Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
File:                     76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json)
Hash identifier:          y+TUpogwKEKbjcrEYp1OgvQvrxQq2c7VYhSbdsxxzMc=
Subject key identifier:   B3:1E:F6:D9:D3:04:68:89:AF:77:0D:09:64:5A:7C:E0:FB:4D:60:6B
Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
Certificate issuer:       /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Certificate serial:       01A0016ECDF53685AC2110E547E49150E76E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
Manifest number:          19FB
Signing time:             Fri 14 Aug 2026 18:00:33 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:33 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:33 +0000
Files and hashes:         1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: lnIFjzxmcAslsww0mWI2aYqReoTEOUhKREO4qAtN1Cg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6e:cd:f5:36:85:ac:21:10:e5:47:e4:91:50:e7:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
        Validity
            Not Before: Aug 14 18:00:33 2026 GMT
            Not After : Aug 15 18:00:33 2026 GMT
        Subject: CN=b31ef6d9d3046889af770d09645a7ce0fb4d606b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:44:09:9f:9b:6c:e2:35:57:3b:c6:20:fd:c9:
                    6b:2d:37:07:ca:7e:0b:74:40:de:5e:b4:5d:b2:8f:
                    ae:f1:95:11:44:2c:6f:da:05:c5:11:76:d4:93:ec:
                    70:b2:ae:18:6b:41:75:43:49:b6:bb:d1:1c:ab:be:
                    aa:43:ac:16:3f:d1:0c:61:cb:62:5e:af:be:21:55:
                    80:05:33:9c:29:41:d2:df:c3:86:b4:41:16:99:b7:
                    02:ae:20:ac:ca:ac:87:ec:a2:16:51:0f:ad:ad:25:
                    8f:1b:5a:9d:ec:28:88:a0:81:df:a5:3b:6e:0e:b2:
                    9b:dd:cd:ef:6f:96:68:2a:f8:03:89:9b:f5:2e:5a:
                    6d:5c:2f:21:dd:7a:c2:b5:99:5a:cb:72:c2:25:d0:
                    ff:c0:63:a9:d1:ff:14:60:6a:6a:fd:7e:06:5e:2d:
                    f7:e1:dc:87:9d:b8:e2:7c:0e:0e:22:a6:12:11:7e:
                    02:c8:64:b5:95:4a:c2:3d:56:ec:74:bf:d0:94:28:
                    da:d6:24:7e:b5:33:a4:7f:74:7f:7d:13:89:5a:05:
                    ce:b8:d8:73:37:fa:cd:38:19:0a:32:ee:46:57:fc:
                    a6:8c:7a:47:df:d7:a3:30:e3:90:94:e8:2e:77:74:
                    d4:b8:2a:d3:d4:59:53:94:07:b2:14:c8:1e:ba:29:
                    48:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:1E:F6:D9:D3:04:68:89:AF:77:0D:09:64:5A:7C:E0:FB:4D:60:6B
            X509v3 Authority Key Identifier:
                keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:92:d0:5d:41:54:95:b1:42:a0:cf:58:b1:b9:42:81:a3:fb:
         2f:85:01:99:1a:56:17:00:03:fb:61:8e:e1:a0:10:e1:ea:e6:
         e5:3c:9f:d3:b3:ef:62:27:09:5d:43:c4:85:4d:4c:de:b5:fe:
         92:d9:d3:5f:c1:d0:ba:53:2e:f5:3b:4f:ef:d9:96:87:c2:ad:
         07:aa:a5:00:af:be:7c:33:4c:3c:e7:d4:b3:b8:c1:84:2c:e0:
         87:20:f7:ed:08:37:8e:dc:c9:fa:0f:b6:6f:6b:b8:23:78:cf:
         5c:e9:7b:fe:4d:66:c0:cb:c4:dd:aa:71:c8:5a:52:ed:62:cd:
         ac:83:a7:6e:8a:4d:10:0d:aa:bc:f5:f6:a1:1e:85:84:eb:c8:
         cd:58:2a:2e:76:bc:78:d4:ff:12:7b:d6:b6:91:68:42:d5:42:
         ab:96:af:6c:05:a4:6d:e9:a1:d1:bd:16:d3:08:01:74:6b:13:
         7b:77:0c:a2:50:53:15:5e:de:9c:85:9d:34:7a:04:af:74:af:
         f3:b6:cb:2c:72:0b:0e:0e:9f:16:94:63:ef:85:e6:3b:60:8a:
         ca:c8:fd:49:75:8c:26:53:cc:9f:8a:cf:93:4b:fc:d8:53:a7:
         d0:8d:3d:06:8d:5c:a9:e6:dd:2e:50:ce:12:39:a9:4b:83:9a:
         20:a5:ed:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:57 2026 by rpki-client