Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
File:                     0mepGaXTLOov1ByKnhhRC__86NY.mft (raw, json)
Hash identifier:          9qkU9vGmEmnlHa4SSEdVCqlFb3/ydxxwMG8izrojyMM=
Subject key identifier:   A5:35:F0:21:80:6C:A5:71:0F:AC:81:6F:F4:7E:8F:1C:A0:52:B7:06
Authority key identifier: D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6
Certificate issuer:       /CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
Certificate serial:       019F19441C503DC3BD76FA161B2433359C3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
Manifest number:          13F7
Signing time:             Tue 30 Jun 2026 16:02:01 +0000
Manifest this update:     Tue 30 Jun 2026 16:02:01 +0000
Manifest next update:     Wed 01 Jul 2026 16:02:01 +0000
Files and hashes:         1: 0mepGaXTLOov1ByKnhhRC__86NY.crl (hash: ZSWZ8vfFZrB3dx+yehVLnxWqqAPnqPis9Q9UI0Zq1SI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:44:1c:50:3d:c3:bd:76:fa:16:1b:24:33:35:9c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
        Validity
            Not Before: Jun 30 16:02:01 2026 GMT
            Not After : Jul  1 16:02:01 2026 GMT
        Subject: CN=a535f021806ca5710fac816ff47e8f1ca052b706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ad:00:b9:fc:21:84:fe:ab:0e:81:5c:5e:8c:
                    c6:03:5a:f4:07:8e:72:f7:9d:d6:bc:2d:20:1c:81:
                    4b:5f:65:90:d1:24:0b:a4:ab:f0:43:91:d2:3f:32:
                    59:eb:36:0b:cd:82:68:e4:1f:78:cb:b1:2b:cc:8a:
                    08:d7:f0:82:b1:74:7c:6a:7c:96:4e:8b:cf:0e:36:
                    0b:d3:38:ca:9d:33:f1:43:ad:b9:70:bf:7f:e7:e6:
                    58:8a:1f:08:4f:ae:80:c5:21:3c:83:6d:2a:14:ed:
                    d6:1f:f8:aa:19:71:e6:21:36:6a:b8:67:37:55:c4:
                    fd:78:96:1a:18:9b:86:5a:5b:0c:05:3f:94:c5:a8:
                    38:85:25:38:9c:d0:1b:9a:e9:af:8d:1a:0e:d0:3e:
                    94:d8:18:d7:5d:27:4b:d7:2e:a2:31:25:8f:7f:cd:
                    a7:f4:c1:99:b2:8e:16:84:92:71:97:2a:aa:7b:af:
                    21:ce:1b:4e:f2:92:86:b1:0b:3e:40:88:32:de:4b:
                    66:29:7d:5c:8e:94:1a:79:65:49:9e:e2:4a:97:44:
                    1a:af:a1:8e:01:9a:30:b9:63:63:86:45:77:12:61:
                    d3:5e:32:41:0e:67:1f:90:68:d5:16:41:ed:43:d6:
                    49:f3:6b:9a:21:03:4a:62:eb:0d:8a:c5:24:00:bb:
                    b6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:35:F0:21:80:6C:A5:71:0F:AC:81:6F:F4:7E:8F:1C:A0:52:B7:06
            X509v3 Authority Key Identifier:
