Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
File:                     13auCasbyUrOg_pv02rFIoZ7kuo.mft (raw, json)
Hash identifier:          U60m1swJcfcljhrh4XIm7yGsrAEiEX/RNU0DOdfVXUY=
Subject key identifier:   13:DE:13:76:0E:EC:43:D5:61:6F:90:7A:30:59:A2:DE:9E:19:CB:33
Authority key identifier: D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
Certificate issuer:       /CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Certificate serial:       019FAC083D2193416C06EE053CF982015437
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
Manifest number:          19D4
Signing time:             Wed 29 Jul 2026 04:00:48 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:48 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:48 +0000
Files and hashes:         1: 13auCasbyUrOg_pv02rFIoZ7kuo.crl (hash: tDpzWDVfcRPjVDiGp12126XNpybctb8UjhOU5TD9pf8=)
                          2: yQF_oqKXVguMAr3971D21MlrR_8.roa (hash: rXFsVsTmW2PojlnuQAcJtT+oQ2/oW7PggfH906SCVtQ=)
                          3: ywVR7woUIzneTMtjfuoirWk196k.roa (hash: i+MATSFKerXwDHLKNUICE818LV3sf8RvOyqaZnW8Yrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:3d:21:93:41:6c:06:ee:05:3c:f9:82:01:54:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
        Validity
            Not Before: Jul 29 04:00:48 2026 GMT
            Not After : Jul 30 04:00:48 2026 GMT
        Subject: CN=13de13760eec43d5616f907a3059a2de9e19cb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:18:67:8e:51:4c:aa:e1:a8:ae:18:50:bb:a4:
                    3a:48:17:20:51:7c:f6:e8:ba:bd:e3:6d:94:98:b9:
                    87:a5:70:de:c8:e3:67:9e:6f:35:7d:5d:38:09:98:
                    b4:76:67:5d:46:02:a6:d9:24:fd:aa:b8:2a:13:4b:
                    d8:d3:42:36:df:be:17:1b:96:f6:8a:5f:0b:7b:4a:
                    db:e3:16:fa:ac:aa:b3:c3:01:f8:8c:e8:07:5d:78:
                    68:c8:20:c9:1c:4c:5e:a7:9b:09:c6:c2:af:71:a2:
                    ce:1a:51:d0:de:28:55:cc:4c:53:6f:eb:83:03:44:
                    bd:36:2c:56:16:d0:da:50:0c:5a:95:4d:6b:33:e2:
                    9c:36:22:fd:21:b3:a1:1f:44:f2:df:df:18:5b:a7:
                    96:e6:ba:b6:a2:5e:82:35:2b:65:12:72:08:d5:a5:
                    1c:8b:53:e7:c6:4e:e9:8e:17:a2:50:e6:46:6c:92:
                    a5:49:11:99:8e:3c:37:04:bd:e4:36:87:a2:fc:e2:
                    2c:74:a7:72:4d:67:54:4b:ff:39:88:23:3f:55:0b:
                    53:09:3d:ae:36:12:d1:76:cb:7a:e3:64:e2:45:5c:
                    27:ce:aa:b4:64:f4:f4:df:12:6d:c1:bc:d7:80:39:
                    46:2e:51:12:e8:6d:8b:71:10:5f:1b:39:96:ce:27:
                    75:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DE:13:76:0E:EC:43:D5:61:6F:90:7A:30:59:A2:DE:9E:19:CB:33
            X509v3 Authority Key Identifier:
                keyid:D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:f6:2c:df:87:f8:86:fc:56:7a:22:5d:10:f4:67:93:30:1b:
         7e:fd:b3:b8:ee:47:c9:3c:e8:cb:85:26:14:ce:45:eb:ac:2c:
         1d:74:d4:1b:bd:d6:2f:3c:c7:91:8f:17:ca:ea:f2:a5:90:c6:
         10:9d:70:46:d0:3d:20:76:e3:42:c5:72:51:cf:66:07:0b:67:
         1c:c6:02:bc:4a:da:0a:cd:ee:3c:b4:9c:29:f4:b2:f2:eb:7c:
         92:19:2f:b2:35:42:6b:9b:40:67:bf:12:c1:7c:51:e3:b6:da:
         9b:9c:a5:7c:ac:0b:bc:79:c0:b0:15:78:bf:c7:30:77:c9:e9:
         74:ec:71:7e:36:fd:e1:a3:d2:4e:ea:74:5f:79:d8:31:80:84:
         15:3d:61:97:74:39:f1:8e:91:7c:fc:7e:86:cb:b5:ec:8a:4e:
         aa:ed:d6:bc:29:2d:73:6c:fe:77:15:24:b5:6a:2d:c6:0c:00:
         4e:e8:d4:d3:4a:71:9b:78:24:4d:08:61:31:c1:31:2d:d1:5b:
         82:24:c5:ef:82:95:0b:29:03:65:f7:a8:06:76:ad:43:ba:b9:
         b5:82:a0:9b:44:3b:74:ce:06:80:67:43:4e:89:c0:45:2d:0d:
         94:4e:1e:47:1b:33:4a:de:d0:56:19:13:d7:b1:52:98:7d:95:
         ee:51:0e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:31:29 2026 by rpki-client