Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
File:                     13yGmob-yDN5Pu7azNSx98pEM-k.mft (raw, json)
Hash identifier:          Lvtj41iEWHHtL8FZCJ2RU4qdlbVqs7W8GT1KFyzOLgE=
Subject key identifier:   A1:90:61:0A:DC:01:85:2B:90:18:C5:5A:EF:4A:B1:68:26:AE:0C:43
Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9
Certificate issuer:       /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
Certificate serial:       01A0C3D733063B0241E518FAE3E7245530E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
Manifest number:          184C
Signing time:             Mon 21 Sep 2026 12:00:55 +0000
Manifest this update:     Mon 21 Sep 2026 12:00:55 +0000
Manifest next update:     Tue 22 Sep 2026 12:00:55 +0000
Files and hashes:         1: 13yGmob-yDN5Pu7azNSx98pEM-k.crl (hash: LyINdlimQFWMrTNB63nXhbCElx8oKpsAdFQUYT2C3Ws=)
                          2: H3UZwuAp9rSpSKUa2W4mA_Q1udI.roa (hash: 1AEX5MF9asrj6WNrnWzO3bQ5bregGi6ctVtR6cHklb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:d7:33:06:3b:02:41:e5:18:fa:e3:e7:24:55:30:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9
        Validity
            Not Before: Sep 21 12:00:55 2026 GMT
            Not After : Sep 22 12:00:55 2026 GMT
        Subject: CN=a190610adc01852b9018c55aef4ab16826ae0c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a8:ca:e2:17:1e:53:26:38:4d:ef:90:5c:d2:
                    2e:fa:7d:59:d8:2a:96:a2:4d:31:d0:23:be:0a:bf:
                    81:88:76:0a:d1:e0:a8:60:c3:8b:03:39:0d:d8:1b:
                    c6:22:53:e4:41:00:ef:1a:54:33:7e:27:46:38:36:
                    a2:6e:f5:7c:be:c3:b9:63:fe:f4:40:d9:3e:57:dc:
                    f6:94:40:d2:ba:d9:9a:d7:62:db:4d:6d:fe:1c:23:
                    7a:1d:ba:c1:1d:28:99:02:25:f8:a1:52:d0:e8:59:
                    d0:ac:ad:ba:a0:fd:35:a1:0c:a2:d2:6c:20:01:d3:
                    35:e7:aa:99:ac:8e:11:44:7b:05:6e:b9:3a:7a:2b:
                    8f:d6:e7:ca:ad:b8:e9:ad:5c:06:3f:01:4f:b8:90:
                    a8:90:c5:35:0c:7e:63:23:f9:ca:a8:c6:39:46:08:
                    a3:7a:df:9d:d8:ca:a3:d5:16:ba:e4:23:e7:d2:c3:
                    12:25:aa:15:a0:d8:29:a3:e9:e1:61:dc:c5:82:ab:
                    13:fd:56:d7:9c:e9:82:35:8b:71:a3:46:89:ee:af:
                    d7:66:14:b5:ec:39:e0:44:d0:63:4d:b4:33:bd:19:
                    43:ca:97:76:b5:98:c0:55:29:40:11:d9:ba:02:2a:
                    3d:59:11:a5:0a:24:bd:62:d1:c0:a8:89:86:8d:43:
                    d6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:90:61:0A:DC:01:85:2B:90:18:C5:5A:EF:4A:B1:68:26:AE:0C:43
            X509v3 Authority Key Identifier:
                keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ab:b0:36:6a:66:68:d3:19:df:c5:83:2b:10:df:77:f7:a9:
         01:bc:07:e8:3c:ab:0b:ee:31:7c:cf:c6:80:68:b4:97:bd:7b:
         19:00:13:2c:3d:85:68:61:83:34:57:f9:9b:48:12:40:63:87:
         87:e8:ef:f6:26:35:9d:1e:27:34:37:e6:ed:a3:1e:69:a8:f0:
         87:52:28:21:bb:5e:2e:47:9c:63:39:30:41:c0:98:c4:2d:73:
         ef:34:d9:66:2a:9d:ce:73:b5:7a:71:35:09:7d:ea:54:67:68:
         d1:49:f7:9a:8c:01:73:d2:5e:82:5f:ba:92:e2:f5:47:c3:26:
         d4:a9:67:7c:f8:06:8a:c7:28:7a:6d:03:89:9d:80:cd:6d:54:
         6f:c6:b2:79:47:45:05:64:d7:77:bf:19:13:aa:03:32:82:0a:
         36:cb:46:f0:5b:61:92:5f:b6:e8:6a:cb:7a:6e:71:c8:fe:e5:
         5e:7c:06:c5:7d:e9:c9:f8:2b:b5:1a:cf:11:5d:94:88:e5:30:
         ee:00:03:35:10:1b:23:6f:71:9c:21:99:01:a3:73:25:59:ac:
         94:91:c6:9c:19:ab:98:b8:32:f9:5f:de:7a:35:3d:ec:99:9b:
         1c:47:ef:83:35:00:b2:b7:31:09:81:42:7d:d3:e4:e6:a1:67:
         64:11:01:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:58:11 2026 by rpki-client