Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
File:                     13mWjmbtvqNy75W6or9okThWekA.mft (raw, json)
Hash identifier:          383yAkDKy5KM8BteIid0YiAFmHYIErLwdn2L0zsSdQA=
Subject key identifier:   38:31:72:9C:19:67:A3:B6:74:9E:B2:DD:B6:BA:A2:BA:49:77:37:8A
Authority key identifier: D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40
Certificate issuer:       /CN=d779968e66edbea372ef95baa2bf689138567a40
Certificate serial:       019CAD90702AA436E1D47F8AE6B5D6772ABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
Manifest number:          184A
Signing time:             Mon 02 Mar 2026 08:00:50 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:50 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:50 +0000
Files and hashes:         1: 13mWjmbtvqNy75W6or9okThWekA.crl (hash: +T/Aj6I9WO/QoVvUSx2eDM6qaVXgLrLyGCYfyGVVtWo=)
                          2: a2dGgMgkDvSFz9UvYkCXlH5tzZU.roa (hash: c2MCuHjIaTWBayfSiKP1qGbzAEWRP5fSSTHUf07P0Kc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:70:2a:a4:36:e1:d4:7f:8a:e6:b5:d6:77:2a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d779968e66edbea372ef95baa2bf689138567a40
        Validity
            Not Before: Mar  2 08:00:50 2026 GMT
            Not After : Mar  3 08:00:50 2026 GMT
        Subject: CN=3831729c1967a3b6749eb2ddb6baa2ba4977378a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b8:7f:60:36:11:90:80:1e:1a:f2:13:e0:bf:
                    56:0b:75:7a:6a:69:ad:ba:b2:04:39:f8:17:4d:b6:
                    aa:29:e3:e4:70:f0:c5:c7:d4:59:7a:f1:b6:44:95:
                    15:8a:57:93:ff:b5:d9:2c:09:35:6b:2b:76:25:d9:
                    e2:87:77:c5:cb:cd:4f:29:fd:2d:4d:03:9d:20:ce:
                    fb:c0:0d:68:8f:fb:a7:84:ba:6e:2d:be:ef:ac:1e:
                    57:34:a4:25:c8:36:70:22:a1:99:4d:f5:fe:2b:4d:
                    6b:38:da:4e:24:40:65:2b:f3:3a:0c:f5:10:d0:dd:
                    89:c2:c8:a8:5d:54:56:99:49:29:48:41:67:67:05:
                    9e:b5:f6:20:40:91:0f:c3:fe:70:76:2e:93:2c:c8:
                    2c:86:5f:d6:31:eb:3b:c6:b6:39:6a:81:25:ed:68:
                    22:2d:1b:16:7e:85:5e:df:01:f0:18:58:b0:1b:8e:
                    88:b2:53:95:af:d2:30:6a:e4:a0:98:93:95:b7:f7:
                    6c:40:a1:be:2f:a4:2e:26:c9:ad:b0:96:82:c7:28:
                    91:b1:0b:3c:82:50:ea:4b:90:91:81:c9:2b:94:6c:
                    de:25:13:41:0f:2b:e2:f8:13:d7:b2:24:7f:2e:d5:
                    12:0d:69:e5:35:22:91:a8:85:e4:b7:8d:0b:74:93:
                    be:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:31:72:9C:19:67:A3:B6:74:9E:B2:DD:B6:BA:A2:BA:49:77:37:8A
            X509v3 Authority Key Identifier:
                keyid:D7:79:96:8E:66:ED:BE:A3:72:EF:95:BA:A2:BF:68:91:38:56:7A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13mWjmbtvqNy75W6or9okThWekA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/94bf5b-d38a-4c76-b01f-6e6fa39bb1ec/1/13mWjmbtvqNy75W6or9okThWekA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c4:af:0b:74:f7:34:ba:f8:bb:d3:22:eb:46:3a:cb:88:a1:
         54:ab:b4:bf:38:4e:8a:ae:84:0f:84:ba:4b:40:81:f6:a9:f8:
         8e:b9:46:0f:61:a8:08:c8:fd:e6:3c:eb:24:a0:85:67:6b:ec:
         70:55:cc:b8:28:fe:fa:3c:ef:48:f4:ec:2d:48:9e:f5:48:a6:
         59:7a:d3:4e:71:50:de:ae:02:54:04:a2:84:7f:d1:2a:4b:2d:
         ed:65:bc:9d:fb:c2:b1:79:b3:41:45:fe:eb:4e:86:16:ef:f4:
         f4:37:09:d2:6c:e8:27:5d:63:96:2d:a1:e7:7e:88:e0:93:c9:
         5c:85:71:7e:76:f9:49:7d:31:64:77:e2:75:a4:bf:37:d3:fb:
         f2:b4:b5:9c:d7:c2:91:46:17:f7:57:05:b8:26:09:ec:12:c7:
         c3:f7:31:9f:d2:52:b5:28:51:41:92:d6:4d:10:32:74:e7:88:
         ca:ea:66:e1:c4:be:b1:80:24:e2:d7:ba:f9:cb:a5:de:b2:69:
         9e:40:f4:4b:de:b5:b1:22:30:a4:9f:2c:50:6a:d2:92:9f:b5:
         ab:53:65:e4:4b:18:37:07:33:4e:39:ce:50:91:2b:54:d4:8b:
         57:c1:55:50:ab:29:c4:69:f0:65:f0:a8:a1:bb:ab:70:26:0e:
         2d:4b:65:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:31 2026 by rpki-client