Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
File:                     13j4yccHK3MEiPnjISjdiVveMtM.mft (raw, json)
Hash identifier:          pz2xcEk+mOlTaxKjEwo//WQJ3EhI5bkj/zVaRkXBKrg=
Subject key identifier:   55:F9:C6:FF:8A:58:5E:C0:A9:85:0B:EA:08:45:0B:28:73:00:D6:A0
Authority key identifier: D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
Certificate issuer:       /CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Certificate serial:       019F1867EC40A4C731D7FCEB7722266A6C45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
Manifest number:          09A1
Signing time:             Tue 30 Jun 2026 12:01:31 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:31 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:31 +0000
Files and hashes:         1: 13j4yccHK3MEiPnjISjdiVveMtM.crl (hash: 0iiyYtu+2HIsmjmIqGgj/utw4w7XOmsUcFOJ9rDrHRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:ec:40:a4:c7:31:d7:fc:eb:77:22:26:6a:6c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d778f8c9c7072b730488f9e32128dd895bde32d3
        Validity
            Not Before: Jun 30 12:01:31 2026 GMT
            Not After : Jul  1 12:01:31 2026 GMT
        Subject: CN=55f9c6ff8a585ec0a9850bea08450b287300d6a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:dc:42:0d:55:7b:71:17:8a:d3:50:39:94:
                    79:a4:34:61:ec:70:79:c9:fd:79:a5:55:39:e7:3e:
                    80:3f:d2:72:33:86:a2:a1:34:33:7d:a4:7b:73:40:
                    28:cd:a7:c5:16:28:27:4f:86:6a:8f:6d:53:c6:04:
                    e0:b6:c8:39:59:c4:7b:47:15:e7:73:77:b5:9a:e3:
                    67:38:bf:eb:88:99:18:f8:3e:fb:60:49:6d:da:aa:
                    35:47:98:5b:8c:b3:8e:64:f9:83:66:a8:56:be:1f:
                    ae:23:9d:c8:1a:3a:b5:c7:b3:88:49:42:6a:d8:8f:
                    a7:b2:ad:c9:2e:15:3f:eb:74:3c:3b:2c:e0:aa:b4:
                    cc:e0:07:90:27:c7:b0:40:5d:f6:b4:6c:35:21:8c:
                    6d:74:b0:95:d3:d0:f4:e8:17:0f:c5:70:98:a7:05:
                    00:46:12:86:a3:a9:92:d1:34:15:c2:38:d4:42:92:
                    68:c8:73:22:0c:17:51:6f:1f:a9:ee:08:4f:aa:6e:
                    26:bb:b8:95:cc:3a:66:96:0f:98:4e:69:8a:df:28:
                    27:2b:81:c0:4b:63:8c:6e:f6:a1:c5:55:92:a3:f6:
                    7a:1a:c8:dc:47:9b:79:90:33:b6:39:bd:f8:23:58:
                    15:c9:b5:df:26:81:56:4c:0d:62:81:70:10:57:64:
                    c4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F9:C6:FF:8A:58:5E:C0:A9:85:0B:EA:08:45:0B:28:73:00:D6:A0
            X509v3 Authority Key Identifier:
                keyid:D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ee:5c:32:50:6f:a0:1c:f5:96:79:0a:e4:17:5f:ac:0c:cc:
         e3:c9:8e:3a:0c:0d:09:b3:eb:65:3c:d1:ff:e3:a3:87:de:04:
         f4:2d:c9:16:d4:7a:c2:63:44:6b:da:57:4a:d9:31:6c:1e:21:
         06:b9:d8:f9:9d:a6:e0:75:4a:e0:c4:72:90:58:bc:1a:94:28:
         67:39:8b:d2:49:51:a7:d7:b1:66:c1:5a:93:99:35:2e:06:7d:
         78:22:f4:56:4e:38:a8:3e:8d:a8:c2:00:4e:1b:86:a3:20:53:
         db:59:59:f0:3d:3f:c1:0e:3d:40:5e:54:cd:3f:66:10:04:36:
         d9:0a:95:bc:85:fe:45:0e:bd:54:06:c8:b3:c1:e7:ba:3d:98:
         22:d4:f9:45:d6:17:77:58:9d:50:bd:f2:0b:eb:5a:6e:56:85:
         80:fa:6c:37:12:8a:e8:3b:26:74:4e:00:7d:f1:d1:1c:71:1f:
         68:30:5e:44:28:ef:f7:75:94:1c:fc:a7:e0:77:36:45:0f:3d:
         83:00:77:9d:8e:c6:7a:72:80:38:06:c5:68:7f:1c:03:97:69:
         50:5b:b4:fb:b1:dd:81:5a:44:7a:03:09:70:a4:32:1f:14:e4:
         db:84:ec:2d:67:ad:d0:f9:51:71:cd:8d:d5:f8:bd:ff:a6:f4:
         95:cc:ad:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:03 2026 by rpki-client