Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File:                     AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier:          Nr/dB7FUdYgF3JwvzIn/+IRdW9ahAz1Wz4lt2UjK3xE=
Subject key identifier:   DB:18:47:BA:DB:1A:17:DD:81:C3:6C:86:C2:DA:66:41:1A:53:38:8A
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer:       /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial:       019E2F96568BC389BEB13F81DACAAC463905
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number:          1307
Signing time:             Sat 16 May 2026 07:00:42 +0000
Manifest this update:     Sat 16 May 2026 07:00:42 +0000
Manifest next update:     Sun 17 May 2026 07:00:42 +0000
Files and hashes:         1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: VlcxyOrhzJcVcV+t0zKUZpvtNBslPjuATL/N6jh0ruE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:56:8b:c3:89:be:b1:3f:81:da:ca:ac:46:39:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
        Validity
            Not Before: May 16 07:00:42 2026 GMT
            Not After : May 17 07:00:42 2026 GMT
        Subject: CN=db1847badb1a17dd81c36c86c2da66411a53388a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:3e:a5:08:60:7c:a5:3c:81:b7:0f:b0:1c:
                    ef:1b:50:44:45:be:ba:5f:d8:3d:a4:ad:88:fa:09:
                    75:e3:1a:34:68:84:b1:bf:f1:3c:79:00:51:d1:6b:
                    a4:1c:a3:ba:ec:4c:a9:2b:bb:10:6f:b1:f8:23:95:
                    fe:8d:0d:8c:71:e6:26:ea:1a:c4:48:64:d5:7b:94:
                    c1:90:2b:21:c9:65:a1:19:59:27:1b:18:b1:76:43:
                    73:cf:da:72:c5:6d:9c:8e:00:50:62:b2:09:2a:ad:
                    47:9b:34:54:ca:33:11:8e:d0:66:cc:12:91:ae:e7:
                    d3:55:92:44:51:55:06:99:88:f0:b4:3a:fb:86:b2:
                    63:b1:16:52:11:0f:81:1d:65:d4:f3:78:92:07:a2:
                    ab:93:be:cd:29:d2:0f:af:7e:db:35:9b:c8:62:1f:
                    ee:b4:c5:64:ad:fa:25:29:c0:55:ff:cc:f8:31:9a:
                    50:ef:db:29:98:fd:09:43:50:4b:5f:91:34:43:10:
                    16:ac:cc:1a:bd:c4:f7:55:41:3e:ef:65:ed:22:a3:
                    2d:59:b8:bd:9f:15:e9:c0:52:81:1b:f5:0f:e7:95:
                    c4:72:87:b2:65:f7:f6:cf:58:66:5a:58:74:cd:8f:
                    b7:12:93:13:68:47:a7:f0:75:c2:eb:fd:b1:b4:a4:
                    95:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:18:47:BA:DB:1A:17:DD:81:C3:6C:86:C2:DA:66:41:1A:53:38:8A
            X509v3 Authority Key Identifier:
                keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:74:f1:c8:dd:e1:84:3f:68:7e:10:8f:4f:86:cb:87:27:a0:
         bf:7f:ec:2d:69:21:ea:b5:5c:52:18:1b:16:db:46:e3:d0:77:
         66:dd:d6:0f:ff:77:9d:9e:b7:a5:65:29:48:2f:7b:75:6f:c2:
         45:94:c7:60:cb:68:1c:af:1f:95:d7:f2:a9:e6:87:f2:e3:4b:
         c4:58:35:54:cd:d3:da:1f:01:2e:f2:4a:e5:a5:16:1a:7a:1c:
         98:7c:1d:33:47:10:95:90:e0:23:91:9e:d4:91:79:3c:8b:11:
         cd:53:ad:c9:96:df:6a:5e:af:b9:d5:19:2c:39:98:0a:30:a1:
         f7:98:bd:a2:46:e1:74:87:f7:34:53:76:da:98:4b:7f:f8:db:
         c2:9d:f2:46:42:20:5d:02:0a:e3:2a:48:c8:c6:cf:b0:b9:83:
         4b:e0:4a:8b:97:27:c0:3b:c1:6e:e7:e6:c2:d2:1d:f2:56:21:
         97:f4:35:b6:aa:58:04:69:16:50:30:16:cf:40:da:e2:1f:63:
         be:b9:43:8f:26:3e:57:88:59:b4:7f:47:87:ad:0b:c3:c0:d4:
         29:38:c6:bb:c5:af:70:c3:5a:44:f0:c5:6e:1e:fc:e9:8b:e4:
         e5:47:be:8b:90:7f:da:5f:5b:26:79:5d:39:7e:a8:5e:84:20:
         0b:d5:53:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:54:28 2026 by rpki-client