Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
File:                     0mepGaXTLOov1ByKnhhRC__86NY.mft (raw, json)
Hash identifier:          e7F7VYsiZ0cHXPdzjjDRJ6AvgEZGdK6Jx4psLZPQ2UA=
Subject key identifier:   2C:35:AE:62:23:C5:B5:F8:67:6C:A3:FA:14:1B:E1:B4:33:DF:FD:99
Authority key identifier: D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6
Certificate issuer:       /CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
Certificate serial:       019FAA19DB83E675B750A2FF29FC28CA39EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
Manifest number:          1442
Signing time:             Tue 28 Jul 2026 19:00:48 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:48 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:48 +0000
Files and hashes:         1: 0mepGaXTLOov1ByKnhhRC__86NY.crl (hash: r4eAtmew1WAtCJz8q8pvE8k4EC+syLD89pVaqQDjYYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:db:83:e6:75:b7:50:a2:ff:29:fc:28:ca:39:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
        Validity
            Not Before: Jul 28 19:00:48 2026 GMT
            Not After : Jul 29 19:00:48 2026 GMT
        Subject: CN=2c35ae6223c5b5f8676ca3fa141be1b433dffd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f6:fe:de:ff:66:68:07:fa:86:11:d1:40:30:
                    ce:40:d6:71:1c:0c:7c:d1:41:b6:d2:65:44:30:19:
                    69:db:42:ea:ff:04:cf:5d:10:ad:dd:3f:28:4d:72:
                    e3:5d:2d:52:e9:72:5d:a3:55:38:81:5a:6a:95:1c:
                    7e:25:a8:1b:cf:51:4b:bb:b0:d4:1b:9f:a1:f8:9f:
                    b4:7e:b2:39:f0:be:6f:f9:a6:7a:04:fd:fe:10:6b:
                    cb:77:6b:af:0b:5f:99:b2:bc:5d:40:1b:df:ef:5a:
                    60:9d:a2:92:ac:87:c9:a2:ac:b5:bd:05:eb:89:f6:
                    12:a6:2e:b9:99:0c:58:b4:f5:28:51:7c:d8:fe:1b:
                    65:f5:1e:72:70:f6:cd:eb:6c:c6:2b:17:74:ac:72:
                    0e:c1:6c:f1:8b:0a:d7:ae:a0:6d:59:a3:24:36:af:
                    5d:a0:a6:d5:ef:1b:d6:c0:29:b7:21:c7:78:b2:95:
                    e1:25:de:85:82:a4:ef:c6:cd:f6:e3:6f:d5:1a:d3:
                    e2:ee:a0:ba:b5:70:1a:7e:de:a4:6f:87:05:dc:00:
                    19:57:f5:60:36:27:03:c1:45:a6:d9:4b:11:f0:4b:
                    1e:60:7e:b1:74:e3:3a:25:07:19:f1:10:11:38:ef:
                    c7:a4:40:2d:50:fd:de:17:fd:f2:45:89:a9:61:6a:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:35:AE:62:23:C5:B5:F8:67:6C:A3:FA:14:1B:E1:B4:33:DF:FD:99
            X509v3 Authority Key Identifier:
                keyid:D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a1:17:33:e2:77:c6:53:3e:82:1e:89:bc:85:64:5e:f4:e9:
