Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File:                     AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier:          pEeibGZwdobBiUmcgKfFTkIP9bCfNmh28C4FNoSPYT4=
Subject key identifier:   17:89:F2:F8:55:86:6C:F9:B7:4F:D5:31:F0:34:C9:08:42:FE:C5:61
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer:       /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial:       019FAA196A91D85F365182F0A836DAEDF489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number:          13CB
Signing time:             Tue 28 Jul 2026 19:00:20 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:20 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:20 +0000
Files and hashes:         1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: OLwJ+M8sXKMyEb8FSXx3e/l3I/TJkkCHMsRn693lOLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:6a:91:d8:5f:36:51:82:f0:a8:36:da:ed:f4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
        Validity
            Not Before: Jul 28 19:00:20 2026 GMT
            Not After : Jul 29 19:00:20 2026 GMT
        Subject: CN=1789f2f855866cf9b74fd531f034c90842fec561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ec:2f:29:b0:7d:55:5c:4f:35:6b:76:3d:0d:
                    77:1b:35:7a:39:51:6a:8d:be:9a:71:c8:14:6d:30:
                    73:41:21:92:a6:cc:d4:ef:41:e1:d4:71:f6:d6:46:
                    9d:df:41:08:8b:22:03:18:2d:44:44:6a:fe:0a:5d:
                    5a:90:2b:0f:d7:1d:9e:a9:24:67:a0:c7:f1:0f:b3:
                    74:ce:cd:df:92:91:06:f6:18:3a:1f:b7:22:c8:38:
                    d1:8a:38:c8:db:5f:3c:16:a7:2e:72:9f:35:8f:07:
                    e1:07:a4:ae:3c:19:d3:10:6f:f9:99:26:8e:b9:4f:
                    a8:21:59:f6:1b:c1:60:4a:34:29:32:6b:1e:bf:97:
                    a9:ce:5c:9d:39:85:83:7e:71:97:bc:c1:34:61:b2:
                    e9:c6:4d:c6:92:36:46:40:5c:0c:cd:b7:47:02:92:
                    19:02:30:71:fa:fd:a5:cf:4e:06:d8:2b:d6:d8:34:
                    a6:f2:be:3a:c0:4d:c3:7d:80:5d:9f:cc:38:8e:96:
                    0a:a4:b5:7a:51:27:dc:0d:45:46:27:5f:ba:52:fc:
                    44:29:7d:1e:3e:d6:ff:70:7f:92:6b:87:7c:87:62:
                    db:f3:e1:60:e3:f3:93:fb:5b:bd:dc:bc:b1:0c:e4:
                    43:09:7e:e1:03:95:49:21:ea:40:89:51:11:97:75:
                    bc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:89:F2:F8:55:86:6C:F9:B7:4F:D5:31:F0:34:C9:08:42:FE:C5:61
            X509v3 Authority Key Identifier:
                keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:6f:11:a8:f3:ac:30:ae:03:cb:a2:c5:f0:9e:99:28:1e:c2:
         97:bd:4a:9b:56:22:bb:dd:3a:ed:d7:a0:76:09:de:0d:ef:08:
         7b:ad:0b:40:c8:a3:03:a0:b6:9c:82:e8:10:ca:fc:ad:94:c8:
         65:00:76:96:d4:b6:9a:c6:50:5b:44:3b:46:87:be:29:7d:3f:
         75:27:0e:21:f6:cf:fd:ed:43:97:db:a2:4d:4a:60:97:76:d1:
         87:6a:ef:2c:15:e0:3c:e5:04:11:23:67:37:6e:ed:6c:f0:74:
         f0:8d:46:57:67:a8:6a:a7:d5:e6:d7:56:ea:d9:e5:63:a1:45:
         10:52:8a:d7:9e:4e:7d:8f:ff:6d:64:a6:98:9f:f9:a1:fd:c5:
         42:62:67:99:9c:b2:6c:85:db:6a:4d:da:10:7e:85:7e:ad:34:
         92:65:9d:67:1c:25:4f:10:15:13:36:f4:77:11:21:15:69:70:
         14:71:b1:f2:ae:84:d1:69:d6:df:bd:29:2e:df:4d:87:7c:7a:
         73:83:ad:71:a6:b6:76:6c:43:b4:b9:3e:de:81:1a:c5:51:c1:
         d2:13:a2:28:ab:72:d0:86:f8:9d:72:83:d2:5d:88:7b:18:2a:
         79:5a:42:c2:e0:06:4c:51:34:25:9d:71:d3:22:b5:f8:4a:24:
         57:4e:ec:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:07:41 2026 by rpki-client