Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
File:                     13auCasbyUrOg_pv02rFIoZ7kuo.mft (raw, json)
Hash identifier:          08S3SdrsApgGVQ5zah//+KQZFg3qdNT8I8vfWtqFk1g=
Subject key identifier:   EC:0A:0B:6A:24:35:2F:AC:81:C0:5E:E6:9D:EF:4D:17:EE:3E:C0:82
Authority key identifier: D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
Certificate issuer:       /CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Certificate serial:       019CAD59B9A865AEE0099673C54B596EB474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 07:01:04 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:04 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:04 +0000
Files and hashes:         1: 13auCasbyUrOg_pv02rFIoZ7kuo.crl (hash: oZ2aeaesCriCQ7otGxKlT5BXNnubqd+I8RNkY7d8iXI=)
                          2: yQF_oqKXVguMAr3971D21MlrR_8.roa (hash: rXFsVsTmW2PojlnuQAcJtT+oQ2/oW7PggfH906SCVtQ=)
                          3: ywVR7woUIzneTMtjfuoirWk196k.roa (hash: i+MATSFKerXwDHLKNUICE818LV3sf8RvOyqaZnW8Yrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:b9:a8:65:ae:e0:09:96:73:c5:4b:59:6e:b4:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
        Validity
            Not Before: Mar  2 07:01:04 2026 GMT
            Not After : Mar  3 07:01:04 2026 GMT
        Subject: CN=ec0a0b6a24352fac81c05ee69def4d17ee3ec082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:60:3e:70:5e:0c:6e:b6:bd:5f:51:ee:e4:63:
                    b6:13:6e:e1:20:c4:d4:7a:cf:a5:1f:4b:6e:1b:00:
                    78:02:65:68:d2:9b:e1:21:b9:fc:4c:1d:76:88:ec:
                    ee:45:26:9d:7d:ed:73:ad:d1:2d:d7:25:31:12:1b:
                    aa:53:e7:a4:6c:7b:79:f2:31:32:6b:e1:82:2b:b5:
                    eb:76:d4:ee:d5:d9:78:1a:a9:09:51:b9:83:6f:25:
                    9b:84:15:51:5e:6b:ca:fa:d4:1c:19:0c:b6:61:44:
                    7d:05:7d:a0:f7:a7:18:3c:91:7a:30:e8:d8:ba:1b:
                    55:9d:c6:43:23:f0:53:51:1b:90:25:d8:c0:c6:d6:
                    c6:a6:fd:9d:30:5d:22:01:cf:13:ae:00:f5:d0:2a:
                    c6:ea:5a:0b:2e:a6:2f:fd:c0:54:14:ff:d2:1f:61:
                    a3:27:da:54:eb:b3:ac:11:00:86:53:77:86:60:dd:
                    d4:bd:b5:41:5f:a5:8e:00:ff:ff:4f:e5:15:9a:dd:
                    9a:67:f6:a1:f1:35:22:00:56:ba:a2:4a:0d:de:d1:
                    1f:d0:b9:08:64:c9:d8:dd:e5:76:2d:ee:df:f3:21:
                    06:5f:e2:67:3f:53:71:88:0e:ba:d5:b5:f2:27:a9:
                    43:40:b0:7a:f0:9d:eb:fc:3f:ad:b5:e0:ac:53:11:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0A:0B:6A:24:35:2F:AC:81:C0:5E:E6:9D:EF:4D:17:EE:3E:C0:82
            X509v3 Authority Key Identifier:
                keyid:D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:eb:72:b9:d6:30:8a:05:93:02:b2:71:6a:5b:3e:aa:78:47:
         1c:e4:c3:88:e1:f2:fe:41:9b:5c:d5:d3:8b:17:0b:6f:8a:a7:
         a8:7d:c8:96:ed:9c:f5:15:81:b0:f8:ef:7f:16:9b:08:6d:c8:
         71:f5:17:33:66:d4:d6:c2:84:4f:b2:24:fd:07:4f:f0:0b:c5:
         6b:01:b2:8c:84:1c:56:4b:6d:37:33:e2:81:62:f0:46:f8:10:
         ea:5e:b3:9d:a5:07:d7:b3:ec:99:41:45:46:bc:09:13:5a:6d:
         9c:e0:68:7f:de:e8:e4:76:73:72:61:db:a1:77:91:39:8c:4e:
         2f:5c:d1:51:53:07:0c:cb:03:a3:69:64:25:f4:27:62:05:57:
         b9:f9:c4:d6:5e:e4:7a:9d:5e:db:80:62:17:5f:42:09:ee:96:
         5c:c6:22:7a:d1:d4:69:51:c7:c2:28:76:65:12:6b:4d:66:3f:
         5c:d6:2e:6d:9c:1c:65:b9:32:37:43:a2:44:5c:05:8a:32:28:
         66:32:d1:01:eb:3a:5c:1d:df:33:35:6a:79:cc:96:2d:41:cb:
         45:0b:88:2f:d8:66:c1:88:74:bd:df:15:ab:e4:40:7e:58:ec:
         2d:32:c2:bf:2b:ee:4b:ef:d1:72:f9:84:0d:52:cd:e4:f5:de:
         bf:b3:94:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:27:41 2026 by rpki-client