Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
File:                     13j4yccHK3MEiPnjISjdiVveMtM.mft (raw, json)
Hash identifier:          OFIVcmQ1ulueDstA3UAwA0i3qqfTM0rCweeiDrDaLKM=
Subject key identifier:   A2:9F:8D:57:28:12:04:E5:0A:E1:81:04:0E:60:16:50:EF:A5:9E:24
Authority key identifier: D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3
Certificate issuer:       /CN=d778f8c9c7072b730488f9e32128dd895bde32d3
Certificate serial:       01A14872ED42F1FBADE965510094DFF41EC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
Manifest number:          0AC3
Signing time:             Sat 17 Oct 2026 06:00:53 +0000
Manifest this update:     Sat 17 Oct 2026 06:00:53 +0000
Manifest next update:     Sun 18 Oct 2026 06:00:53 +0000
Files and hashes:         1: 13j4yccHK3MEiPnjISjdiVveMtM.crl (hash: 5iAh5TaOPJ+GKjl23TrIo94IXHkocZ2G9OnCGqv2oXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:72:ed:42:f1:fb:ad:e9:65:51:00:94:df:f4:1e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d778f8c9c7072b730488f9e32128dd895bde32d3
        Validity
            Not Before: Oct 17 06:00:53 2026 GMT
            Not After : Oct 18 06:00:53 2026 GMT
        Subject: CN=a29f8d57281204e50ae181040e601650efa59e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9e:e1:9f:48:25:76:d0:4c:0b:72:3a:53:e5:
                    d9:f2:f6:f6:ee:2c:b7:f1:03:48:70:af:11:9a:c8:
                    fa:fd:2f:a1:6b:6d:45:e4:a1:a3:dd:3a:39:38:23:
                    70:3e:46:73:ea:eb:b4:4f:13:c1:75:35:e1:56:e2:
                    94:18:f1:ab:fd:81:4d:39:c3:35:1c:b7:27:6a:97:
                    bf:87:a4:41:f8:27:f3:32:63:fc:59:dd:33:27:a8:
                    25:e5:2e:81:96:62:86:aa:65:50:6f:a7:37:4e:b2:
                    9d:dc:d1:e0:e7:0c:e8:ee:96:d3:2b:aa:97:3a:00:
                    37:90:12:77:ef:33:46:b3:84:c7:c3:bb:50:f7:3e:
                    08:c5:9e:41:58:8d:e6:1b:40:6e:c4:5a:75:c0:b6:
                    a8:d0:1b:19:4d:4b:82:53:9d:5f:bb:35:05:c9:11:
                    fe:b6:35:14:f1:06:5b:e1:7b:55:16:65:55:b2:56:
                    db:e3:40:2b:b3:bc:5d:33:8b:c3:3d:a3:f7:aa:8a:
                    a8:05:21:62:0e:ed:a6:d6:6b:a5:2f:ad:64:b8:e2:
                    5a:ab:4e:47:7d:19:f9:06:90:f0:05:20:b0:31:53:
                    d1:94:39:99:fa:5b:74:94:b3:3b:dc:fd:5a:09:e5:
                    69:64:96:21:f2:67:eb:41:ce:12:08:5a:df:f9:0e:
                    d4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9F:8D:57:28:12:04:E5:0A:E1:81:04:0E:60:16:50:EF:A5:9E:24
            X509v3 Authority Key Identifier:
                keyid:D7:78:F8:C9:C7:07:2B:73:04:88:F9:E3:21:28:DD:89:5B:DE:32:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13j4yccHK3MEiPnjISjdiVveMtM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/a284f7-aade-4168-a9d0-58be927f42e9/1/13j4yccHK3MEiPnjISjdiVveMtM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d5:74:c4:38:75:84:02:33:7b:ed:eb:33:ae:ba:17:29:5e:
         ac:66:a3:d6:a5:c3:d6:ad:e4:63:a7:48:6c:9b:b2:1b:00:92:
         93:b9:9e:05:85:5f:7e:86:9f:60:a8:67:eb:56:4a:e2:90:d6:
         53:6f:c6:e2:6e:96:2d:75:4e:06:97:a5:a7:88:47:04:67:ea:
         36:61:7f:4d:0c:ff:06:df:39:f8:55:b1:2c:3b:eb:d4:72:80:
         95:c0:b2:c1:f2:43:e7:9b:83:68:97:80:59:8c:b9:c7:ce:9e:
         e6:77:1c:f2:8a:3b:ff:1e:19:b9:db:66:56:93:75:61:59:c0:
         0f:7a:1c:6b:94:33:63:3d:25:9c:ae:8b:ad:0c:4c:ca:d9:0b:
         92:ca:82:4c:5c:bf:46:0c:dc:80:f2:9b:6c:8c:d5:00:9e:09:
         bf:aa:92:d3:d8:ed:b2:8f:36:69:0e:37:4c:f9:f5:d1:2c:65:
         7c:c9:1e:2b:5e:0a:96:47:c7:00:e1:a7:89:2b:6c:e3:e7:6d:
         c6:04:b5:16:1d:5f:2c:0d:ec:8a:7a:6c:a4:af:6b:5e:a8:f8:
         0e:eb:9c:d5:2a:d2:60:f6:62:b4:30:a0:83:06:d5:a5:78:b4:
         0b:90:ad:d6:8a:79:10:9b:96:86:90:98:a8:6c:7a:b4:78:b6:
         40:45:a1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:25:46 2026 by rpki-client