Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
File:                     13auCasbyUrOg_pv02rFIoZ7kuo.mft (raw, json)
Hash identifier:          TAaLv1nVdIgAg3Cl+qkhFGSM3S52ADbJ75aFoq6c1Og=
Subject key identifier:   AC:61:38:1F:BD:B8:00:1E:7B:57:D5:B3:16:91:89:EE:23:8B:7A:02
Authority key identifier: D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
Certificate issuer:       /CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Certificate serial:       01A08C0CEAB4308E15D33F369817E0A50CC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
Manifest number:          1A48
Signing time:             Thu 10 Sep 2026 16:00:51 +0000
Manifest this update:     Thu 10 Sep 2026 16:00:51 +0000
Manifest next update:     Fri 11 Sep 2026 16:00:51 +0000
Files and hashes:         1: 13auCasbyUrOg_pv02rFIoZ7kuo.crl (hash: dBffQUoFgOub/ksNSfPA+bLo+v7TaNAcZh3D5OEQuWw=)
                          2: yQF_oqKXVguMAr3971D21MlrR_8.roa (hash: rXFsVsTmW2PojlnuQAcJtT+oQ2/oW7PggfH906SCVtQ=)
                          3: ywVR7woUIzneTMtjfuoirWk196k.roa (hash: i+MATSFKerXwDHLKNUICE818LV3sf8RvOyqaZnW8Yrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0c:ea:b4:30:8e:15:d3:3f:36:98:17:e0:a5:0c:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
        Validity
            Not Before: Sep 10 16:00:51 2026 GMT
            Not After : Sep 11 16:00:51 2026 GMT
        Subject: CN=ac61381fbdb8001e7b57d5b3169189ee238b7a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:86:9e:b8:54:ad:80:a2:62:a7:19:14:9c:b6:
                    d5:7a:f7:44:47:ca:23:ff:6f:92:6c:2d:19:b7:79:
                    9e:dc:37:96:0e:34:f6:f7:20:15:22:9c:51:1f:c0:
                    5d:6a:d4:46:87:c3:b2:5b:23:a2:f6:6b:b9:f9:98:
                    09:e7:03:29:d9:aa:c9:3c:e3:d0:83:b0:ac:60:2c:
                    5d:b3:17:2f:ed:e5:c1:2d:f9:66:ac:d5:2f:67:1a:
                    6a:36:23:28:7e:3d:af:d5:35:ae:d6:5c:7e:e0:de:
                    0a:a5:40:5c:99:68:75:1e:8f:d4:e3:d8:c6:24:b4:
                    dc:4e:c3:2b:aa:87:35:be:bb:fd:6e:42:55:29:f1:
                    5e:98:ea:aa:4d:d1:6b:94:29:bb:b2:6d:8c:d5:d4:
                    18:53:6b:6e:6c:d6:e7:7b:c8:e3:22:4f:e3:85:29:
                    92:c8:24:6c:f4:fe:a4:6c:03:cb:69:2a:1b:80:87:
                    64:55:c0:45:23:d9:f4:b8:4b:2c:68:72:48:5f:4c:
                    c7:78:a3:63:d2:99:25:b9:03:a2:6b:76:7a:3d:d0:
                    37:63:d9:0b:0b:6a:bb:a6:ff:4f:6d:bc:9f:e5:57:
                    1d:05:7b:eb:32:48:a4:6b:59:12:08:46:83:4d:2a:
                    48:b0:85:1e:4b:b1:c3:f1:a1:40:bc:86:10:fb:29:
                    6f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:61:38:1F:BD:B8:00:1E:7B:57:D5:B3:16:91:89:EE:23:8B:7A:02
            X509v3 Authority Key Identifier:
                keyid:D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:9e:c5:97:32:1e:28:0d:92:d2:a7:75:df:e9:f8:2d:53:a5:
         4d:5c:6d:2c:76:db:3e:2d:fc:5f:0c:3a:9c:f8:50:18:00:c5:
         b0:4f:ad:91:7b:09:2d:ff:ba:37:6d:b9:06:d2:d4:b1:33:e5:
         69:e6:41:d2:c6:22:f2:1e:79:58:b4:41:a7:a1:69:c7:8e:58:
         b0:26:25:7b:dd:d4:37:01:de:89:b0:b1:dd:1f:09:00:02:16:
         df:87:1c:47:e0:3d:7d:c0:7d:42:d9:4e:a7:bd:47:a2:79:4a:
         4c:45:5b:50:b1:81:5e:40:77:3f:03:fc:fc:86:93:bb:7d:7c:
         b4:e4:b3:9b:02:1a:52:03:3c:f2:0b:69:70:2b:df:13:3b:0b:
         c0:cd:8a:aa:c7:16:de:46:91:f7:9f:8f:49:c8:fc:b5:e9:26:
         85:ff:c0:4e:88:25:2f:35:97:3e:b5:45:48:8d:ad:36:f8:d9:
         63:87:00:e0:9c:e2:06:a0:8c:a1:76:de:61:06:fc:fc:7e:18:
         5f:12:85:51:c8:a2:80:40:d9:ee:f2:26:cd:ad:c3:dc:60:ae:
         a0:a8:d8:99:f7:bc:6e:2d:73:3d:ff:1d:b2:15:ad:d3:16:9f:
         91:af:48:4e:d7:64:9c:2e:64:66:29:79:d5:71:a4:6d:9b:da:
         82:55:e9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:15:14 2026 by rpki-client