Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
File:                     B13D8iVyK4Cavph3jDv9cAnhz08.mft (raw, json)
Hash identifier:          PG5JSY7Ye7gldzFneHDXUg0vHkMDsI8HrmhmMykmcTk=
Subject key identifier:   73:F8:DF:8F:BE:FA:34:D8:5E:96:B0:99:A8:C9:91:93:47:38:2D:87
Authority key identifier: 07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F
Certificate issuer:       /CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
Certificate serial:       019F9248A062248A0872E9E573DC5A973365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
Manifest number:          0C2B
Signing time:             Fri 24 Jul 2026 04:01:00 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:00 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:00 +0000
Files and hashes:         1: B13D8iVyK4Cavph3jDv9cAnhz08.crl (hash: MYTgEQy2Y3bREZDATmQB7FEOgRJVrqYD1f2RpMLyKYE=)
                          2: aG_aHbCU5Hs_MsAhlVWc5LE2b-o.roa (hash: pytCPS1GM1RdouNyax+lSXlG67UW6XetXLmtI5xGuWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:a0:62:24:8a:08:72:e9:e5:73:dc:5a:97:33:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
        Validity
            Not Before: Jul 24 04:01:00 2026 GMT
            Not After : Jul 25 04:01:00 2026 GMT
        Subject: CN=73f8df8fbefa34d85e96b099a8c9919347382d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:4b:a8:35:05:e3:b4:ba:16:2f:f4:9a:8b:
                    12:ad:0f:c1:06:e9:d8:3c:af:12:79:09:1c:73:df:
                    74:6d:07:eb:6f:5d:f7:cb:fb:7b:db:88:e2:19:2d:
                    7b:a4:ce:6e:e0:b6:f4:1a:6f:a5:e6:bf:cb:71:3d:
                    6a:30:f1:b1:6e:d5:e1:33:be:d7:f6:9a:09:ac:29:
                    d8:2f:3a:5f:e7:83:20:33:f1:6c:2b:d9:53:2c:7a:
                    5e:de:d9:72:c0:ff:0f:8d:f9:1d:7f:9f:82:9a:aa:
                    a8:7c:eb:7f:67:c2:cc:b7:c4:d7:5a:a8:8f:d7:7e:
                    62:ff:f9:86:5a:07:0d:1c:e5:b1:b1:19:6b:55:62:
                    88:2b:7f:41:e0:65:b1:e2:17:3a:8d:4e:bc:26:4b:
                    fb:20:23:41:c2:f0:4d:cb:89:d8:b2:18:eb:cf:af:
                    96:5b:ca:9f:50:2d:cd:dc:c8:fa:42:38:e5:8d:25:
                    34:cf:74:47:f7:f9:71:a6:67:b6:20:31:63:a7:98:
                    56:a5:8e:85:ea:ac:aa:95:69:9b:49:b2:7a:94:58:
                    62:d0:27:f7:8b:99:8b:1f:7c:71:e6:a3:53:19:75:
                    02:03:9d:07:51:22:2f:c2:b8:61:57:7c:1d:9f:87:
                    b2:63:7b:8d:d6:60:66:31:a5:70:28:17:6f:84:ec:
                    65:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F8:DF:8F:BE:FA:34:D8:5E:96:B0:99:A8:C9:91:93:47:38:2D:87
            X509v3 Authority Key Identifier:
                keyid:07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:14:83:98:45:d0:0b:0a:a1:15:d3:40:a6:06:16:a2:8e:f1:
         fb:88:27:1f:19:15:ed:c2:42:ec:f0:d7:b5:4a:32:6b:21:37:
         22:71:d1:5b:c2:5d:ca:5c:29:b6:ca:79:2a:1a:5a:6d:1c:43:
         3e:1e:5e:15:f6:12:7c:9d:46:4e:fb:8d:c4:5e:03:b2:ab:c8:
         ce:4a:df:08:57:7d:79:ff:d6:c8:9a:2e:20:6b:d6:aa:24:01:
         c2:96:7d:a3:c0:ef:9b:ea:03:bf:22:6e:67:cc:df:9e:3c:05:
         ee:53:10:f4:32:e8:e5:2c:80:bf:ec:96:f4:77:00:cd:4f:17:
         d0:1a:51:a8:8f:bc:72:71:7a:39:86:61:9f:9d:97:61:5d:5a:
         7e:37:eb:41:05:b6:1c:79:c8:10:1d:dc:13:bd:b6:e3:0f:73:
         f5:63:2c:8b:9a:ad:aa:81:8e:65:44:d5:b6:0a:cd:d8:6a:11:
         3d:02:70:a5:57:c1:30:19:c5:f5:f7:d7:7b:42:37:ab:10:de:
         62:65:fb:2e:3b:0c:2d:9a:58:ee:e2:09:c6:83:7f:0d:56:5d:
         e2:dd:1e:3c:2b:14:aa:51:e4:09:0d:e6:80:1c:fe:f6:d3:5b:
         68:78:07:e1:99:c3:eb:d6:74:60:57:7c:f6:53:1e:fe:18:33:
         59:f6:8d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:02:20 2026 by rpki-client