Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File:                     13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier:          KTnLihbsp55MX36CurdAPvMMVYBvGgX3NP4uCws1TGk=
Subject key identifier:   57:E8:DC:E8:2E:F3:AA:A5:D4:FB:44:B2:FB:D2:3D:42:8D:AB:DF:73
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer:       /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial:       019E30728349EA8EF41EB8EB52FA2F536BD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number:          0DCB
Signing time:             Sat 16 May 2026 11:01:11 +0000
Manifest this update:     Sat 16 May 2026 11:01:11 +0000
Manifest next update:     Sun 17 May 2026 11:01:11 +0000
Files and hashes:         1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: +Lv9Idmgpajey8ovGQhryIyh/JwAc63zwutwKKR72n4=)
                          2: lAjUh0yd7DRPhi-W3SSvqev0w_E.roa (hash: YCOHiUTXUD1rmQesFlzNj90jbAUp9KL2LXtb7YGRhtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:83:49:ea:8e:f4:1e:b8:eb:52:fa:2f:53:6b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
        Validity
            Not Before: May 16 11:01:11 2026 GMT
            Not After : May 17 11:01:11 2026 GMT
        Subject: CN=57e8dce82ef3aaa5d4fb44b2fbd23d428dabdf73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0e:10:10:70:c0:98:aa:26:ff:24:e1:06:d8:
                    19:45:b3:ac:a9:53:14:58:b5:95:a0:32:ca:c5:a7:
                    04:1e:d1:e8:bb:2b:1d:a2:ef:53:a6:ad:ec:2c:65:
                    f2:1a:f0:6d:87:78:df:8e:a6:e3:59:bf:f4:f1:4a:
                    d3:c6:bf:42:84:3e:6e:91:8a:c1:55:6b:4e:66:72:
                    37:1d:ba:f0:aa:4e:35:e9:e6:b9:19:a0:c4:83:36:
                    56:bd:ff:71:f5:90:ee:5e:4a:81:fd:36:ce:29:c9:
                    84:50:cf:28:25:c3:60:8d:64:aa:21:5d:c1:85:15:
                    ae:7b:8e:56:29:17:61:11:5c:ac:87:09:a9:f2:28:
                    59:5c:28:52:8a:26:d8:76:80:3e:6b:81:b9:7c:e9:
                    60:db:82:f9:28:47:70:b5:b6:71:86:86:22:a2:2b:
                    d1:a9:02:99:ac:07:52:b7:ea:cf:a3:07:ea:6f:24:
                    5e:3b:d7:fb:26:d2:ed:c8:8a:d8:6e:43:5a:fb:42:
                    cc:3a:0e:9e:f5:ca:31:5c:b3:5c:ba:ca:a9:7a:ca:
                    af:c7:df:3b:af:57:f6:ae:7a:60:be:0d:22:39:dd:
                    7d:9c:20:ea:39:dc:60:06:b8:83:23:a1:7b:f6:42:
                    24:59:d6:d3:6b:10:3e:f4:41:87:6f:09:b2:e7:3f:
                    09:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E8:DC:E8:2E:F3:AA:A5:D4:FB:44:B2:FB:D2:3D:42:8D:AB:DF:73
            X509v3 Authority Key Identifier:
                keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:14:e9:ce:1f:d3:6b:ac:0f:ed:48:a1:e0:25:f2:fe:f1:8e:
         6e:1e:9b:34:c0:09:2c:1a:85:f7:e5:ef:f1:13:63:8a:27:c5:
         9b:63:05:45:cc:23:61:a6:3a:93:09:c3:11:b1:86:93:00:79:
         04:22:78:e7:00:d2:79:27:12:fb:54:2e:e5:a8:b9:b9:b2:2a:
         39:d9:21:40:56:50:d4:1c:f0:77:6c:08:75:d0:02:bd:0c:65:
         e0:bc:21:5e:7d:30:6a:4b:29:4a:97:7a:ef:cf:0d:90:a4:a4:
         7b:13:26:fc:03:98:30:ed:b1:fb:4d:3a:fa:9f:63:08:9d:4c:
         9d:32:76:eb:19:4b:3c:8a:ef:84:e1:b5:ac:2d:bc:8a:ac:ee:
         79:16:d6:b1:46:fa:a2:c8:8a:ea:75:a9:dd:3d:a2:ec:12:07:
         ca:3c:b8:50:ed:5f:f8:27:8e:38:31:5d:96:e5:90:6f:62:28:
         cd:26:f8:19:04:89:d3:75:b9:34:d1:f2:8c:30:c0:25:8e:03:
         c2:5f:ed:e0:23:12:51:d2:51:86:2d:4b:fd:1b:ae:5f:f3:2c:
         b9:19:a6:cf:17:02:dc:55:e3:d1:05:35:30:ed:6c:4a:1a:cb:
         a0:33:34:00:54:a4:ab:30:dd:a0:af:f5:84:8a:2a:38:ea:46:
         8c:f4:15:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcoNJ6o70HrjrUvovU2vWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NzEwMGE0NmNjNDZhZTg5NmJkYzJlMGUwNzRlMzA1NWFi
ODg2N2IwHhcNMjYwNTE2MTEwMTExWhcNMjYwNTE3MTEwMTExWjAzMTEwLwYDVQQD
Eyg1N2U4ZGNlODJlZjNhYWE1ZDRmYjQ0YjJmYmQyM2Q0MjhkYWJkZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A4QEHDAmKom/yThBtgZRbOsqVMU
WLWVoDLKxacEHtHouysdou9Tpq3sLGXyGvBth3jfjqbjWb/08UrTxr9ChD5ukYrB
VWtOZnI3Hbrwqk416ea5GaDEgzZWvf9x9ZDuXkqB/TbOKcmEUM8oJcNgjWSqIV3B
hRWue45WKRdhEVyshwmp8ihZXChSiibYdoA+a4G5fOlg24L5KEdwtbZxhoYioivR
qQKZrAdSt+rPowfqbyReO9f7JtLtyIrYbkNa+0LMOg6e9coxXLNcusqpesqvx987
r1f2rnpgvg0iOd19nCDqOdxgBriDI6F79kIkWdbTaxA+9EGHbwmy5z8J+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfo3Ogu86ql1PtEsvvSPUKNq99zMB8GA1UdIwQY
MBaAFNdxAKRsxGrolr3C4OB04wVauIZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjIt
ZGQ1MGJlMDY3NDAxLzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjItZGQ1MGJlMDY3NDAx
LzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxTpzh/T
a6wP7Uih4CXy/vGObh6bNMAJLBqF9+Xv8RNjiifFm2MFRcwjYaY6kwnDEbGGkwB5
BCJ45wDSeScS+1Qu5ai5ubIqOdkhQFZQ1Bzwd2wIddACvQxl4LwhXn0wakspSpd6
788NkKSkexMm/AOYMO2x+006+p9jCJ1MnTJ26xlLPIrvhOG1rC28iqzueRbWsUb6
osiK6nWp3T2i7BIHyjy4UO1f+CeOODFdluWQb2IozSb4GQSJ03W5NNHyjDDAJY4D
wl/t4CMSUdJRhi1L/RuuX/MsuRmmzxcC3FXj0QU1MO1sShrLoDM0AFSkqzDdoK/1
hIoqOOpGjPQVSA==
-----END CERTIFICATE-----
Generated at Sat May 16 17:14:21 2026 by rpki-client