Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File:                     13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier:          0SDKrIc+nbSu9dVKfZsAUP/7KD7g/03ZEnCWqgrSQVo=
Subject key identifier:   B0:B8:70:6E:7A:33:3E:C2:74:D5:F7:83:58:FB:8C:8D:CF:AA:6E:70
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer:       /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial:       019FAAF569FCA1E144517B551714C23F6C47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number:          0E8F
Signing time:             Tue 28 Jul 2026 23:00:37 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:37 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:37 +0000
Files and hashes:         1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: 5365qpmP4YFnjRgAdNi96vs3f2YpaPa/NTjJwtKWYCc=)
                          2: lAjUh0yd7DRPhi-W3SSvqev0w_E.roa (hash: YCOHiUTXUD1rmQesFlzNj90jbAUp9KL2LXtb7YGRhtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:69:fc:a1:e1:44:51:7b:55:17:14:c2:3f:6c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
        Validity
            Not Before: Jul 28 23:00:37 2026 GMT
            Not After : Jul 29 23:00:37 2026 GMT
        Subject: CN=b0b8706e7a333ec274d5f78358fb8c8dcfaa6e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:34:cc:47:eb:89:95:82:00:7f:73:47:91:b9:
                    5d:63:84:81:fd:0f:f9:da:63:0b:12:09:e2:19:59:
                    be:05:72:48:37:e3:4d:22:c2:9f:cc:26:90:ec:c5:
                    bf:38:23:17:1a:25:48:ec:6b:c7:52:31:d2:9f:40:
                    a7:83:60:d5:54:5d:12:00:47:7b:19:52:df:61:2e:
                    16:76:ce:ce:31:22:92:5f:c6:44:17:51:3b:71:b2:
                    16:15:cb:0d:92:29:9a:22:21:d1:df:03:df:c6:6f:
                    7e:4a:c4:cb:cd:9a:46:ee:f2:d7:96:e0:43:55:aa:
                    25:30:27:9a:e7:4d:9c:50:5b:92:d0:2b:16:66:d5:
                    ab:98:bd:82:96:db:e1:be:4e:17:fa:ba:27:1f:04:
                    fa:2f:75:54:37:a8:d9:c7:a8:26:51:76:63:54:49:
                    37:97:ec:c0:96:ab:20:17:8a:8e:f3:87:d9:4b:b5:
                    b9:e0:c3:6b:aa:b2:69:61:8f:24:2f:93:53:5f:60:
                    01:09:3d:01:84:5c:0f:11:19:c5:a0:06:84:bf:5c:
                    cb:dc:19:29:15:ac:88:e0:91:7e:70:76:3d:17:07:
                    74:af:82:0d:4a:85:9f:ff:8f:d0:8c:9e:3c:58:ca:
                    f5:1a:62:c6:41:a5:c4:43:99:71:57:26:3d:c0:3c:
                    49:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B8:70:6E:7A:33:3E:C2:74:D5:F7:83:58:FB:8C:8D:CF:AA:6E:70
            X509v3 Authority Key Identifier:
                keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:50:cd:11:c8:b9:34:b8:a4:f7:a3:23:a5:97:0b:6c:1e:3b:
         96:35:bc:c7:5c:cb:5b:32:d2:de:b9:79:ed:5b:ea:d2:17:72:
         0a:75:58:42:12:20:ce:ff:a8:83:af:5b:fa:81:1b:03:35:8d:
         67:31:15:b1:8d:ea:5d:0a:19:fc:aa:a4:95:47:d9:27:b0:fe:
         df:4e:d4:48:c4:32:d3:ac:dd:43:64:33:63:ea:a6:07:5d:c0:
         ca:c2:8d:67:06:78:6d:79:9f:d9:1e:8e:8a:4c:44:2b:00:96:
         8d:8f:b2:4b:0b:02:b7:e7:d1:a2:8d:d6:3f:4b:94:0c:59:8a:
         e3:18:0c:59:70:17:07:c6:da:34:1e:8d:f9:73:a1:b3:77:53:
         c3:37:3b:0c:52:52:aa:a3:de:f5:da:52:da:ab:1f:a6:1a:c7:
         e8:92:91:ce:e1:f6:19:3e:c6:f1:89:27:da:09:d5:41:61:f5:
         f3:6c:84:e5:0f:0c:2a:43:36:56:97:ca:dd:bc:35:60:c4:1b:
         fc:9f:c6:dc:10:d2:21:7a:f7:ca:a6:ea:90:47:87:50:c4:06:
         ad:9b:fe:84:9b:f6:54:2f:cf:1b:7e:19:f2:c9:1d:13:46:f0:
         57:27:b6:8f:61:98:06:4f:a0:8d:eb:1c:97:3a:42:d4:96:99:
         9d:e7:86:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9Wn8oeFEUXtVFxTCP2xHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NzEwMGE0NmNjNDZhZTg5NmJkYzJlMGUwNzRlMzA1NWFi
ODg2N2IwHhcNMjYwNzI4MjMwMDM3WhcNMjYwNzI5MjMwMDM3WjAzMTEwLwYDVQQD
EyhiMGI4NzA2ZTdhMzMzZWMyNzRkNWY3ODM1OGZiOGM4ZGNmYWE2ZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDTMR+uJlYIAf3NHkbldY4SB/Q/5
2mMLEgniGVm+BXJIN+NNIsKfzCaQ7MW/OCMXGiVI7GvHUjHSn0Cng2DVVF0SAEd7
GVLfYS4Wds7OMSKSX8ZEF1E7cbIWFcsNkimaIiHR3wPfxm9+SsTLzZpG7vLXluBD
VaolMCea502cUFuS0CsWZtWrmL2Cltvhvk4X+ronHwT6L3VUN6jZx6gmUXZjVEk3
l+zAlqsgF4qO84fZS7W54MNrqrJpYY8kL5NTX2ABCT0BhFwPERnFoAaEv1zL3Bkp
FayI4JF+cHY9Fwd0r4INSoWf/4/QjJ48WMr1GmLGQaXEQ5lxVyY9wDxJnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLC4cG56Mz7CdNX3g1j7jI3Pqm5wMB8GA1UdIwQY
MBaAFNdxAKRsxGrolr3C4OB04wVauIZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjIt
ZGQ1MGJlMDY3NDAxLzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjItZGQ1MGJlMDY3NDAx
LzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMVDNEci5
NLik96MjpZcLbB47ljW8x1zLWzLS3rl57Vvq0hdyCnVYQhIgzv+og69b+oEbAzWN
ZzEVsY3qXQoZ/KqklUfZJ7D+307USMQy06zdQ2QzY+qmB13AysKNZwZ4bXmf2R6O
ikxEKwCWjY+ySwsCt+fRoo3WP0uUDFmK4xgMWXAXB8baNB6N+XOhs3dTwzc7DFJS
qqPe9dpS2qsfphrH6JKRzuH2GT7G8Ykn2gnVQWH182yE5Q8MKkM2VpfK3bw1YMQb
/J/G3BDSIXr3yqbqkEeHUMQGrZv+hJv2VC/PG34Z8skdE0bwVye2j2GYBk+gjesc
lzpC1JaZneeG7Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:16:12 2026 by rpki-client