                keyid:D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:2b:2a:1e:c3:e3:52:f4:36:11:45:57:76:09:c3:9b:39:1d:
         fb:3d:ee:64:65:ef:96:b1:f4:51:8c:7e:51:07:d3:da:f9:84:
         92:83:8f:5e:8f:9a:ef:f8:63:2c:0f:5f:53:82:6b:a7:4c:ee:
         0b:62:0b:9b:09:66:d9:c9:93:93:a3:30:15:44:cd:90:64:30:
         0e:2f:67:d5:84:c3:51:90:e8:d3:b1:6c:40:d1:91:d3:1f:60:
         83:60:ed:16:60:84:94:19:a5:fe:97:9a:75:fc:c6:0e:33:a1:
         d9:15:ae:e1:df:95:bf:d7:8d:a2:21:50:50:80:5c:49:ce:fc:
         45:1f:0e:26:c4:cf:63:1f:8b:11:bd:cf:d8:71:e5:b0:9a:b5:
         4e:f4:7d:d6:52:1e:14:3c:27:31:b6:d5:b0:a4:54:5c:58:9f:
         b4:08:44:c1:6e:ef:12:0d:d8:99:2f:21:2e:10:0e:30:a6:64:
         48:c1:d6:db:71:39:54:88:03:04:54:9d:8b:b2:64:db:f2:57:
         08:58:fc:7d:d8:22:4c:dc:b1:62:55:cb:9e:69:fe:c5:e6:03:
         7d:6c:d4:3a:0f:66:4b:f0:fa:b0:9d:4b:3c:ec:da:54:9c:49:
         44:1c:0f:05:a2:37:d2:ea:6a:bb:73:bd:a5:45:fa:7b:1d:db:
         e5:e4:6b:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZRBxQPcO9dvoWGyQzNZw8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjdhOTE5YTVkMzJjZWEyZmQ0MWM4YTllMTg1MTBiZmZm
Y2U4ZDYwHhcNMjYwNjMwMTYwMjAxWhcNMjYwNzAxMTYwMjAxWjAzMTEwLwYDVQQD
EyhhNTM1ZjAyMTgwNmNhNTcxMGZhYzgxNmZmNDdlOGYxY2EwNTJiNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA460AufwhhP6rDoFcXozGA1r0B45y
953WvC0gHIFLX2WQ0SQLpKvwQ5HSPzJZ6zYLzYJo5B94y7ErzIoI1/CCsXR8anyW
TovPDjYL0zjKnTPxQ625cL9/5+ZYih8IT66AxSE8g20qFO3WH/iqGXHmITZquGc3
VcT9eJYaGJuGWlsMBT+Uxag4hSU4nNAbmumvjRoO0D6U2BjXXSdL1y6iMSWPf82n
9MGZso4WhJJxlyqqe68hzhtO8pKGsQs+QIgy3ktmKX1cjpQaeWVJnuJKl0Qar6GO
AZowuWNjhkV3EmHTXjJBDmcfkGjVFkHtQ9ZJ82uaIQNKYusNisUkALu2gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKU18CGAbKVxD6yBb/R+jxygUrcGMB8GA1UdIwQY
MBaAFNJnqRml0yzqL9Qcip4YUQv//OjWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1lcEdhWFRMT292MUJ5S25oaFJDX184Nk5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9lZWFmZWYtMzg1Mi00ZTM2LThjODEt
OTM3MjI2N2NmOTUxLzEvMG1lcEdhWFRMT292MUJ5S25oaFJDX184Nk5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9lZWFmZWYtMzg1Mi00ZTM2LThjODEtOTM3MjI2N2NmOTUx
LzEvMG1lcEdhWFRMT292MUJ5S25oaFJDX184Nk5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkisqHsPj
UvQ2EUVXdgnDmzkd+z3uZGXvlrH0UYx+UQfT2vmEkoOPXo+a7/hjLA9fU4Jrp0zu
C2ILmwlm2cmTk6MwFUTNkGQwDi9n1YTDUZDo07FsQNGR0x9gg2DtFmCElBml/pea
dfzGDjOh2RWu4d+Vv9eNoiFQUIBcSc78RR8OJsTPYx+LEb3P2HHlsJq1TvR91lIe
FDwnMbbVsKRUXFiftAhEwW7vEg3YmS8hLhAOMKZkSMHW23E5VIgDBFSdi7Jk2/JX
CFj8fdgiTNyxYlXLnmn+xeYDfWzUOg9mS/D6sJ1LPOzaVJxJRBwPBaI30upqu3O9
pUX6ex3b5eRrsQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:06 2026 by rpki-client