Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
File:                     13yGmob-yDN5Pu7azNSx98pEM-k.mft (raw, json)
Hash identifier:          AhZaDH53C0hNLZViBfyiHjXhUCBqG/cDJ5y9MWJReMI=
Subject key identifier:   76:8F:81:EA:83:69:24:DA:EF:DB:DD:D5:54:87:05:08:F5:9E:72:81
Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
Certificate issuer:       /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Certificate serial:       019EBE47C7B8F6C508AF7C8A7A22E00FE55F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
Manifest number:          1740
Signing time:             Sat 13 Jun 2026 00:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 00:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 00:00:35 +0000
Files and hashes:         1: 13yGmob-yDN5Pu7azNSx98pEM-k.crl (hash: q5gnkLCKhQ+klq7NPg5CFqMezvbZB7N9FBPKyv4Wn2k=)
                          2: H3UZwuAp9rSpSKUa2W4mA_Q1udI.roa (hash: 1AEX5MF9asrj6WNrnWzO3bQ5bregGi6ctVtR6cHklb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:47:c7:b8:f6:c5:08:af:7c:8a:7a:22:e0:0f:e5:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
        Validity
            Not Before: Jun 13 00:00:35 2026 GMT
            Not After : Jun 14 00:00:35 2026 GMT
        Subject: CN=768f81ea836924daefdbddd554870508f59e7281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f2:4e:9f:bd:f1:25:39:a4:9a:9e:c7:a5:cf:
                    f5:5e:ec:39:2e:24:40:a2:31:40:8b:7c:52:87:24:
                    40:df:07:3c:52:36:82:1c:82:1b:86:c8:82:70:35:
                    49:86:c6:2f:7f:ce:d0:5c:43:c7:c3:d7:8f:b3:3c:
                    93:40:c2:49:29:e9:d9:ca:a3:23:70:d4:2b:fa:9b:
                    3b:79:35:f7:f7:14:a8:49:ef:86:ea:9b:54:ab:ee:
                    c6:b3:f7:c8:ac:2b:b4:cd:4f:86:3a:ce:cb:ea:2e:
                    c2:b7:9f:98:91:5d:46:25:9e:1c:07:fd:7d:f5:ec:
                    48:a6:ca:08:7e:9d:55:ee:5d:2e:d2:3d:c5:08:1c:
                    73:bf:62:88:6d:c3:4c:e5:6f:77:28:cd:3e:db:d6:
                    a9:9d:99:fd:38:bd:5e:da:8c:7e:6b:29:9c:04:ef:
                    e9:7a:07:4c:3c:2c:d5:a7:a7:ab:ed:dc:29:9f:a3:
                    5f:81:de:a4:38:7e:38:e2:0a:b7:e4:5a:ad:9f:03:
                    8a:76:6b:2c:14:67:ae:01:6c:3a:58:1f:e5:13:d2:
                    41:c9:26:e1:6b:1a:24:8d:fb:91:68:4b:5d:e8:92:
                    11:92:99:46:63:e8:bd:5c:d7:1c:28:bd:ac:fe:1c:
                    2f:f4:f2:af:de:4d:54:03:3d:fd:98:43:4f:97:4f:
                    cc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:8F:81:EA:83:69:24:DA:EF:DB:DD:D5:54:87:05:08:F5:9E:72:81
            X509v3 Authority Key Identifier:
                keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:2e:a3:43:3a:d5:16:08:5b:46:36:b4:63:23:f9:05:de:eb:
         77:07:71:36:5b:c9:7d:b4:38:80:1e:e4:2f:f6:eb:fd:20:d1:
         de:94:03:71:99:65:38:81:01:c6:dd:5d:3c:80:9f:a1:49:67:
         81:ef:b3:fd:cd:58:5b:2d:c4:9a:e3:71:06:4e:7e:be:c0:b1:
         2b:97:90:d9:8a:02:80:e3:af:f8:93:0c:b6:5d:d3:ea:3c:1a:
         17:cc:5a:07:2c:bb:9f:7a:3f:2b:46:f5:b0:8c:58:e0:eb:04:
         27:ab:5c:c7:85:34:a8:ae:b4:29:ee:e7:43:c1:b2:ee:2f:88:
         02:55:b0:44:09:2f:bc:44:df:0c:f5:94:cd:06:c9:6c:54:9e:
         5f:6f:cb:63:2d:bc:75:c5:ad:10:37:de:8a:23:74:61:31:64:
         95:4b:ff:5b:e5:8f:18:ef:6a:7f:c2:46:4e:52:24:2f:95:d6:
         15:a8:78:7f:3a:1d:2d:bd:43:50:06:15:b8:c9:92:cd:a5:b8:
         c7:1b:f6:5e:8b:94:cd:15:bb:dc:4d:2a:b6:ec:6b:64:af:54:
         43:d7:c0:0e:47:ca:b2:7f:39:aa:fd:db:d3:36:ba:b6:8e:bf:
         7a:15:63:25:4b:47:40:f7:77:ae:83:bb:c9:c3:62:4e:3b:9e:
         40:3f:d0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:30 2026 by rpki-client