0c:6f:ef:e2:f6:be:9b:56:b8:85:
         b3:14:c9:0b:ec:8f:65:31:f5:f7:84:52:de:ff:95:5d:f5:90:
         2f:9d:e1:68:93:ae:d6:d4:e6:cf:f6:8f:72:e2:33:3d:71:46:
         52:27:d3:6c:ff:e3:13:82:d0:73:7d:04:39:41:78:70:c9:69:
         77:5f:9d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:32:49 2026 by rpki-client