Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
File:                     13EApGzEauiWvcLg4HTjBVq4hns.mft (raw, json)
Hash identifier:          M19jbJ9yjIZ/jA6hfsZ9MGtRonVOSRkub+m2tRhN5EI=
Subject key identifier:   37:71:21:D6:07:CE:C0:49:59:EA:25:57:61:16:27:D2:3D:37:99:05
Authority key identifier: D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B
Certificate issuer:       /CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
Certificate serial:       019F91DA6DEC704ABF5A5198999F30BC2669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
Manifest number:          0E82
Signing time:             Fri 24 Jul 2026 02:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:38 +0000
Files and hashes:         1: 13EApGzEauiWvcLg4HTjBVq4hns.crl (hash: 9AZzyebV/0Twa8wrRvSaT/0XrlzKr2sTwqWy0wC0LqU=)
                          2: lAjUh0yd7DRPhi-W3SSvqev0w_E.roa (hash: YCOHiUTXUD1rmQesFlzNj90jbAUp9KL2LXtb7YGRhtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:6d:ec:70:4a:bf:5a:51:98:99:9f:30:bc:26:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d77100a46cc46ae896bdc2e0e074e3055ab8867b
        Validity
            Not Before: Jul 24 02:00:38 2026 GMT
            Not After : Jul 25 02:00:38 2026 GMT
        Subject: CN=377121d607cec04959ea2557611627d23d379905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:94:b6:5b:f9:d4:47:d4:ee:8b:2c:42:48:4b:
                    18:c4:50:a8:50:81:f8:77:43:a6:58:e4:48:b8:d4:
                    62:1d:90:5d:78:9b:1e:2b:0e:19:b4:59:9b:f2:73:
                    10:18:b8:f4:30:6b:e1:e3:b5:66:ce:61:67:7e:da:
                    35:a1:98:8b:1c:7c:18:27:e5:33:4a:5f:5d:03:b4:
                    09:21:e8:6a:be:64:ef:2f:52:79:d8:41:57:38:d0:
                    7c:88:29:02:31:d8:f7:52:93:4d:bc:a2:4c:19:5a:
                    74:9d:6b:4d:5d:3c:17:d1:0f:68:36:ad:36:6b:f3:
                    5e:8c:52:a6:e9:5a:d4:7f:36:ee:07:ba:a0:e4:68:
                    fa:1a:ad:3d:34:41:0f:24:31:74:27:ec:c7:01:da:
                    c7:60:7e:94:71:c1:33:4a:ac:ef:7f:cb:1a:e0:27:
                    de:ae:ce:a6:1c:88:01:c8:01:84:28:e4:67:43:21:
                    17:b4:34:ad:9c:1a:d7:53:3d:a4:df:44:dc:82:32:
                    bf:37:87:32:50:4a:64:41:1a:bb:96:3d:e0:21:ec:
                    cd:06:34:d3:e4:89:93:ea:2c:ce:4b:90:ef:a9:a8:
                    66:62:ac:c1:0a:f4:fd:b1:29:4c:d5:4c:e6:98:a0:
                    b7:74:00:07:da:93:dc:4d:fd:e3:50:73:50:66:a4:
                    41:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:71:21:D6:07:CE:C0:49:59:EA:25:57:61:16:27:D2:3D:37:99:05
            X509v3 Authority Key Identifier:
                keyid:D7:71:00:A4:6C:C4:6A:E8:96:BD:C2:E0:E0:74:E3:05:5A:B8:86:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13EApGzEauiWvcLg4HTjBVq4hns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/36e382-2b62-44dc-8fb2-dd50be067401/1/13EApGzEauiWvcLg4HTjBVq4hns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:82:37:90:98:1d:f3:1d:84:43:a5:ca:c1:2d:9e:2c:32:b4:
         97:b1:e8:99:db:11:60:7b:00:6c:16:2a:b9:2f:d3:53:e4:0a:
         80:12:51:73:f7:e3:7a:f4:a4:98:20:8f:a7:46:17:f7:b9:e3:
         a0:8f:cd:2d:b0:f3:5f:6d:9d:ae:61:69:67:e5:02:bc:37:4e:
         fa:65:8b:45:db:8c:b7:98:a4:e4:5f:a3:75:da:5a:e9:1f:dd:
         53:d9:8d:d0:f4:9c:01:cc:c8:b3:60:64:20:a7:11:84:3f:5c:
         d1:0d:9c:d5:71:6b:cb:37:03:9f:ee:3e:c3:98:55:b7:5a:6b:
         fd:33:a3:6f:3b:73:8d:63:e9:56:b4:a1:9a:ef:4b:6c:30:11:
         e4:55:c5:79:9b:72:b1:cb:a5:6b:b2:cf:32:7c:ec:01:c5:ac:
         d7:35:e7:4a:60:84:4d:61:60:65:aa:a8:55:5d:88:9a:8a:23:
         89:5b:eb:73:01:5b:2b:a9:01:f8:3c:71:f5:bf:12:97:4c:66:
         f4:7c:16:33:a3:2b:02:ad:74:53:60:f4:2e:49:49:7f:e0:4d:
         ce:54:31:3f:56:12:a1:a0:30:c6:48:95:5c:a6:80:e5:9d:bc:
         d7:7c:17:17:dc:a6:eb:99:3b:9a:8d:31:fb:4c:b6:5e:53:37:
         5f:8f:9e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:41:44 2026 by rpki-client