Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File:                     13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier:          6LYVZxlBCSK+npz1PRfnYlF/r2pMe4/TnDuC6Rb4JfI=
Subject key identifier:   58:1E:61:51:C8:F2:E7:1A:0B:89:85:45:3C:A7:60:6A:AF:C6:9D:46
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer:       /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial:       019889217E39A05B0D3273E94F045AAD018A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number:          0ADD
Signing time:             Fri 08 Aug 2025 10:02:10 +0000
Manifest this update:     Fri 08 Aug 2025 10:02:10 +0000
Manifest next update:     Sat 09 Aug 2025 10:02:10 +0000
Files and hashes:         1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: AMUDc5sKvJllow/wf+S/OkUFl/XmqAppxAi5zFph9oU=)
                          2: 6MSYGKF8IeOAnuWHzZZC0qhgq04.roa (hash: pb27wRmWoWlrx/SmVVrzytomA3OBU87y85i5bwHixqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 10:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:89:21:7e:39:a0:5b:0d:32:73:e9:4f:04:5a:ad:01:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
        Validity
            Not Before: Aug  8 10:02:10 2025 GMT
            Not After : Aug  9 10:02:10 2025 GMT
        Subject: CN=581e6151c8f2e71a0b8985453ca7606aafc69d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:25:db:e7:c3:96:d4:eb:10:3f:f2:5d:26:
                    78:6b:7e:58:14:bb:a9:80:5f:46:32:42:06:6e:fe:
                    2a:a2:9f:71:e7:fc:2a:0d:db:c3:a1:66:b4:a2:fe:
                    06:2c:54:b1:4b:96:43:4a:91:17:67:df:f4:b7:b6:
                    a3:94:f2:1d:be:86:e2:39:af:58:c5:7e:c5:1d:14:
                    79:ee:28:bc:84:30:0c:0b:af:55:00:5a:40:94:fb:
                    89:6f:19:58:21:6b:8b:37:8c:80:b5:ed:53:ae:8e:
                    d5:49:43:a6:01:b5:62:51:cf:fe:fc:82:f1:16:22:
                    b8:67:80:9e:10:a6:cb:ee:06:8c:e2:07:29:ed:06:
                    e7:76:56:08:7d:86:37:f2:87:90:af:63:37:b0:a1:
                    33:7a:ee:8b:8e:0c:71:f5:e5:98:cb:bf:4b:68:c0:
                    52:68:b1:e8:fb:a8:04:01:22:d9:b5:5b:cc:d9:17:
                    2d:d7:6e:52:1c:e2:c8:48:02:ae:1c:e5:f2:47:7e:
                    a0:fe:ea:62:e3:b5:3c:43:66:5e:a6:b6:b3:1a:6c:
                    f0:8e:b2:ec:74:25:5f:2b:2f:5e:0b:3a:ce:60:92:
                    58:83:fc:b6:59:95:88:db:5e:55:81:f1:0f:94:95:
                    c7:3c:66:23:4e:3e:45:6d:8f:cf:ca:5a:e0:c1:f8:
                    51:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:1E:61:51:C8:F2:E7:1A:0B:89:85:45:3C:A7:60:6A:AF:C6:9D:46
            X509v3 Authority Key Identifier:
                keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:38:7f:69:3f:87:13:b2:36:06:59:22:87:60:16:4d:94:7d:
         9c:37:21:93:9b:e7:a1:93:e7:04:bd:03:04:03:e4:1c:49:2b:
         3b:48:2d:3a:a9:e3:32:cb:59:c9:12:44:c4:06:b7:24:be:36:
         21:e4:3f:00:16:65:6a:42:6e:60:90:df:17:23:d6:9a:d0:ec:
         0a:5c:55:82:74:ca:7d:77:04:4c:9a:2d:0d:5b:13:f6:90:d7:
         7f:98:12:a4:8f:c8:d4:88:68:c0:1d:a9:27:88:19:9e:81:6a:
         70:1b:13:38:98:33:e7:80:5d:33:4a:e0:a9:01:42:18:08:42:
         83:a6:27:63:00:91:93:77:28:e6:18:91:ca:fe:a1:b5:91:4e:
         da:bf:93:42:ae:47:a4:20:28:85:0b:8d:3f:98:f0:ab:09:95:
         de:dc:c9:75:bf:74:b3:6c:61:ee:f6:03:da:0b:27:c1:1c:df:
         36:94:66:02:56:d3:5f:e7:de:1c:6e:98:93:76:11:5f:d0:03:
         b0:64:98:d4:f2:56:8f:42:99:43:b2:4c:4b:46:f0:ad:87:ea:
         af:e3:40:04:a0:47:f2:9d:85:db:b8:ae:98:c6:fd:09:b4:75:
         a5:89:cd:61:89:dd:6c:56:58:88:4e:9d:b5:e1:47:97:91:ed:
         e6:df:dd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:38:02 2025 by rpki-client