Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
File:                     76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json)
Hash identifier:          2qMmyK+Xfzpz9DRYLM7gLLwWpZVSnMe//vs9EqyWf9o=
Subject key identifier:   E0:2E:D0:85:13:00:1E:01:01:93:5E:03:41:49:B3:5B:AA:EE:58:12
Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
Certificate issuer:       /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Certificate serial:       019E30048C5439D901E86854F74F6B8F4CA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
Manifest number:          190A
Signing time:             Sat 16 May 2026 09:01:04 +0000
Manifest this update:     Sat 16 May 2026 09:01:04 +0000
Manifest next update:     Sun 17 May 2026 09:01:04 +0000
Files and hashes:         1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: da6MRQyvVa0Sxt38yYU3GAF4dtq4FBjam9aJzxVIj5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:8c:54:39:d9:01:e8:68:54:f7:4f:6b:8f:4c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
        Validity
            Not Before: May 16 09:01:04 2026 GMT
            Not After : May 17 09:01:04 2026 GMT
        Subject: CN=e02ed08513001e0101935e034149b35baaee5812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:28:f5:bd:60:a4:41:00:2f:c4:df:c3:38:df:
                    0b:f8:5e:97:c7:ca:46:c2:3b:ab:3c:71:b0:63:52:
                    29:c0:63:e6:06:1f:1d:28:99:18:79:e3:0d:34:1f:
                    da:88:5f:11:3b:bd:12:d7:1f:a5:a8:f6:20:50:7c:
                    ae:9d:03:b9:84:f7:2b:2e:23:90:f6:b8:6c:a0:2f:
                    d8:72:58:29:d6:f5:19:15:8e:dd:90:2d:a9:71:f0:
                    e5:89:6b:3e:b6:34:45:a6:32:b2:e4:a1:93:80:f0:
                    f4:ec:ee:02:30:28:8e:58:0d:a9:7d:3d:74:7e:32:
                    ef:16:9d:bf:42:1a:b1:5f:09:f2:c9:b5:d9:87:cd:
                    8c:e4:c4:7d:0d:ef:15:23:e6:6c:06:ef:70:eb:fe:
                    68:65:80:ea:3f:e9:ee:59:70:a0:1a:8b:d2:02:2e:
                    e5:ca:00:89:d5:28:07:b8:79:df:fa:d4:11:66:18:
                    99:2b:cf:b8:36:97:f7:de:24:6c:45:b5:30:39:6e:
                    d5:85:76:78:41:14:dc:32:f6:fe:67:6a:c0:80:9e:
                    9f:fd:d3:97:df:90:e1:0d:d2:fa:fb:1c:33:0b:67:
                    2c:73:ee:70:cf:a4:13:02:45:ec:d3:3a:93:5f:17:
                    83:f0:d1:ee:10:fe:36:72:74:e0:eb:98:d8:5d:da:
                    a5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2E:D0:85:13:00:1E:01:01:93:5E:03:41:49:B3:5B:AA:EE:58:12
            X509v3 Authority Key Identifier:
                keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:96:46:8a:7a:ca:d3:aa:e5:3c:47:13:58:45:81:28:2f:63:
         9a:10:4e:75:38:cf:26:9e:46:92:30:45:76:29:40:f3:69:fb:
         55:8f:64:30:3c:f9:4e:dc:3a:a8:5c:61:bc:fb:bd:8a:be:84:
         93:78:a9:41:01:57:db:35:27:53:46:65:80:21:68:58:d9:0f:
         7d:72:f1:47:77:b4:a8:1d:ff:7c:3c:3f:02:ab:56:2e:3f:fa:
         28:ed:b5:4e:82:23:e0:21:6f:6d:fe:1b:8f:86:36:06:e3:dd:
         b1:fb:de:21:fc:23:6e:a9:d1:7a:d3:be:3b:87:02:6d:58:e4:
         bb:d2:54:cc:d5:8b:fb:8a:48:02:6a:96:ee:d4:3c:c8:1a:26:
         fb:88:00:10:a4:f0:ef:01:6f:c0:4a:c9:dd:66:90:77:f9:28:
         e5:e7:d7:be:98:2d:bb:da:08:3e:ae:39:1d:ab:2c:3f:36:8a:
         18:46:47:e0:37:79:c1:db:20:5b:46:cc:cc:0e:47:b2:9b:ec:
         82:76:66:6c:bc:fb:90:a8:ff:6e:b0:1f:0b:1f:a8:32:e1:db:
         a1:83:42:80:70:ce:27:10:2b:f4:0d:c5:b6:f4:c3:49:e5:da:
         b9:c8:c2:7b:fc:49:b5:56:91:f3:f3:a7:d9:87:7e:56:ba:a4:
         76:4a:e2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:41 2026 by rpki-client