Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
File:                     Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json)
Hash identifier:          KG3W1HHrIJaWrr/cqLQEhgd75oxa0RqTMMMhAjfkf5Y=
Subject key identifier:   B7:3B:ED:C3:35:03:FA:22:CC:51:FE:E5:4A:B0:33:4E:A9:88:B0:19
Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
Certificate issuer:       /CN=029f93002d78e8e40da560c4291fb830d92dff66
Certificate serial:       019EBEEC67B973EA78F5D386091566A3EF17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
Manifest number:          18E8
Signing time:             Sat 13 Jun 2026 03:00:24 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:24 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:24 +0000
Files and hashes:         1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: E4+owF1CqZt/ON1NkARDvprrmzMwhLqXjxdFfW5IEmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:67:b9:73:ea:78:f5:d3:86:09:15:66:a3:ef:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66
        Validity
            Not Before: Jun 13 03:00:24 2026 GMT
            Not After : Jun 14 03:00:24 2026 GMT
        Subject: CN=b73bedc33503fa22cc51fee54ab0334ea988b019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:f7:de:c2:72:ba:3e:59:b8:de:10:db:d5:
                    5e:a9:03:3a:49:28:6c:af:0c:09:36:fa:f3:9d:22:
                    ee:fe:eb:6d:6f:5e:9d:44:29:f2:b3:00:85:26:0b:
                    e3:9a:51:e8:83:68:1c:c7:a9:9b:d6:29:8a:19:1d:
                    86:ad:73:e6:94:09:c8:6b:86:07:00:89:8c:5c:ab:
                    54:8d:ad:d2:e5:37:96:17:ee:fc:80:3a:db:46:75:
                    1a:d8:a2:bd:cc:29:88:0a:bf:c5:bf:7c:68:37:34:
                    4b:dc:40:ce:d3:87:34:94:56:a2:32:25:66:54:55:
                    69:89:b3:8f:b5:76:50:8d:a9:27:df:75:ed:89:9a:
                    4c:af:a0:ef:87:8b:67:5e:3a:90:e0:54:9d:7e:6c:
                    be:6b:76:31:f8:03:3e:72:54:fb:e3:f9:c5:3e:be:
                    e8:ff:f6:00:b4:86:69:d4:53:98:a5:5f:92:c1:f1:
                    2b:7f:83:30:7a:87:b4:1b:a6:2c:19:99:f3:0a:37:
                    72:ce:c9:5e:ab:96:40:fa:0c:43:be:06:46:d1:3c:
                    b1:21:bb:06:df:56:f8:2b:e5:c6:bb:ca:76:b3:73:
                    72:d5:88:82:8c:a2:4c:fb:5e:f7:09:d3:00:2f:83:
                    7f:2c:58:d7:aa:97:02:4a:b7:56:fc:1f:b8:a9:24:
                    f9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3B:ED:C3:35:03:FA:22:CC:51:FE:E5:4A:B0:33:4E:A9:88:B0:19
            X509v3 Authority Key Identifier:
                keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:9f:9c:a5:e4:84:f6:ec:08:2d:5f:63:16:fe:ec:33:f0:3a:
         92:c6:45:09:b2:ed:79:22:45:5a:08:22:5f:9a:70:a9:e1:ef:
         c5:64:b6:19:77:c8:55:15:a4:71:dd:4b:5e:39:ad:41:30:05:
         94:85:bf:fa:ef:06:0e:1e:4c:a8:b7:c7:77:d8:97:a7:05:6b:
         ba:0f:bb:ee:38:5e:57:b0:29:86:cf:c9:64:b3:46:94:57:ee:
         37:19:08:a3:65:34:3e:9c:88:dd:8a:e8:4b:61:bb:5a:13:89:
         9a:ab:c3:7d:59:2e:fc:08:cd:86:ad:0f:4e:b1:44:9a:e9:64:
         b5:4f:47:36:66:ab:17:3b:cf:3c:73:5d:5b:f0:9c:61:a3:da:
         db:b8:c7:62:4c:8a:6b:e6:7d:b5:d5:a3:99:27:36:8d:d9:cd:
         91:b4:4b:c2:1c:ee:f5:61:cf:e4:e4:d2:c9:8b:c7:5c:55:b6:
         8e:00:8d:40:0a:e4:e0:f8:49:1d:27:bf:cc:db:63:d4:ef:71:
         d6:7a:e3:1c:98:f4:7a:ce:bf:7b:34:0f:0a:33:98:d3:ee:87:
         d1:a0:7f:3d:4e:5c:9b:64:1b:b8:29:f6:cb:ec:61:b4:e2:4f:
         4c:c3:93:70:c4:23:06:40:c3:ad:65:e7:6a:35:9c:dd:24:48:
         b2:20:1f:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7Ge5c+p49dOGCRVmo+8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyOWY5MzAwMmQ3OGU4ZTQwZGE1NjBjNDI5MWZiODMwZDky
ZGZmNjYwHhcNMjYwNjEzMDMwMDI0WhcNMjYwNjE0MDMwMDI0WjAzMTEwLwYDVQQD
EyhiNzNiZWRjMzM1MDNmYTIyY2M1MWZlZTU0YWIwMzM0ZWE5ODhiMDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM733sJyuj5ZuN4Q29VeqQM6SShs
rwwJNvrznSLu/uttb16dRCnyswCFJgvjmlHog2gcx6mb1imKGR2GrXPmlAnIa4YH
AImMXKtUja3S5TeWF+78gDrbRnUa2KK9zCmICr/Fv3xoNzRL3EDO04c0lFaiMiVm
VFVpibOPtXZQjakn33XtiZpMr6Dvh4tnXjqQ4FSdfmy+a3Yx+AM+clT74/nFPr7o
//YAtIZp1FOYpV+SwfErf4Mweoe0G6YsGZnzCjdyzsleq5ZA+gxDvgZG0TyxIbsG
31b4K+XGu8p2s3Ny1YiCjKJM+173CdMAL4N/LFjXqpcCSrdW/B+4qST54wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLc77cM1A/oizFH+5UqwM06piLAZMB8GA1UdIwQY
MBaAFAKfkwAteOjkDaVgxCkfuDDZLf9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXAtVEFDMTQ2T1FOcFdERUtSLTRNTmt0XzJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83ODYzN2UtMDcyZC00NzAwLTg1N2Yt
NWYyNjM1NWM4YTc0LzEvQXAtVEFDMTQ2T1FOcFdERUtSLTRNTmt0XzJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83ODYzN2UtMDcyZC00NzAwLTg1N2YtNWYyNjM1NWM4YTc0
LzEvQXAtVEFDMTQ2T1FOcFdERUtSLTRNTmt0XzJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVp+cpeSE
9uwILV9jFv7sM/A6ksZFCbLteSJFWggiX5pwqeHvxWS2GXfIVRWkcd1LXjmtQTAF
lIW/+u8GDh5MqLfHd9iXpwVrug+77jheV7Aphs/JZLNGlFfuNxkIo2U0PpyI3Yro
S2G7WhOJmqvDfVku/AjNhq0PTrFEmulktU9HNmarFzvPPHNdW/CcYaPa27jHYkyK
a+Z9tdWjmSc2jdnNkbRLwhzu9WHP5OTSyYvHXFW2jgCNQArk4PhJHSe/zNtj1O9x
1nrjHJj0es6/ezQPCjOY0+6H0aB/PU5cm2QbuCn2y+xhtOJPTMOTcMQjBkDDrWXn
ajWc3SRIsiAfww==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:13:12 2026 by rpki-client