Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
File:                     76psy3hXNGAC5rvEmPiLnobfGAY.mft (raw, json)
Hash identifier:          NTLtwvOrcOVIGbufgFYxx2w1nNrtfMZR6rAD8WaryOI=
Subject key identifier:   3E:32:A6:5B:2A:26:7B:E1:15:14:5E:92:9F:E2:9D:26:19:15:85:1F
Authority key identifier: EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
Certificate issuer:       /CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Certificate serial:       019E2FCDD6B7A6FAE77B3B0B389714E28972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
Manifest number:          06D1
Signing time:             Sat 16 May 2026 08:01:19 +0000
Manifest this update:     Sat 16 May 2026 08:01:19 +0000
Manifest next update:     Sun 17 May 2026 08:01:19 +0000
Files and hashes:         1: 76psy3hXNGAC5rvEmPiLnobfGAY.crl (hash: xcKmZHNSwXvNOhIeSmVUDtIyX7uyIGS8cNxcvQaqhYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:d6:b7:a6:fa:e7:7b:3b:0b:38:97:14:e2:89:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
        Validity
            Not Before: May 16 08:01:19 2026 GMT
            Not After : May 17 08:01:19 2026 GMT
        Subject: CN=3e32a65b2a267be115145e929fe29d261915851f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1a:a6:83:e7:30:ae:2d:b3:99:9f:1c:eb:e4:
                    3e:02:20:84:1d:6d:bc:16:50:02:ef:61:1d:d1:cf:
                    d3:fc:9d:06:a7:62:3a:3d:9d:3a:f2:a6:a0:78:d7:
                    34:e0:f9:05:f2:35:d7:ed:f6:78:72:8d:8e:d5:ae:
                    21:7c:0c:e5:40:b6:d5:8c:2d:11:1b:c1:c5:86:64:
                    53:f5:34:4c:7e:53:34:49:7c:09:58:4a:42:3c:53:
                    0a:d1:6e:df:69:8c:c6:2c:5f:5c:ac:89:4a:54:47:
                    fc:1a:fa:08:7e:77:32:ae:be:a6:bb:c1:2d:8e:b4:
                    82:6d:c0:97:ae:ae:12:f8:e7:6f:ea:df:7f:45:89:
                    64:07:4e:2d:59:39:37:48:f4:51:8b:08:d1:6c:26:
                    b5:1e:4f:2f:38:84:7d:c3:77:f4:63:21:7a:82:ff:
                    6e:07:f6:63:eb:37:1a:d5:38:5b:4b:74:d0:59:c8:
                    75:58:26:62:22:56:65:4d:5a:7e:68:04:ef:ac:9c:
                    2b:aa:7a:62:e8:a0:b0:12:74:98:dc:1b:4f:9a:da:
                    53:7a:4a:c8:54:40:ff:c5:35:8d:e6:b6:d6:b4:3f:
                    82:66:44:3f:37:d4:bc:29:bf:ed:d2:d2:61:68:e2:
                    6b:bd:e0:93:ab:a8:4e:7c:35:33:a7:18:a7:15:c6:
                    6d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:32:A6:5B:2A:26:7B:E1:15:14:5E:92:9F:E2:9D:26:19:15:85:1F
            X509v3 Authority Key Identifier:
                keyid:EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:76:c7:2b:70:75:a3:72:46:b5:d1:0e:e6:9e:dd:5a:c5:73:
         ac:1c:e7:b9:64:41:4b:8d:b7:bd:3d:96:34:1c:69:06:c6:6d:
         23:88:4b:ab:d6:03:36:57:5d:fa:5c:e0:da:05:e6:df:96:d7:
         96:eb:d4:68:be:c7:01:1b:0b:d3:7e:ba:c7:68:86:ae:11:13:
         df:88:ac:91:c2:a9:b5:ed:fd:3b:42:81:09:34:63:88:b2:54:
         d0:25:ce:fa:30:03:98:af:65:13:65:92:d3:fb:6a:23:5c:01:
         8a:83:13:f8:11:46:b8:d1:63:32:39:e4:76:07:64:6c:3f:89:
         70:11:0b:90:22:e8:bb:76:b5:fb:c7:e0:c0:7e:e9:2e:52:e6:
         9a:ee:81:89:7c:1e:92:f0:71:ce:ae:0b:7d:f2:3f:28:ff:6c:
         35:09:14:d6:db:d2:ca:5e:67:da:77:6b:97:63:62:89:fc:8b:
         84:09:53:72:d5:53:fb:a0:86:b2:4f:95:2d:54:96:dd:b2:96:
         e3:cf:7b:aa:63:45:cb:60:e2:e0:c9:65:3b:e1:90:c6:90:f8:
         22:13:e9:56:92:a1:32:ce:77:a2:49:a6:a4:a5:31:72:50:cd:
         1d:8b:1d:b7:8d:07:63:35:c0:3f:a5:0e:d8:8b:92:69:5f:fe:
         47:a7:23:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:24 2026 by rpki-client