Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File:                     13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier:          TmWvTKRGtRdzOSwEz1PSsIdTQjH5geP+f+7p315Tlyg=
Subject key identifier:   8B:BA:AC:F1:DC:EF:3D:C9:CE:28:24:78:85:FC:FF:13:17:75:B9:87
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer:       /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial:       019F1A1FA2472E95DBD13A9AB7F883EC4073
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number:          0E44
Signing time:             Tue 30 Jun 2026 20:01:48 +0000
Manifest this update:     Tue 30 Jun 2026 20:01:48 +0000
Manifest next update:     Wed 01 Jul 2026 20:01:48 +0000
Files and hashes:         1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: xEUX2v+8AplNbdNeS+DdLyWsglqnkcgxAD7SOHsRFLE=)
                          2: lAjUh0yd7DRPhi-W3SSvqev0w_E.roa (hash: YCOHiUTXUD1rmQesFlzNj90jbAUp9KL2LXtb7YGRhtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1a:1f:a2:47:2e:95:db:d1:3a:9a:b7:f8:83:ec:40:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
        Validity
            Not Before: Jun 30 20:01:48 2026 GMT
            Not After : Jul  1 20:01:48 2026 GMT
        Subject: CN=8bbaacf1dcef3dc9ce28247885fcff131775b987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:88:c7:3e:f7:ae:f0:0f:f2:a0:b1:01:56:dd:
                    be:1b:82:f7:57:e7:d0:30:95:a4:5c:71:fa:bb:d5:
                    b2:57:36:78:df:d2:e4:7b:96:8e:34:5a:b8:08:2d:
                    a2:34:e7:8d:3a:4a:a8:9d:c5:cc:90:20:a3:6f:74:
                    15:0b:64:cf:f8:24:3e:5f:e9:2f:9f:b8:6b:23:c4:
                    2d:71:96:c8:26:0c:c9:e3:23:d0:ab:da:f5:c8:64:
                    c5:6a:60:39:3b:1a:46:24:b8:bc:11:5e:21:b1:4f:
                    41:16:7b:0e:c7:c2:1a:b9:8b:32:6f:88:80:d4:c5:
                    04:02:7a:63:a0:33:0f:ee:63:3a:af:cc:70:76:c7:
                    43:e3:2f:cd:db:8f:bd:d0:d1:e4:a1:45:bb:99:c0:
                    8c:d8:42:ae:5d:d7:2d:a0:27:ec:9b:17:5a:17:80:
                    e4:53:d7:31:06:3f:31:4d:f2:55:29:74:40:d2:b8:
                    cc:d8:93:48:0a:30:61:e6:d5:d4:9b:bb:80:6c:c7:
                    d2:c8:b6:c0:90:b5:9d:eb:45:69:97:ce:3e:e4:09:
                    f5:32:2a:1c:f9:99:a1:dd:4e:80:53:22:a7:5a:b3:
                    39:87:9d:3f:75:eb:84:10:da:3e:a8:42:03:0a:77:
                    54:a0:ca:c7:a2:40:ba:c8:11:03:a6:af:05:71:43:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:BA:AC:F1:DC:EF:3D:C9:CE:28:24:78:85:FC:FF:13:17:75:B9:87
            X509v3 Authority Key Identifier:
                keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:dc:2e:2e:6d:f1:e3:cc:22:a4:19:81:1a:73:5f:1f:7b:10:
         c8:fc:b3:bc:6a:22:86:6e:03:de:42:f3:3e:c4:7c:47:1d:19:
         bc:fb:03:f4:f8:b3:67:78:7d:6f:8e:a8:f3:73:a8:5a:c0:80:
         63:99:18:9f:bc:73:e6:b7:e6:f1:ec:40:7c:6d:b3:c0:eb:8a:
         78:29:e4:ef:1f:c1:02:9d:91:89:b1:d9:f0:54:73:ee:63:8c:
         cc:cf:2d:b5:96:1f:85:20:4b:5f:ed:e0:8b:e2:7e:6c:d6:79:
         ae:b1:09:06:ae:19:5d:3e:c1:b9:2e:74:30:ff:e5:40:58:2b:
         1f:aa:5e:fc:90:93:75:57:6a:9b:07:fc:56:0a:1d:32:f3:58:
         75:26:21:1e:b1:12:b2:c1:f3:5f:94:38:5c:16:82:75:9b:5f:
         ee:6b:fb:03:2a:a1:1f:9e:f2:2c:f9:3a:d6:a1:5c:35:f6:90:
         5c:7a:00:c4:6f:a7:1d:b9:90:11:d7:66:08:f4:36:e6:e2:a1:
         cf:b5:e0:37:5b:09:29:cd:9f:44:e9:13:f0:53:9e:c1:52:96:
         c2:b8:44:d1:19:b2:dc:db:79:e8:69:e6:02:85:f6:db:9a:f5:
         6d:98:87:22:9d:5f:f8:45:58:a9:25:60:d7:30:6f:4c:25:cc:
         ee:1b:0c:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8aH6JHLpXb0Tqat/iD7EBzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NzEwMGE0NmNjNDZhZTg5NmJkYzJlMGUwNzRlMzA1NWFi
ODg2N2IwHhcNMjYwNjMwMjAwMTQ4WhcNMjYwNzAxMjAwMTQ4WjAzMTEwLwYDVQQD
Eyg4YmJhYWNmMWRjZWYzZGM5Y2UyODI0Nzg4NWZjZmYxMzE3NzViOTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4jHPveu8A/yoLEBVt2+G4L3V+fQ
MJWkXHH6u9WyVzZ439Lke5aONFq4CC2iNOeNOkqoncXMkCCjb3QVC2TP+CQ+X+kv
n7hrI8QtcZbIJgzJ4yPQq9r1yGTFamA5OxpGJLi8EV4hsU9BFnsOx8IauYsyb4iA
1MUEAnpjoDMP7mM6r8xwdsdD4y/N24+90NHkoUW7mcCM2EKuXdctoCfsmxdaF4Dk
U9cxBj8xTfJVKXRA0rjM2JNICjBh5tXUm7uAbMfSyLbAkLWd60Vpl84+5An1Mioc
+Zmh3U6AUyKnWrM5h50/deuEENo+qEIDCndUoMrHokC6yBEDpq8FcUNuGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIu6rPHc7z3JzigkeIX8/xMXdbmHMB8GA1UdIwQY
MBaAFNdxAKRsxGrolr3C4OB04wVauIZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjIt
ZGQ1MGJlMDY3NDAxLzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjItZGQ1MGJlMDY3NDAx
LzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNwuLm3x
48wipBmBGnNfH3sQyPyzvGoihm4D3kLzPsR8Rx0ZvPsD9PizZ3h9b46o83OoWsCA
Y5kYn7xz5rfm8exAfG2zwOuKeCnk7x/BAp2RibHZ8FRz7mOMzM8ttZYfhSBLX+3g
i+J+bNZ5rrEJBq4ZXT7BuS50MP/lQFgrH6pe/JCTdVdqmwf8VgodMvNYdSYhHrES
ssHzX5Q4XBaCdZtf7mv7AyqhH57yLPk61qFcNfaQXHoAxG+nHbmQEddmCPQ25uKh
z7XgN1sJKc2fROkT8FOewVKWwrhE0Rmy3Nt56GnmAoX225r1bZiHIp1f+EVYqSVg
1zBvTCXM7hsMhQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 23:37:10 2026 by rpki-client