Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
File:                     13auCasbyUrOg_pv02rFIoZ7kuo.mft (raw, json)
Hash identifier:          EBM5BY7K6rCt8VlKQosUK6B/NMsZ0DCAWXofHIN6wmQ=
Subject key identifier:   E0:F2:5B:21:AF:0C:09:EE:8C:20:82:35:8F:60:60:DC:96:F7:5E:B4
Authority key identifier: D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
Certificate issuer:       /CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Certificate serial:       019D9AE2AFE8EDEC124CD3D7A4119CA0971D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 10:00:40 +0000
Manifest this update:     Fri 17 Apr 2026 10:00:40 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:40 +0000
Files and hashes:         1: 13auCasbyUrOg_pv02rFIoZ7kuo.crl (hash: I2qVgIOwco4jc4yWxLKumHxvvZqmU5ykmx+roGWarzo=)
                          2: yQF_oqKXVguMAr3971D21MlrR_8.roa (hash: rXFsVsTmW2PojlnuQAcJtT+oQ2/oW7PggfH906SCVtQ=)
                          3: ywVR7woUIzneTMtjfuoirWk196k.roa (hash: i+MATSFKerXwDHLKNUICE818LV3sf8RvOyqaZnW8Yrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e2:af:e8:ed:ec:12:4c:d3:d7:a4:11:9c:a0:97:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
        Validity
            Not Before: Apr 17 10:00:40 2026 GMT
            Not After : Apr 18 10:00:40 2026 GMT
        Subject: CN=e0f25b21af0c09ee8c2082358f6060dc96f75eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:d2:b8:eb:61:ed:68:32:15:f8:39:37:ae:
                    7b:29:13:bb:5f:20:34:53:ec:ce:3c:39:99:15:a4:
                    1a:53:96:cc:fd:cf:c4:fb:49:ad:35:db:ab:7d:d3:
                    15:54:28:fa:79:aa:e4:2f:3c:85:99:a9:8b:4a:d9:
                    99:a9:b5:1d:4e:61:b9:f3:aa:c1:5e:ff:2a:de:bf:
                    ab:97:f7:7d:d6:5a:15:57:31:98:a1:6d:62:dd:63:
                    75:a4:e7:bf:f4:40:47:0b:62:21:8c:a6:c1:af:1c:
                    5e:7f:36:ca:59:fd:e0:0d:c3:a2:09:c6:b2:d3:48:
                    c6:70:11:2c:0c:5e:a4:c7:35:08:74:d2:33:f8:d7:
                    7c:6f:c0:a9:6e:82:f8:97:86:93:15:ab:07:a3:d8:
                    89:68:2f:52:10:7c:b9:a2:4d:a0:4f:f9:e6:f9:9f:
                    35:eb:2a:60:e8:2d:82:41:b1:74:8f:d5:e4:77:9f:
                    b5:92:ad:1b:ac:48:9d:ba:55:aa:b7:7e:57:d2:76:
                    59:ff:71:6e:ef:5b:85:80:d4:0a:19:80:1a:a0:66:
                    7f:cc:7f:1d:cd:01:ca:b4:d2:40:27:9b:a1:c2:6a:
                    a9:be:ab:cb:63:c9:3e:e3:49:80:97:9e:93:a7:06:
                    06:e7:96:ab:12:f5:08:8d:4b:2a:a8:34:8c:4a:8f:
                    0a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:F2:5B:21:AF:0C:09:EE:8C:20:82:35:8F:60:60:DC:96:F7:5E:B4
            X509v3 Authority Key Identifier:
                keyid:D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f4:13:4b:d0:51:9f:2f:55:23:b7:b1:ad:e1:ac:59:7f:51:
         e3:d3:ab:36:51:13:09:26:d8:29:01:d3:b1:1d:c7:8c:bf:2f:
         7a:fb:94:57:dd:2c:4a:34:45:af:5d:3b:8c:3a:64:98:ce:ad:
         8a:c3:3b:68:22:44:54:12:08:46:7b:29:52:de:ea:20:bb:2a:
         ce:e8:9f:23:c3:30:08:f0:17:5c:c4:67:66:af:35:ba:66:63:
         bf:96:db:da:aa:8b:be:42:0b:8b:c6:ca:66:63:d1:2b:96:6a:
         a9:a3:3d:df:4f:ea:23:35:20:34:8b:d5:0f:21:89:80:7a:5e:
         9a:50:90:0a:58:86:92:89:95:0d:ae:33:96:49:e4:7a:d8:59:
         93:a6:75:1d:31:10:4b:86:33:a5:a4:6e:4c:3b:b4:ac:46:dc:
         57:f4:bc:09:9b:f8:f2:d2:d3:3b:5f:80:cd:2d:20:47:5a:4e:
         4b:c8:49:a2:b0:9b:14:17:34:44:29:5a:ce:ce:71:1f:52:ed:
         0c:17:ae:cc:ae:63:29:ed:70:cf:93:7d:71:2d:54:ea:8a:e8:
         03:96:58:5e:02:e8:e7:93:1a:e7:1a:41:f5:be:cf:fe:ee:09:
         af:cd:43:41:41:e5:78:3c:7a:55:7a:a9:e4:a5:08:f5:69:02:
         16:d6:5a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:10 2026 by rpki-client