Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File:                     13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier:          ndLLvZcWn30DPsHy7824VP8ztJQeoACe0d33iX3zQHo=
Subject key identifier:   EC:49:1C:D2:D5:88:6F:24:D2:84:3B:40:4C:68:97:4C:1F:00:0E:55
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer:       /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial:       01A13CA5A3E00938300318D9F2259E013E9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number:          0F5F
Signing time:             Wed 14 Oct 2026 23:00:50 +0000
Manifest this update:     Wed 14 Oct 2026 23:00:50 +0000
Manifest next update:     Thu 15 Oct 2026 23:00:50 +0000
Files and hashes:         1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: RHzk03YA/qnzU8xQ19Fr7UNyZPxwLB1mC+VIVxa57lA=)
                          2: lAjUh0yd7DRPhi-W3SSvqev0w_E.roa (hash: YCOHiUTXUD1rmQesFlzNj90jbAUp9KL2LXtb7YGRhtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:a5:a3:e0:09:38:30:03:18:d9:f2:25:9e:01:3e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
        Validity
            Not Before: Oct 14 23:00:50 2026 GMT
            Not After : Oct 15 23:00:50 2026 GMT
        Subject: CN=ec491cd2d5886f24d2843b404c68974c1f000e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:15:f9:9a:c8:dc:08:93:e0:13:9a:eb:b4:e2:
                    79:0a:71:10:c1:2f:da:64:f8:b2:9d:ae:29:d8:d3:
                    cb:39:9d:d8:68:0c:98:69:8d:19:31:bb:fd:3f:d4:
                    58:d1:54:3f:17:a6:66:0f:4e:97:e3:f6:e9:25:92:
                    e9:ea:a2:50:d4:18:de:f1:77:d1:8b:4a:f2:40:6a:
                    23:71:bd:f8:2f:e5:b8:dc:2d:ef:d9:8f:6c:ec:32:
                    f5:42:1a:68:7e:19:bf:e8:ba:e6:a0:3f:6d:db:8f:
                    22:d6:89:50:3a:ef:39:50:ef:12:fe:56:bd:a6:46:
                    9e:73:8c:c7:da:c5:2c:90:b1:42:ec:32:9e:81:b8:
                    17:27:39:6b:73:92:76:85:ed:59:43:29:20:62:8b:
                    32:36:ba:a3:26:17:5c:a7:ce:89:f4:a4:cb:7a:a4:
                    f1:8c:01:e5:7e:a8:c4:6d:b1:fe:f5:c7:da:fd:3a:
                    ec:3b:e7:a8:ed:0b:d4:ee:3a:a9:65:77:45:21:c5:
                    d2:e5:04:12:b8:43:8b:04:8a:5f:e3:78:51:d8:9e:
                    ec:c6:41:c1:66:87:6b:49:bb:6d:93:56:0f:74:85:
                    fa:4a:96:b7:43:76:2c:6c:1c:d1:40:46:69:6e:ac:
                    64:bf:b3:cf:bd:53:27:1b:ea:84:25:3c:9b:6f:6e:
                    ac:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:49:1C:D2:D5:88:6F:24:D2:84:3B:40:4C:68:97:4C:1F:00:0E:55
            X509v3 Authority Key Identifier:
                keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:9f:f5:36:b8:b4:3b:9a:9b:c4:46:a2:6c:18:5c:e1:e0:e6:
         d0:b1:a0:ad:9c:bd:f1:73:ee:db:db:e1:8e:aa:4a:2b:bf:2e:
         9e:87:3e:84:7c:db:31:c1:4d:c7:b2:65:06:36:a0:45:bc:67:
         2f:16:63:a1:ac:2e:d0:b1:ae:9b:3a:5d:8b:6f:68:d1:6b:22:
         59:8b:8a:07:f6:60:92:a9:ff:4c:6b:11:b7:cb:96:5f:20:d6:
         b6:7c:61:13:67:c5:98:62:27:62:69:9e:4c:26:f8:f4:14:f7:
         7b:31:17:44:fc:d7:96:0c:9d:06:22:bb:b3:72:15:ca:0a:19:
         0e:e6:8e:14:bc:98:17:5a:37:e7:2b:40:f0:85:1c:21:3c:01:
         17:ad:a1:7f:9c:db:d9:28:71:a0:ba:c2:18:ed:98:fc:0c:38:
         e8:6f:fd:9e:e6:69:18:b9:46:e8:c2:32:49:99:5d:68:04:5e:
         68:d1:79:67:b8:6b:a7:6a:ee:a5:f1:94:e7:2a:4c:68:3e:b8:
         1a:25:3a:67:4b:7c:5e:1a:d6:2d:94:17:f1:28:6c:cf:d9:fb:
         bc:86:b2:b5:60:e0:49:0d:91:ac:55:17:57:f7:c4:1b:4e:16:
         26:23:6f:7a:1e:57:90:62:92:68:51:29:3e:31:db:71:ff:df:
         cf:4a:ba:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:36:17 2026 by rpki-client