         d4:26:2d:ef:53:7c:5b:30:8e:87:49:98:46:8e:b9:26:cd:55:
         b7:d5:96:79:33:c3:35:3a:02:13:b9:4c:3f:2a:f6:9e:28:af:
         ab:5d:64:40:cb:4b:f5:70:38:ad:7b:9b:86:a1:85:3e:2a:6d:
         a6:80:5b:cc:09:4b:ea:01:82:81:dd:e8:c8:8e:17:30:eb:71:
         75:31:6f:dd:83:3a:a9:b7:a9:22:9a:1a:6f:d6:17:6f:05:5f:
         b8:f5:ed:da:87:13:5f:f5:22:af:54:7c:03:50:b7:70:37:2b:
         ae:a1:c1:29:87:11:1b:c0:e0:02:0e:24:6e:f3:e5:11:df:42:
         24:2f:52:d7:d9:e0:5d:fe:28:d4:b1:92:32:88:b5:68:26:f6:
         7c:9c:22:4e:2b:ec:c5:f5:3c:2f:c3:6d:4a:98:65:17:e5:aa:
         51:2e:af:fd:e2:be:40:eb:1f:09:56:8e:9c:c7:cb:4f:f3:b2:
         9a:5d:93:d3:15:67:3c:a4:e1:99:2c:3c:fb:97:af:05:36:19:
         0e:9c:38:a8:85:4f:a8:d0:c7:3d:27:e3:8f:86:71:c9:ba:ba:
         6e:26:98:eb:1d:cf:b8:5d:4b:55:27:3e:20:f3:9e:99:d6:2d:
         5a:b2:ca:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGduD5nW3UKL/KfwoyjnsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjdhOTE5YTVkMzJjZWEyZmQ0MWM4YTllMTg1MTBiZmZm
Y2U4ZDYwHhcNMjYwNzI4MTkwMDQ4WhcNMjYwNzI5MTkwMDQ4WjAzMTEwLwYDVQQD
EygyYzM1YWU2MjIzYzViNWY4Njc2Y2EzZmExNDFiZTFiNDMzZGZmZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPb+3v9maAf6hhHRQDDOQNZxHAx8
0UG20mVEMBlp20Lq/wTPXRCt3T8oTXLjXS1S6XJdo1U4gVpqlRx+Jagbz1FLu7DU
G5+h+J+0frI58L5v+aZ6BP3+EGvLd2uvC1+ZsrxdQBvf71pgnaKSrIfJoqy1vQXr
ifYSpi65mQxYtPUoUXzY/htl9R5ycPbN62zGKxd0rHIOwWzxiwrXrqBtWaMkNq9d
oKbV7xvWwCm3Icd4spXhJd6FgqTvxs3242/VGtPi7qC6tXAaft6kb4cF3AAZV/Vg
NicDwUWm2UsR8EseYH6xdOM6JQcZ8RAROO/HpEAtUP3eF/3yRYmpYWp9wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCw1rmIjxbX4Z2yj+hQb4bQz3/2ZMB8GA1UdIwQY
MBaAFNJnqRml0yzqL9Qcip4YUQv//OjWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1lcEdhWFRMT292MUJ5S25oaFJDX184Nk5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9lZWFmZWYtMzg1Mi00ZTM2LThjODEt
OTM3MjI2N2NmOTUxLzEvMG1lcEdhWFRMT292MUJ5S25oaFJDX184Nk5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9lZWFmZWYtMzg1Mi00ZTM2LThjODEtOTM3MjI2N2NmOTUx
LzEvMG1lcEdhWFRMT292MUJ5S25oaFJDX184Nk5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaEXM+J3
xlM+gh6JvIVkXvTp1CYt71N8WzCOh0mYRo65Js1Vt9WWeTPDNToCE7lMPyr2niiv
q11kQMtL9XA4rXubhqGFPiptpoBbzAlL6gGCgd3oyI4XMOtxdTFv3YM6qbepIpoa
b9YXbwVfuPXt2ocTX/Uir1R8A1C3cDcrrqHBKYcRG8DgAg4kbvPlEd9CJC9S19ng
Xf4o1LGSMoi1aCb2fJwiTivsxfU8L8NtSphlF+WqUS6v/eK+QOsfCVaOnMfLT/Oy
ml2T0xVnPKThmSw8+5evBTYZDpw4qIVPqNDHPSfjj4Zxybq6biaY6x3PuF1LVSc+
IPOemdYtWrLKVg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:58:26 2026 by rpki-client