Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
File:                     13eW4WtWXXJzZphsycqcpj0aTlg.mft (raw, json)
Hash identifier:          2RYjfMB3Ca27TNb69Z7UxjdZkfvwz5rBVDWZ0Ky6YoM=
Subject key identifier:   F1:A4:9A:09:9B:DD:6D:32:EC:64:4C:04:89:AC:64:7D:32:11:03:9F
Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
Certificate issuer:       /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Certificate serial:       01A14918036DC10D3494116B79129EBD9AAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
Manifest number:          07CB
Signing time:             Sat 17 Oct 2026 09:01:12 +0000
Manifest this update:     Sat 17 Oct 2026 09:01:12 +0000
Manifest next update:     Sun 18 Oct 2026 09:01:12 +0000
Files and hashes:         1: 13eW4WtWXXJzZphsycqcpj0aTlg.crl (hash: LHKck5mNjd+sZwC4TUN0tt0KK296xVReiWBBgIwFyH8=)
                          2: Z7tPkv-KOS--LcH3raWeWv6mob4.roa (hash: 2730/QIDnBMlH2saKFE8sJJcRwFrjnSocRmwgcVBh5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:49:18:03:6d:c1:0d:34:94:11:6b:79:12:9e:bd:9a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
        Validity
            Not Before: Oct 17 09:01:12 2026 GMT
            Not After : Oct 18 09:01:12 2026 GMT
        Subject: CN=f1a49a099bdd6d32ec644c0489ac647d3211039f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:51:95:b4:04:5e:3e:35:e1:ca:c5:05:c6:19:
                    9a:a2:c0:5a:fb:7b:43:f0:8b:fc:78:e2:97:91:4a:
                    9a:d6:94:70:ed:e6:11:a6:c4:4e:2f:67:86:32:10:
                    f9:80:9d:f6:16:da:37:56:05:9c:28:cf:13:4b:65:
                    61:c4:31:aa:e6:8f:56:2d:de:5c:bc:48:08:da:1c:
                    5e:a5:19:d9:f5:1d:f7:2e:5b:65:7e:23:06:93:15:
                    94:65:0e:dc:09:92:38:15:1c:2c:4f:a6:b6:a1:08:
                    66:06:7e:90:99:15:b3:e1:30:fa:bb:49:df:b3:51:
                    6b:dd:ad:20:56:df:91:b1:08:cb:15:ea:8b:d7:d3:
                    e4:0c:c9:e0:6f:4e:97:ce:c3:97:26:64:96:55:22:
                    0e:86:fe:a8:7b:ee:75:f4:ff:64:01:72:13:58:64:
                    2b:3d:ff:b4:60:57:d6:5e:76:40:db:53:32:4e:46:
                    a6:f4:da:15:45:cc:12:8f:7a:7d:44:f6:c7:d5:c4:
                    dc:74:7e:4a:d3:15:1e:82:0b:12:06:70:98:9a:0e:
                    97:35:c5:76:06:57:0d:cb:83:f0:73:85:3d:38:47:
                    fe:1f:4f:d0:a1:79:19:c0:99:8c:bb:69:e7:ba:c3:
                    85:cb:41:3c:c4:f4:49:c3:f3:26:eb:ad:68:92:d6:
                    36:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A4:9A:09:9B:DD:6D:32:EC:64:4C:04:89:AC:64:7D:32:11:03:9F
            X509v3 Authority Key Identifier:
                keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:3e:70:e8:5f:b5:47:34:f6:43:1f:1e:7a:98:5e:07:c4:5e:
         14:55:d9:55:60:09:4e:42:f3:5b:8a:09:ac:90:57:22:e8:98:
         23:93:b8:d2:9d:a6:e7:c4:3e:ae:14:11:88:51:a7:f5:fd:7f:
         d1:ea:2e:56:71:87:67:ef:9e:25:f3:4d:0e:b9:ab:3d:c1:94:
         48:ae:33:23:8a:c8:6e:50:86:19:c5:8c:d7:04:6b:40:1f:24:
         c7:9b:c0:63:8a:9b:37:76:d2:69:00:ae:b9:55:c6:84:91:3d:
         c9:1f:7c:6e:c1:69:cb:f3:37:2d:f9:b5:18:f4:c6:58:83:6f:
         bf:a0:65:4d:04:00:fd:65:c5:fc:77:1b:9e:93:a3:89:f3:de:
         7b:b4:16:07:17:d3:6b:fe:05:69:3f:cc:d0:85:27:26:62:be:
         f7:5f:52:ea:01:6d:1c:34:a2:0e:6c:b6:52:b4:56:2e:e2:52:
         21:22:df:e5:2b:60:ff:34:9f:c2:1a:10:32:1b:ba:ca:3c:4f:
         09:1f:49:12:70:ef:4a:be:bb:ae:fa:08:08:1c:8d:8c:6d:64:
         c2:20:29:47:8c:6a:1b:94:e2:59:3a:b4:bd:cb:e6:e2:2b:16:
         48:89:19:5b:fb:0c:90:e5:fe:bd:ec:23:03:9d:7f:1c:b7:23:
         63:fd:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:35:52 2026 by rpki-client