Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File:                     AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier:          CwiUwprhj2SaGB27e2bScRxUmRQD081T0n2Abfxchlo=
Subject key identifier:   59:38:9D:83:16:1D:81:4C:24:DC:E0:65:54:89:36:8F:11:93:FD:5A
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer:       /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial:       01A00101DBD3B4D96ED7E2C37F45CE8D87B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number:          13F8
Signing time:             Fri 14 Aug 2026 16:01:34 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:34 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:34 +0000
Files and hashes:         1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: eSFQH5kxctpDXpmmj6IrcJMk32fjaZXb0UJK+xjHXLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:db:d3:b4:d9:6e:d7:e2:c3:7f:45:ce:8d:87:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
        Validity
            Not Before: Aug 14 16:01:34 2026 GMT
            Not After : Aug 15 16:01:34 2026 GMT
        Subject: CN=59389d83161d814c24dce0655489368f1193fd5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0b:a9:e4:6f:f9:06:b8:c8:11:39:b4:b5:d3:
                    62:1d:ea:c8:9a:98:23:04:66:46:15:74:5e:b3:b1:
                    e8:07:b2:de:b4:7f:23:e3:72:4f:62:93:b7:7f:51:
                    c7:3b:c7:79:8e:cd:9c:27:61:7a:0c:99:cc:10:5b:
                    9d:68:ff:fd:9b:9c:12:71:d5:2c:ab:76:05:41:3e:
                    88:90:63:32:93:7c:01:5b:e2:37:06:51:6c:e9:74:
                    b7:de:e2:19:5c:fd:3d:32:25:c0:0d:7c:2e:a6:c9:
                    1a:9f:2f:97:ee:64:cf:bb:df:0a:8d:33:78:e4:58:
                    1f:8b:0b:39:c9:5b:7a:cf:cb:10:8a:7e:64:70:3d:
                    d9:93:99:6c:eb:0e:83:59:40:7f:aa:bc:fb:9b:5c:
                    2f:9a:97:8a:d4:c6:ee:16:22:49:de:3d:3d:c3:be:
                    ba:39:e8:3a:5c:ac:30:6d:22:90:bd:0b:19:83:7c:
                    39:59:71:39:d8:ee:83:3f:f3:72:23:52:5f:46:00:
                    5a:44:50:d8:d4:df:32:e7:49:84:98:b0:f0:83:30:
                    44:cf:89:20:80:5e:b0:18:df:7b:c6:61:6a:17:01:
                    23:f0:d1:d8:50:a2:e1:f6:2c:ba:1e:1a:7a:3d:ff:
                    9a:96:b8:2d:b0:61:7e:25:0e:75:5f:90:93:7f:4c:
                    a4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:38:9D:83:16:1D:81:4C:24:DC:E0:65:54:89:36:8F:11:93:FD:5A
            X509v3 Authority Key Identifier:
                keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:29:82:13:9d:5e:74:3f:e2:62:bd:08:db:8c:84:7c:d5:81:
         a2:d1:c6:53:2b:26:ad:70:4f:66:0b:ee:ee:af:15:41:cb:d9:
         15:36:1a:89:04:51:9e:69:74:b0:a3:4f:b3:80:f7:e0:12:15:
         a9:95:af:a9:3e:3a:32:95:ad:99:eb:18:d9:80:52:3b:41:76:
         db:24:70:38:1d:a2:de:33:01:42:d5:e5:53:2a:f6:b2:cb:7f:
         c1:44:39:70:fd:8f:ac:ee:aa:b7:ec:f8:75:8c:c6:4c:d9:55:
         60:c9:b1:01:b3:52:7d:0c:cf:15:ae:65:ea:52:03:54:37:20:
         65:ee:9e:e6:c4:36:fa:88:1d:88:29:eb:9a:66:22:74:0b:68:
         0d:6a:df:98:c6:4f:d4:a5:71:72:2a:c3:62:43:26:f7:df:fa:
         aa:3a:3d:74:06:c9:b2:fb:aa:13:11:1e:d5:22:43:39:c6:9c:
         c3:f0:c6:02:aa:6d:e3:22:f5:e0:6a:ce:c5:af:a2:6c:7e:0d:
         14:17:90:2e:41:ae:ce:75:2c:e6:85:5e:ba:40:c0:7d:a0:c5:
         c7:52:f8:4d:b0:04:46:e4:fc:2b:c7:4e:32:0a:31:3b:20:ae:
         d0:e8:9a:a1:80:db:7a:38:a6:70:43:15:a0:0a:c4:f4:64:8d:
         9b:2e:89:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABAdvTtNlu1+LDf0XOjYe0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMGJlOTEzMjEwNzQ0MzRjOWU4MjBkYjY2MWM5MWNhNjJj
Y2IwZmQwHhcNMjYwODE0MTYwMTM0WhcNMjYwODE1MTYwMTM0WjAzMTEwLwYDVQQD
Eyg1OTM4OWQ4MzE2MWQ4MTRjMjRkY2UwNjU1NDg5MzY4ZjExOTNmZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Qup5G/5BrjIETm0tdNiHerImpgj
BGZGFXRes7HoB7LetH8j43JPYpO3f1HHO8d5js2cJ2F6DJnMEFudaP/9m5wScdUs
q3YFQT6IkGMyk3wBW+I3BlFs6XS33uIZXP09MiXADXwupskany+X7mTPu98KjTN4
5Fgfiws5yVt6z8sQin5kcD3Zk5ls6w6DWUB/qrz7m1wvmpeK1MbuFiJJ3j09w766
Oeg6XKwwbSKQvQsZg3w5WXE52O6DP/NyI1JfRgBaRFDY1N8y50mEmLDwgzBEz4kg
gF6wGN97xmFqFwEj8NHYUKLh9iy6Hhp6Pf+alrgtsGF+JQ51X5CTf0yk8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFk4nYMWHYFMJNzgZVSJNo8Rk/1aMB8GA1UdIwQY
MBaAFAML6RMhB0Q0yegg22YckcpizLD9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXd2cEV5RUhSRFRKNkNEYlpoeVJ5bUxNc1AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xM2RmOTAtNzFiYy00MGJlLTgyNGUt
MmM0MGQ4MTFmZDRlLzEvQXd2cEV5RUhSRFRKNkNEYlpoeVJ5bUxNc1AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8xM2RmOTAtNzFiYy00MGJlLTgyNGUtMmM0MGQ4MTFmZDRl
LzEvQXd2cEV5RUhSRFRKNkNEYlpoeVJ5bUxNc1AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASimCE51e
dD/iYr0I24yEfNWBotHGUysmrXBPZgvu7q8VQcvZFTYaiQRRnml0sKNPs4D34BIV
qZWvqT46MpWtmesY2YBSO0F22yRwOB2i3jMBQtXlUyr2sst/wUQ5cP2PrO6qt+z4
dYzGTNlVYMmxAbNSfQzPFa5l6lIDVDcgZe6e5sQ2+ogdiCnrmmYidAtoDWrfmMZP
1KVxcirDYkMm99/6qjo9dAbJsvuqExEe1SJDOcacw/DGAqpt4yL14GrOxa+ibH4N
FBeQLkGuznUs5oVeukDAfaDFx1L4TbAERuT8K8dOMgoxOyCu0OiaoYDbejimcEMV
oArE9GSNmy6Jpg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:21:06 2026 by rpki-client