Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
File:                     73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json)
Hash identifier:          T1G7jCxvsCovTVzKN4Bve8qAla2HqIttyBjQGYAIwyE=
Subject key identifier:   E4:F8:EB:92:62:8A:27:7E:76:55:AD:A2:A4:C3:4C:7C:35:58:57:AE
Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
Certificate issuer:       /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Certificate serial:       019F17F9210CF27C63863EF2C19B2FD9A0E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
Manifest number:          1989
Signing time:             Tue 30 Jun 2026 10:00:30 +0000
Manifest this update:     Tue 30 Jun 2026 10:00:30 +0000
Manifest next update:     Wed 01 Jul 2026 10:00:30 +0000
Files and hashes:         1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: lDfDTBGCUjNLWd0ora5yeBr/IGgKQWQlankRgykl5W0=)
                          2: s3XOS3QA_OLCEJgqKQs1DGSZPSE.roa (hash: zm1kL82qrnuSElGfAwXwitkc6LPDrRud9bFF8MtyuyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:21:0c:f2:7c:63:86:3e:f2:c1:9b:2f:d9:a0:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
        Validity
            Not Before: Jun 30 10:00:30 2026 GMT
            Not After : Jul  1 10:00:30 2026 GMT
        Subject: CN=e4f8eb92628a277e7655ada2a4c34c7c355857ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:b5:d0:89:7b:f4:eb:15:c5:3d:6c:b2:66:
                    df:82:d8:e1:ec:32:74:ab:1c:93:42:a8:52:66:b4:
                    5e:2d:da:95:fa:9c:81:0b:07:9b:ee:3b:ef:86:20:
                    54:52:9b:ff:ad:97:2d:93:62:2d:d5:2e:29:d3:33:
                    87:ae:f6:d8:76:55:f9:f6:3e:0c:e7:1d:06:53:e9:
                    53:4a:42:61:39:a0:37:51:d6:db:65:b6:98:50:37:
                    72:16:0e:1c:ca:a7:57:36:96:5e:73:19:0d:bf:c6:
                    e0:b7:23:e1:f3:6b:77:02:38:a5:01:50:d0:45:53:
                    25:e4:ec:9b:03:b2:f0:24:19:9e:3b:32:87:62:96:
                    ab:a8:e6:e6:33:26:5e:ea:d2:70:91:71:ea:01:46:
                    9f:e1:41:44:36:2b:67:6f:b4:aa:a0:50:33:d5:65:
                    7c:01:7f:4b:fa:2b:a9:ec:cf:09:3d:02:f5:b1:b9:
                    a5:86:9c:56:13:88:d4:18:96:84:99:5a:6f:9c:4f:
                    8c:9e:5c:dd:9f:51:27:21:ef:7b:da:6e:6d:f8:19:
                    7f:ef:99:9e:df:4b:e4:43:24:b1:4c:ed:80:5e:ad:
                    a2:a3:5b:cd:48:7c:7d:0d:62:2c:17:82:1b:79:38:
                    ca:41:8f:12:2b:ef:20:34:19:2e:b3:4a:05:be:43:
                    df:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F8:EB:92:62:8A:27:7E:76:55:AD:A2:A4:C3:4C:7C:35:58:57:AE
            X509v3 Authority Key Identifier:
                keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e0:9f:d1:a0:c6:e7:75:6c:ea:e4:bd:86:32:bc:85:d6:02:
         bf:1e:34:0b:a6:5d:c5:ad:14:b5:63:4f:56:63:16:6f:21:3d:
         af:c6:8f:74:fa:84:b2:48:f7:41:76:2e:8c:bd:65:18:69:95:
         2a:4c:75:8c:50:14:72:0e:c6:8b:68:b4:4a:79:63:86:ea:c5:
         97:70:94:62:4b:ab:91:b3:43:8e:03:e9:ed:25:ad:4f:db:e5:
         01:f9:2b:e2:c5:24:be:2e:a8:a0:8c:b0:87:56:f8:ad:32:af:
         c6:fc:80:94:e5:e8:11:96:9b:49:69:50:33:81:8a:b3:6e:47:
         53:06:fa:e6:04:6c:e8:e0:ba:b4:be:72:8d:1b:26:6c:72:54:
         f7:92:a3:73:81:f8:ef:d7:45:9b:05:b5:ef:33:71:2e:30:2b:
         56:a4:b6:c1:b2:ad:1f:65:31:51:d0:ec:6a:7d:20:75:d9:58:
         fb:f5:77:0d:76:47:9b:42:9d:70:18:34:97:78:8f:84:6b:d9:
         f4:40:5a:e3:08:b4:c7:57:bb:fa:f2:80:45:8c:90:17:e3:dd:
         51:f1:ad:cd:90:b4:2f:73:94:d7:4f:bd:b0:85:f3:01:6e:89:
         b4:d2:21:0a:d9:b3:20:9c:7d:02:79:59:d2:22:d5:e9:3a:df:
         7c:2e:bc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:23:39 2026 by rpki-client