Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
File:                     13auCasbyUrOg_pv02rFIoZ7kuo.mft (raw, json)
Hash identifier:          /rKna5w0ZurlrpeBfdglkU9oDFmTRM0Dl9CjX97xDDk=
Subject key identifier:   23:76:2C:F9:64:85:06:5F:CB:E8:73:6B:C6:5F:00:E0:E8:48:91:AB
Authority key identifier: D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
Certificate issuer:       /CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Certificate serial:       019FA26047F9C0CCBECA35A2B72BC2B17F64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
Manifest number:          19CF
Signing time:             Mon 27 Jul 2026 07:00:46 +0000
Manifest this update:     Mon 27 Jul 2026 07:00:46 +0000
Manifest next update:     Tue 28 Jul 2026 07:00:46 +0000
Files and hashes:         1: 13auCasbyUrOg_pv02rFIoZ7kuo.crl (hash: iPrbRab+xXeEj81fZOg0HlpUwfJwWw2K+0mdJEtFZjM=)
                          2: yQF_oqKXVguMAr3971D21MlrR_8.roa (hash: rXFsVsTmW2PojlnuQAcJtT+oQ2/oW7PggfH906SCVtQ=)
                          3: ywVR7woUIzneTMtjfuoirWk196k.roa (hash: i+MATSFKerXwDHLKNUICE818LV3sf8RvOyqaZnW8Yrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 07:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:60:47:f9:c0:cc:be:ca:35:a2:b7:2b:c2:b1:7f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
        Validity
            Not Before: Jul 27 07:00:46 2026 GMT
            Not After : Jul 28 07:00:46 2026 GMT
        Subject: CN=23762cf96485065fcbe8736bc65f00e0e84891ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e1:15:4c:c4:ad:42:ac:9f:8e:7f:61:c8:2e:
                    8d:08:99:f3:d6:ba:6c:5e:b4:e0:41:7f:e9:1e:b2:
                    ff:31:d4:18:82:ff:4f:66:8f:91:03:4b:71:0d:67:
                    35:c4:67:9e:18:a3:f7:b5:3e:40:0e:90:d8:92:98:
                    92:94:29:69:8e:cb:d9:d2:1c:a7:30:c7:96:85:c8:
                    2d:bd:6e:ca:2b:5f:0b:a1:30:58:d4:57:f1:4d:85:
                    5c:78:eb:fd:b4:65:f1:b1:69:47:84:ba:59:92:62:
                    b3:f1:bc:79:3c:8b:7e:d9:5c:0c:1a:cf:8e:4f:fc:
                    04:18:71:2a:2e:d5:62:f9:39:c2:a9:96:ea:89:2e:
                    f2:e9:47:d4:8c:c7:86:6a:71:4e:21:cd:3b:09:d5:
                    61:fc:a2:60:d6:99:4a:2d:32:7a:a2:29:5c:34:e1:
                    cf:53:9a:27:d8:30:94:ee:28:b9:b2:94:88:1b:36:
                    8b:81:c9:b4:3d:39:0b:ab:bc:46:68:64:5e:83:d5:
                    7a:9f:ee:8d:d4:1c:70:64:10:84:8a:89:85:97:4f:
                    f2:bf:43:08:07:a0:cb:e7:8a:e0:6b:3f:9f:92:81:
                    88:42:44:87:bc:b4:f5:d1:bb:d2:0b:e5:94:39:3a:
                    08:b1:3d:50:da:43:e8:01:ed:ff:86:9b:4d:6e:89:
                    85:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:76:2C:F9:64:85:06:5F:CB:E8:73:6B:C6:5F:00:E0:E8:48:91:AB
            X509v3 Authority Key Identifier:
                keyid:D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:05:f6:25:7c:17:86:ce:9a:af:f5:ec:08:91:02:49:99:63:
         62:de:ff:59:b3:7b:33:56:1f:a9:49:6f:0f:6c:bf:30:cd:1c:
         b0:6e:2b:8d:19:b0:d1:3c:43:b7:e5:f1:18:ed:fb:65:c9:59:
         cc:1e:d0:87:b1:1c:0c:89:0c:f4:9e:f3:bb:fe:dc:c2:94:d4:
         5d:fd:4d:35:48:c9:09:8f:98:ef:6c:a0:05:9b:e4:32:00:bb:
         bf:91:e9:ea:fb:ea:97:e3:88:38:5d:18:e1:ac:7b:c6:bb:7f:
         2b:07:0c:72:af:f9:97:d6:60:d6:df:ce:f8:6c:e5:b9:22:6b:
         54:8f:bb:92:a4:a7:82:7d:b5:bd:1a:46:b5:9c:5f:98:f0:8a:
         a1:46:58:bf:e5:36:b7:f4:eb:e2:8d:73:68:be:ce:56:92:87:
         53:da:df:4d:53:20:46:30:fb:f2:74:b9:af:ec:c2:be:9b:52:
         ff:a4:76:ac:e4:7a:d6:bd:e9:f3:72:f8:b8:bb:ac:1a:62:d9:
         d9:ff:df:4b:89:95:ba:23:34:44:69:00:fa:84:46:08:25:c7:
         14:42:7a:a0:0e:c5:36:8c:73:19:dc:37:72:a8:ed:9b:d9:eb:
         94:f4:d5:12:a5:05:7d:ef:26:9b:cb:aa:4f:d9:b1:04:c3:d6:
         fa:ad:89:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:37:13 2026 by rpki-client