Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
File:                     13eW4WtWXXJzZphsycqcpj0aTlg.mft (raw, json)
Hash identifier:          9EHJxSc2XuYzyVav1R1iBkrs1CLTO4KEXpKSClc7VLg=
Subject key identifier:   68:64:19:28:F8:00:83:66:36:B8:88:28:C1:39:64:80:BA:FB:A9:E9
Authority key identifier: D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58
Certificate issuer:       /CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
Certificate serial:       019EC412F4D287C4FEE31477CE56139B8864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
Manifest number:          067D
Signing time:             Sun 14 Jun 2026 03:00:37 +0000
Manifest this update:     Sun 14 Jun 2026 03:00:37 +0000
Manifest next update:     Mon 15 Jun 2026 03:00:37 +0000
Files and hashes:         1: 13eW4WtWXXJzZphsycqcpj0aTlg.crl (hash: Dw9NsBr5XB8HzyRf1CcXDabXq+63b5emm0i5KEmJJYE=)
                          2: Z7tPkv-KOS--LcH3raWeWv6mob4.roa (hash: 2730/QIDnBMlH2saKFE8sJJcRwFrjnSocRmwgcVBh5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:12:f4:d2:87:c4:fe:e3:14:77:ce:56:13:9b:88:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77796e16b565d727366986cc9ca9ca63d1a4e58
        Validity
            Not Before: Jun 14 03:00:37 2026 GMT
            Not After : Jun 15 03:00:37 2026 GMT
        Subject: CN=68641928f800836636b88828c1396480bafba9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:74:fe:6a:0f:54:02:5b:cc:4f:b6:5e:d7:69:
                    80:d6:ab:cf:a0:ff:c2:aa:9b:6e:06:21:4e:e6:8a:
                    0c:ac:d2:7d:13:22:1c:e5:fe:0d:54:4f:93:99:4b:
                    ab:5a:40:bc:66:ee:d7:7a:53:98:84:c5:84:6d:56:
                    54:e2:94:d5:ec:c0:d7:e8:45:f6:41:1f:00:8c:d1:
                    1b:48:80:1f:a4:5d:19:7a:71:ec:cc:7e:e3:c4:bd:
                    92:ce:48:ad:bd:9c:a5:db:04:08:24:53:3f:66:73:
                    02:86:8e:f1:66:42:29:6b:e3:2c:b2:17:10:32:fd:
                    75:00:91:35:76:70:60:91:cb:13:2d:78:a8:6b:d3:
                    69:32:74:b9:02:8f:cb:64:27:6a:34:5a:a5:53:ef:
                    91:64:6a:c0:7f:81:17:51:20:88:80:8e:14:71:69:
                    52:c2:c2:d0:a1:c9:42:3e:96:7d:08:03:50:06:64:
                    4b:64:0d:f0:47:97:9c:f7:fa:e3:0b:6b:2c:03:3e:
                    c8:c4:56:6e:0f:91:09:ae:61:a3:a8:02:38:92:af:
                    e6:6e:b9:dc:9e:96:4d:62:54:41:88:90:08:63:8e:
                    3c:a1:dd:15:94:99:3f:84:8e:e3:df:7b:03:d7:47:
                    02:d1:8f:ca:de:a0:ac:6b:da:37:7e:d2:5d:df:2f:
                    41:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:64:19:28:F8:00:83:66:36:B8:88:28:C1:39:64:80:BA:FB:A9:E9
            X509v3 Authority Key Identifier:
                keyid:D7:77:96:E1:6B:56:5D:72:73:66:98:6C:C9:CA:9C:A6:3D:1A:4E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eW4WtWXXJzZphsycqcpj0aTlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5429d8-f411-4692-b0a7-155fd0b43f9f/1/13eW4WtWXXJzZphsycqcpj0aTlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7f:91:04:f2:ca:93:ad:de:c7:f4:27:dc:ec:9e:31:8f:1d:
         79:f0:8a:6b:bd:67:d0:55:7c:63:8f:27:4b:bb:12:db:19:0b:
         7f:91:34:d6:1d:4e:dd:ff:b6:62:2f:59:84:e7:da:89:73:d2:
         19:b1:f1:a2:8c:7b:00:ec:3a:a9:18:6b:b8:4a:b7:33:8c:70:
         b1:4b:71:69:99:2f:17:cb:d5:18:ec:96:53:6a:29:28:0a:03:
         ca:e2:17:92:5f:74:73:6d:e6:dd:09:fa:bc:d2:f8:44:09:e7:
         3b:8b:1c:a2:69:e9:6d:33:5b:b0:ba:56:8f:77:c2:eb:14:22:
         08:9a:00:c6:d3:cc:93:88:0e:23:8e:59:2c:5e:10:db:99:2f:
         7f:c8:cf:f5:bc:73:1f:03:5c:a4:43:5a:05:ed:c9:b8:a7:be:
         21:a7:a3:d1:3b:3b:ba:ad:ba:a6:49:55:56:a7:f1:da:91:8f:
         2e:55:d9:35:00:a3:e9:6c:68:25:71:84:10:af:7c:8e:cd:5c:
         50:0d:ce:f2:1c:61:83:3f:de:50:3a:12:43:2d:b2:7c:25:c7:
         78:d7:80:ef:93:5c:f5:a0:a0:75:5e:65:50:c2:22:95:d1:6c:
         24:4e:e8:cf:4f:63:86:38:73:d9:01:3b:3f:67:ab:6e:a5:29:
         e9:f9:f0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:37:43 2026 by rpki-client