Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File:                     13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier:          YrzaqXK/+NLUo/UBAgrptOcXUmea2SRUbDl1LNL8FCI=
Subject key identifier:   0A:16:6F:59:7F:C5:45:B5:32:FF:30:BB:67:31:31:08:EB:5F:44:F7
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer:       /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial:       019F93C8D88DCCCEB5B4EBB871FFA1D4E7A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number:          0E83
Signing time:             Fri 24 Jul 2026 11:00:41 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:41 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:41 +0000
Files and hashes:         1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: AGHC7fyOx7FRMxETOCg4GJNZ+5Knr2lS6CS0nTpo2Es=)
                          2: lAjUh0yd7DRPhi-W3SSvqev0w_E.roa (hash: YCOHiUTXUD1rmQesFlzNj90jbAUp9KL2LXtb7YGRhtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:d8:8d:cc:ce:b5:b4:eb:b8:71:ff:a1:d4:e7:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
        Validity
            Not Before: Jul 24 11:00:41 2026 GMT
            Not After : Jul 25 11:00:41 2026 GMT
        Subject: CN=0a166f597fc545b532ff30bb67313108eb5f44f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:32:c2:f2:1e:04:48:d5:15:c6:d3:48:e7:
                    fa:c4:f6:65:b3:67:6f:2b:b0:68:04:63:d6:80:10:
                    e2:ea:3b:ed:7c:43:cf:6d:56:17:e6:66:1c:d9:2f:
                    ea:f9:6c:8d:30:38:03:6a:d3:a6:e3:d7:1a:46:b2:
                    e6:d9:d8:a6:11:bb:91:64:0d:01:81:5e:75:b8:5c:
                    4a:c9:72:c1:dc:57:38:60:23:31:92:a7:68:d4:00:
                    2a:52:fd:4c:76:04:2e:4e:21:82:2c:3e:c9:28:67:
                    c2:68:30:63:49:95:b9:7b:e5:03:47:80:6b:25:85:
                    21:6a:1b:7c:d3:70:fb:c7:8a:0e:68:fe:dd:4c:bb:
                    6a:6b:18:fc:b5:b2:18:4f:9b:47:b7:23:3b:24:77:
                    99:cf:c2:a0:3c:5e:30:7f:4d:00:50:bf:60:16:1c:
                    7b:da:09:70:b7:80:1c:4a:f3:3b:75:3a:2e:6d:44:
                    f5:4c:17:7e:c1:00:dd:54:e6:03:da:35:40:87:1b:
                    a4:db:f6:8c:15:2e:41:3f:3d:c0:f7:de:16:a8:19:
                    34:d7:a3:bf:02:31:be:9f:6c:03:02:b7:84:a0:0c:
                    24:eb:57:a6:52:39:93:f3:1f:84:d8:d9:4e:15:b0:
                    9d:e9:2b:cc:2e:c3:dc:de:16:79:86:a7:b4:70:af:
                    4f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:16:6F:59:7F:C5:45:B5:32:FF:30:BB:67:31:31:08:EB:5F:44:F7
            X509v3 Authority Key Identifier:
                keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5e:2c:6b:a6:c6:24:ba:7a:53:7b:ac:3b:3c:56:df:cc:4a:
         69:1e:56:1d:8f:5e:40:15:87:09:23:c0:02:0a:d5:5c:bb:9a:
         16:f6:82:ef:fe:58:3f:e5:c2:be:2b:31:89:f6:ca:95:61:c2:
         b8:4e:02:e1:e0:44:11:dc:3c:ca:a6:a4:50:c6:43:78:a9:95:
         66:62:8d:f5:f9:41:d3:9d:b0:86:05:32:f3:f8:6c:33:d1:96:
         9a:0d:1d:a0:cd:06:dc:81:c3:ae:59:3b:a5:d8:de:c1:db:70:
         d8:d4:4e:81:41:c4:36:85:ae:8c:26:07:4f:f3:43:54:54:26:
         f7:c2:06:9f:9d:3a:81:50:aa:b3:18:e8:4b:44:16:f7:33:d4:
         57:ad:11:e9:fe:71:ce:09:25:a5:37:9a:21:0f:db:95:41:7e:
         37:80:ee:42:66:28:24:da:ad:3a:02:9d:ef:12:c2:bd:36:3b:
         d0:df:14:4c:cc:ca:92:68:54:fb:f4:2e:f3:83:17:2c:6a:a8:
         a9:bb:c2:50:26:de:74:d4:93:65:54:56:c2:c1:b6:21:c0:80:
         f1:4c:34:e0:4b:04:4a:9e:8e:50:23:6b:e2:9f:f8:a8:58:7c:
         d4:b3:e0:cd:44:d4:14:a6:ea:79:15:41:8b:8c:57:6a:24:d6:
         f4:60:80:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyNiNzM61tOu4cf+h1OehMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NzEwMGE0NmNjNDZhZTg5NmJkYzJlMGUwNzRlMzA1NWFi
ODg2N2IwHhcNMjYwNzI0MTEwMDQxWhcNMjYwNzI1MTEwMDQxWjAzMTEwLwYDVQQD
EygwYTE2NmY1OTdmYzU0NWI1MzJmZjMwYmI2NzMxMzEwOGViNWY0NGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQwywvIeBEjVFcbTSOf6xPZls2dv
K7BoBGPWgBDi6jvtfEPPbVYX5mYc2S/q+WyNMDgDatOm49caRrLm2dimEbuRZA0B
gV51uFxKyXLB3Fc4YCMxkqdo1AAqUv1MdgQuTiGCLD7JKGfCaDBjSZW5e+UDR4Br
JYUhaht803D7x4oOaP7dTLtqaxj8tbIYT5tHtyM7JHeZz8KgPF4wf00AUL9gFhx7
2glwt4AcSvM7dToubUT1TBd+wQDdVOYD2jVAhxuk2/aMFS5BPz3A994WqBk016O/
AjG+n2wDAreEoAwk61emUjmT8x+E2NlOFbCd6SvMLsPc3hZ5hqe0cK9PSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoWb1l/xUW1Mv8wu2cxMQjrX0T3MB8GA1UdIwQY
MBaAFNdxAKRsxGrolr3C4OB04wVauIZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjIt
ZGQ1MGJlMDY3NDAxLzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjItZGQ1MGJlMDY3NDAx
LzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATl4sa6bG
JLp6U3usOzxW38xKaR5WHY9eQBWHCSPAAgrVXLuaFvaC7/5YP+XCvisxifbKlWHC
uE4C4eBEEdw8yqakUMZDeKmVZmKN9flB052whgUy8/hsM9GWmg0doM0G3IHDrlk7
pdjewdtw2NROgUHENoWujCYHT/NDVFQm98IGn506gVCqsxjoS0QW9zPUV60R6f5x
zgklpTeaIQ/blUF+N4DuQmYoJNqtOgKd7xLCvTY70N8UTMzKkmhU+/Qu84MXLGqo
qbvCUCbedNSTZVRWwsG2IcCA8Uw04EsESp6OUCNr4p/4qFh81LPgzUTUFKbqeRVB
i4xXaiTW9GCARg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:01:43 2026 by rpki-client