Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
File:                     b13p-du9RhiFe1gQXGdDcgoRvG4.mft (raw, json)
Hash identifier:          4M8euA9QHdM5T26F7P9csr/1aMhUvDd1eAAouY1hKkY=
Subject key identifier:   4C:44:DA:3A:B2:B9:0F:7D:28:F8:ED:36:92:83:2A:7E:F3:3C:E4:7E
Authority key identifier: 6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E
Certificate issuer:       /CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
Certificate serial:       019D371BAE6E93F77A60C775D152AC0D2752
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 01:00:54 +0000
Manifest this update:     Sun 29 Mar 2026 01:00:54 +0000
Manifest next update:     Mon 30 Mar 2026 01:00:54 +0000
Files and hashes:         1: GQ9oHmVrhqbw1ueu_Pk60wFQwT0.roa (hash: xIR+V2pRoZHqDiZfSfGurV0kCSe0HD6UwJQI7Hsc8KE=)
                          2: b13p-du9RhiFe1gQXGdDcgoRvG4.crl (hash: 79GZnB5S6f+Hcchae8O2JmPmtCnCjRQkMrDDKl0nO3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:ae:6e:93:f7:7a:60:c7:75:d1:52:ac:0d:27:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5de9f9dbbd4618857b58105c6743720a11bc6e
        Validity
            Not Before: Mar 29 01:00:54 2026 GMT
            Not After : Mar 30 01:00:54 2026 GMT
        Subject: CN=4c44da3ab2b90f7d28f8ed3692832a7ef33ce47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ef:5b:c9:79:8e:93:ae:93:df:ad:d2:a9:1f:
                    a5:a6:41:a9:18:80:fb:d2:73:07:a5:46:7c:05:d2:
                    9b:8f:b2:99:43:86:ef:40:7d:29:4d:32:fe:64:ea:
                    04:ec:6a:a4:0b:87:81:70:84:9f:00:9f:18:c5:fd:
                    51:58:42:e1:09:0e:d8:d9:bb:73:09:f4:a9:eb:19:
                    20:37:98:a8:64:91:b4:01:06:5e:63:a8:33:f4:71:
                    7c:7e:eb:bf:78:d8:d0:b5:c5:82:f3:dc:e6:06:af:
                    04:7b:6b:70:ca:c4:c5:72:bf:e9:f4:62:2f:d7:3e:
                    e2:ee:54:22:1a:5f:63:ed:4c:c3:22:6f:91:7d:cf:
                    af:f0:76:44:94:b3:58:37:dc:fe:c2:69:9e:ce:e9:
                    42:72:54:08:b6:ec:a3:01:b9:ad:f1:f7:19:78:07:
                    4c:2d:06:7b:1d:52:4b:9e:83:32:4a:51:d7:8c:45:
                    45:4d:40:95:3d:9e:5c:ea:8c:91:93:88:f3:ac:2d:
                    b3:d6:09:c1:31:26:7b:d0:64:4d:e9:6b:5f:b0:13:
                    43:1d:26:52:3f:58:80:2f:b2:f2:f1:f5:3b:f1:b9:
                    58:7a:43:84:38:aa:fa:b6:74:20:81:f4:7c:48:d9:
                    4d:57:bc:23:ab:98:80:21:ab:d0:de:b4:51:94:39:
                    67:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:44:DA:3A:B2:B9:0F:7D:28:F8:ED:36:92:83:2A:7E:F3:3C:E4:7E
            X509v3 Authority Key Identifier:
                keyid:6F:5D:E9:F9:DB:BD:46:18:85:7B:58:10:5C:67:43:72:0A:11:BC:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b13p-du9RhiFe1gQXGdDcgoRvG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/61fcb4-5574-4e2e-b259-ae05794c8e13/1/b13p-du9RhiFe1gQXGdDcgoRvG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:1b:17:5f:30:eb:56:20:f3:e5:d4:b6:20:6d:a8:0f:3e:03:
         e9:6f:02:fa:83:17:4d:13:62:de:f6:f0:e3:bd:6c:d2:c1:f3:
         9e:ea:06:ae:ad:b7:22:7c:78:6d:a9:ce:9c:ec:8f:79:d8:17:
         60:f6:99:4a:25:0f:55:d6:4c:4d:21:24:f8:27:3e:9d:92:85:
         c8:0d:a3:91:e1:c3:dd:4a:87:6a:4d:e4:70:3c:09:fa:76:ee:
         72:6c:92:b1:97:f2:81:74:9d:2a:d0:6a:32:0f:cb:fa:6a:d9:
         c4:88:1e:b6:07:19:c2:6e:5c:c9:99:9c:2b:ec:65:e4:04:4a:
         e2:3a:23:f3:b5:29:a3:3a:24:11:db:0a:91:c7:47:4d:2e:07:
         b8:e3:07:cc:d1:de:30:59:a6:76:0a:72:56:4b:71:84:97:4e:
         b4:67:f5:75:6c:9e:0c:a5:35:e3:b7:f2:8c:a6:8e:e1:0d:9f:
         42:11:4a:e4:fd:84:02:45:06:41:71:96:18:03:6c:2d:cb:d3:
         ff:b8:05:84:32:ce:52:e6:9a:62:e3:0d:37:dd:11:7c:60:1e:
         da:4d:94:b1:57:da:d3:b6:3c:33:e5:70:19:38:16:a5:2a:b7:
         e1:bb:fc:a5:3c:87:77:1a:41:85:10:15:60:e8:36:5f:e2:b5:
         d0:ea:a3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:58 2026 by rpki-client