Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File:                     13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier:          eQTRFQVA8N+dmsSoUkWFEWUGY6iE9RQ1lNtomNm47PA=
Subject key identifier:   30:51:84:6A:73:7B:DC:65:FC:F2:AB:41:40:49:66:59:51:18:6B:CE
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer:       /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial:       019D9BBE8E8285A30845C358ECC6B875D052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number:          0D7E
Signing time:             Fri 17 Apr 2026 14:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:49 +0000
Files and hashes:         1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: traxgX8VXMuCLHiWEo5eaRt1sqZJo4M9zyl0l1GS8yA=)
                          2: lAjUh0yd7DRPhi-W3SSvqev0w_E.roa (hash: YCOHiUTXUD1rmQesFlzNj90jbAUp9KL2LXtb7YGRhtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:8e:82:85:a3:08:45:c3:58:ec:c6:b8:75:d0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
        Validity
            Not Before: Apr 17 14:00:49 2026 GMT
            Not After : Apr 18 14:00:49 2026 GMT
        Subject: CN=3051846a737bdc65fcf2ab414049665951186bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:43:07:31:31:d9:0f:7a:5f:19:1b:dc:b5:ed:
                    6b:ed:95:b6:e4:4e:bd:7a:7e:66:e0:75:13:9f:72:
                    3c:b6:a1:fe:7c:ea:6d:46:71:ce:b4:c3:56:72:e9:
                    28:2a:90:cf:e3:60:97:c3:2d:3e:37:9b:90:13:1b:
                    90:d9:cb:e9:96:be:81:53:ec:81:0a:e0:0b:49:ce:
                    91:ec:0d:76:5f:4f:d5:b1:9c:5f:30:17:2a:b2:e5:
                    68:e8:7b:b3:cf:76:b2:c2:93:f6:2c:09:3b:69:8c:
                    3c:cd:1f:08:3d:98:09:79:ae:81:67:8b:5c:93:00:
                    0e:fd:0e:31:0a:5d:9d:a8:8f:59:9d:44:a4:19:c3:
                    b6:59:7b:35:16:92:f7:fc:4a:94:2f:54:78:bd:78:
                    a5:c8:ba:e9:31:ea:35:f6:a6:9f:54:72:ce:b9:da:
                    77:09:43:b0:8e:90:fa:cc:2d:2d:e6:45:7d:36:6c:
                    9a:0b:e0:9b:04:0a:0e:8d:6c:48:ee:54:5f:b1:37:
                    c6:11:23:96:65:8e:7e:a0:54:af:f1:da:02:98:b7:
                    3a:d8:49:88:a9:47:7b:2f:29:38:5d:36:a4:12:c7:
                    05:fb:5c:9c:36:9b:4f:dc:b4:a5:38:de:dc:8e:1c:
                    7b:85:17:a4:a7:b5:d6:cc:12:43:0c:b9:b6:5a:e5:
                    f8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:51:84:6A:73:7B:DC:65:FC:F2:AB:41:40:49:66:59:51:18:6B:CE
            X509v3 Authority Key Identifier:
                keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:fd:5e:ab:eb:4f:e5:42:45:91:38:de:51:60:b0:13:00:ba:
         64:15:02:35:b5:68:cd:d8:51:93:4c:a8:d2:c9:c2:d1:ce:24:
         47:9d:69:43:67:3f:60:0b:d9:80:7d:c5:85:3a:df:f8:b0:7b:
         d8:b2:bb:b4:58:0b:87:ca:e8:b0:bb:4c:87:25:df:4e:59:2c:
         35:83:6e:54:aa:3c:e0:e2:b8:c2:27:9b:b7:32:a2:a5:b0:08:
         7f:ea:ec:dd:70:f4:b1:8e:0a:c6:b9:81:63:6e:99:d2:cd:54:
         22:9f:be:57:4e:de:2f:1f:86:42:4d:fe:fb:3f:d5:70:e5:40:
         fb:0b:95:6a:0d:30:0b:13:d9:f7:4f:61:fb:20:7d:87:80:cb:
         a8:b6:67:54:b2:fe:59:17:27:79:ca:bf:56:16:38:fd:1c:24:
         48:a0:55:e3:c2:d3:c0:66:4a:14:78:fc:33:48:b3:28:21:4b:
         88:9d:e7:19:9b:8d:f6:e3:8b:9a:3e:97:1c:29:1b:df:a3:d9:
         59:d7:84:a2:c9:8b:15:24:26:0f:66:e2:13:d7:d8:31:1e:f3:
         52:0d:fb:34:a1:2f:43:72:18:64:52:d1:8b:ca:8b:2a:2d:de:
         79:63:e6:dd:e3:88:b4:5c:d9:3c:9d:c9:06:cd:b8:07:aa:09:
         9c:45:b3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:25:24 2026 by rpki-client