Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File:                     13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier:          lu8jrsjtYfSOBI2YA2YxuxUjquR+qyMFZrk6hR705Ag=
Subject key identifier:   32:62:E9:25:EA:65:86:4E:0B:74:47:60:CF:BA:50:75:D8:BE:E1:5A
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer:       /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial:       019E1D22557C4D744B079BFD3DC2C8710A4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number:          0DC1
Signing time:             Tue 12 May 2026 17:00:49 +0000
Manifest this update:     Tue 12 May 2026 17:00:49 +0000
Manifest next update:     Wed 13 May 2026 17:00:49 +0000
Files and hashes:         1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: n5HQpB+MKHgMT0y0mhkcjjz0MPWAAqdoF69F2Feu8/g=)
                          2: lAjUh0yd7DRPhi-W3SSvqev0w_E.roa (hash: YCOHiUTXUD1rmQesFlzNj90jbAUp9KL2LXtb7YGRhtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:55:7c:4d:74:4b:07:9b:fd:3d:c2:c8:71:0a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
        Validity
            Not Before: May 12 17:00:49 2026 GMT
            Not After : May 13 17:00:49 2026 GMT
        Subject: CN=3262e925ea65864e0b744760cfba5075d8bee15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:06:ae:50:ee:ef:b0:16:c7:a4:a0:33:85:e7:
                    e7:ec:8e:5d:25:3e:b1:62:6a:03:6b:8a:f7:1f:8e:
                    cb:ed:42:47:b0:d8:f2:49:58:f5:37:4d:07:b7:b8:
                    2a:b5:10:58:23:e7:38:17:7c:0d:84:3f:7f:87:a1:
                    20:09:2a:38:8f:a0:c0:6a:9f:0f:74:13:9d:e2:af:
                    96:e9:d7:02:05:1a:bc:87:f8:a5:31:13:5e:a7:c2:
                    41:63:8c:00:57:e4:13:81:96:d2:60:40:84:43:9b:
                    f1:3b:84:56:dd:6b:c9:ef:c1:cd:ee:61:1e:05:52:
                    a2:60:dc:26:e7:bb:d9:5a:56:eb:68:92:40:ff:6c:
                    da:d7:07:27:97:92:f7:5e:ff:97:54:8a:bd:f1:5e:
                    05:3a:92:bd:b9:bc:1d:9c:6c:b4:54:84:a4:36:71:
                    aa:e2:07:8d:95:bc:5f:d1:f0:d9:30:9b:d2:05:f6:
                    73:6c:4f:b9:bd:3b:1b:93:24:59:b5:dd:e7:ad:1f:
                    68:cc:45:50:b6:77:49:f5:96:6a:f6:fb:7a:b5:5e:
                    08:49:12:08:ba:a7:dc:9e:d8:b4:34:15:16:62:ec:
                    09:43:13:04:8f:33:aa:48:44:f2:db:12:55:af:53:
                    58:a2:cc:d5:8f:c1:95:41:7e:b5:ab:5a:29:5a:6e:
                    c5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:62:E9:25:EA:65:86:4E:0B:74:47:60:CF:BA:50:75:D8:BE:E1:5A
            X509v3 Authority Key Identifier:
                keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:66:61:52:dd:32:98:69:7b:08:2b:1c:18:b4:47:fc:7a:e0:
         87:55:e4:b9:dc:44:46:e2:2d:e5:a3:3f:ea:cb:32:34:49:5e:
         84:b8:b2:06:a1:a4:47:0a:fa:6e:e0:3f:86:0e:1b:d3:c2:74:
         0c:83:3b:36:45:02:ca:05:dc:cf:ab:47:13:6d:96:8a:35:48:
         7a:bb:e7:22:da:39:96:08:8b:cc:93:f1:32:8e:e8:b6:d5:a4:
         5c:35:63:4d:fe:5d:df:bf:71:43:bf:a7:e2:56:16:78:ea:72:
         62:fd:c9:05:72:dd:52:e2:45:51:87:f4:ad:70:1c:93:14:51:
         54:20:d7:88:2b:a3:20:4a:41:80:d6:7b:96:f9:8a:a6:df:19:
         84:37:38:84:b8:f3:d5:3f:29:dd:e8:a9:dc:81:a7:b7:41:8d:
         f8:8b:a1:a8:ec:91:91:b4:f6:5d:5f:9f:67:f3:d1:d0:27:ff:
         bf:86:e5:a8:03:ed:77:8a:24:03:f6:40:35:a6:36:00:1c:9f:
         37:a2:b5:d9:1b:17:a9:c7:ce:05:74:3d:a9:61:de:0b:72:60:
         b1:dd:63:d5:ab:2a:30:94:94:1b:0f:fc:b1:d2:82:99:c2:b8:
         4e:c7:9b:30:46:0e:6c:4c:80:d4:94:eb:33:f0:05:30:54:14:
         f3:ec:70:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dIlV8TXRLB5v9PcLIcQpMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NzEwMGE0NmNjNDZhZTg5NmJkYzJlMGUwNzRlMzA1NWFi
ODg2N2IwHhcNMjYwNTEyMTcwMDQ5WhcNMjYwNTEzMTcwMDQ5WjAzMTEwLwYDVQQD
EygzMjYyZTkyNWVhNjU4NjRlMGI3NDQ3NjBjZmJhNTA3NWQ4YmVlMTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwauUO7vsBbHpKAzhefn7I5dJT6x
YmoDa4r3H47L7UJHsNjySVj1N00Ht7gqtRBYI+c4F3wNhD9/h6EgCSo4j6DAap8P
dBOd4q+W6dcCBRq8h/ilMRNep8JBY4wAV+QTgZbSYECEQ5vxO4RW3WvJ78HN7mEe
BVKiYNwm57vZWlbraJJA/2za1wcnl5L3Xv+XVIq98V4FOpK9ubwdnGy0VISkNnGq
4geNlbxf0fDZMJvSBfZzbE+5vTsbkyRZtd3nrR9ozEVQtndJ9ZZq9vt6tV4ISRII
uqfcnti0NBUWYuwJQxMEjzOqSETy2xJVr1NYoszVj8GVQX61q1opWm7FTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJi6SXqZYZOC3RHYM+6UHXYvuFaMB8GA1UdIwQY
MBaAFNdxAKRsxGrolr3C4OB04wVauIZ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjIt
ZGQ1MGJlMDY3NDAxLzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8zNmUzODItMmI2Mi00NGRjLThmYjItZGQ1MGJlMDY3NDAx
LzEvMTNFQXBHekVhdWlXdmNMZzRIVGpCVnE0aG5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWZhUt0y
mGl7CCscGLRH/Hrgh1XkudxERuIt5aM/6ssyNElehLiyBqGkRwr6buA/hg4b08J0
DIM7NkUCygXcz6tHE22WijVIervnIto5lgiLzJPxMo7ottWkXDVjTf5d379xQ7+n
4lYWeOpyYv3JBXLdUuJFUYf0rXAckxRRVCDXiCujIEpBgNZ7lvmKpt8ZhDc4hLjz
1T8p3eip3IGnt0GN+IuhqOyRkbT2XV+fZ/PR0Cf/v4blqAPtd4okA/ZANaY2AByf
N6K12RsXqcfOBXQ9qWHeC3Jgsd1j1asqMJSUGw/8sdKCmcK4TsebMEYObEyA1JTr
M/AFMFQU8+xwqQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:15:26 2026 by rpki-client