Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
File:                     76vFwTMKPwsDGbsWxENIzRuBnkQ.mft (raw, json)
Hash identifier:          Ix2up0wJeypxza2LpWpt815a9m+1lmdEKH7cEzTIOv4=
Subject key identifier:   96:46:E6:DF:06:0E:BA:75:FE:91:25:6A:AE:60:F5:10:41:54:13:E9
Authority key identifier: EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44
Certificate issuer:       /CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
Certificate serial:       019FA2294297BDD7DFCC00713BACF8CDCF0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
Manifest number:          06C3
Signing time:             Mon 27 Jul 2026 06:00:40 +0000
Manifest this update:     Mon 27 Jul 2026 06:00:40 +0000
Manifest next update:     Tue 28 Jul 2026 06:00:40 +0000
Files and hashes:         1: 76vFwTMKPwsDGbsWxENIzRuBnkQ.crl (hash: T7mc7LmMpsTuizLFlk4ipVf8l/sW4XyF0DMA+lub5I0=)
                          2: GAUUFbrMaCi8twL5FhYDaZpEPLs.roa (hash: +xCgImVqcUMnpmtGGiJK28GMNwusbZ27Pk5kQ0ngYBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:29:42:97:bd:d7:df:cc:00:71:3b:ac:f8:cd:cf:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efabc5c1330a3f0b0319bb16c44348cd1b819e44
        Validity
            Not Before: Jul 27 06:00:40 2026 GMT
            Not After : Jul 28 06:00:40 2026 GMT
        Subject: CN=9646e6df060eba75fe91256aae60f510415413e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a3:fb:0b:e5:48:df:90:70:ac:82:d0:4e:e5:
                    fe:55:e9:26:09:85:3f:41:cb:84:04:5b:b2:62:fb:
                    86:d9:3a:da:0c:c3:06:d5:9b:d4:45:05:43:09:1e:
                    84:08:bf:73:af:51:10:6d:2d:c4:61:ea:09:63:34:
                    46:33:d9:6c:45:3c:a7:db:a7:bc:b6:53:1d:02:20:
                    f6:81:e1:0a:bb:b6:6b:7f:e3:74:df:5d:d4:45:a7:
                    f8:ef:f6:74:86:52:a1:c2:51:58:7b:da:e3:d0:9e:
                    b2:ad:c4:aa:44:39:29:fc:1c:fb:b2:ef:28:79:d1:
                    ef:d9:bb:a5:12:8b:06:71:e1:ca:35:2f:e2:b8:a2:
                    ea:51:f2:eb:f2:17:76:09:c1:06:16:fc:67:7e:6e:
                    41:8b:d2:e3:db:b0:5f:e3:f1:49:3c:3a:7a:8d:8a:
                    fd:c7:ad:1b:d7:3e:a8:44:d6:59:a8:26:cb:18:dc:
                    1d:98:7d:4a:a3:8f:30:01:b9:ca:87:0b:9d:8c:02:
                    e3:df:9d:1b:45:b4:7a:96:a3:ee:fc:f2:42:e3:29:
                    6e:84:47:9e:78:93:16:a8:87:4c:ae:e9:9d:47:de:
                    6d:a2:b5:a6:1b:79:99:37:f9:36:b8:d8:54:f4:18:
                    83:7a:7f:db:cb:2a:3c:b6:20:7f:41:9d:05:e6:aa:
                    58:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:46:E6:DF:06:0E:BA:75:FE:91:25:6A:AE:60:F5:10:41:54:13:E9
            X509v3 Authority Key Identifier:
                keyid:EF:AB:C5:C1:33:0A:3F:0B:03:19:BB:16:C4:43:48:CD:1B:81:9E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76vFwTMKPwsDGbsWxENIzRuBnkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/be38dc-da15-4048-8851-de1dca379734/1/76vFwTMKPwsDGbsWxENIzRuBnkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:6d:a0:5d:26:2a:e5:19:42:d1:3b:03:70:bc:28:74:83:da:
         99:8c:10:89:fb:5c:5a:17:91:b1:42:44:28:c6:0e:db:0b:ec:
         8c:ff:04:c5:09:66:58:96:d4:97:9b:67:2c:3e:ee:37:0f:a1:
         45:19:19:d0:cb:17:df:f7:50:de:e0:3a:5f:a8:6c:fe:2e:c7:
         7e:56:6a:1c:e1:42:c3:ff:fe:5b:9f:76:78:c5:6e:e9:c7:db:
         0d:e0:65:71:b0:db:84:24:0c:b1:a4:77:58:16:a9:67:06:c2:
         ab:d6:b2:4c:a4:05:32:cd:cb:34:45:16:bc:d2:a7:78:4f:61:
         db:7d:84:b0:5b:43:b8:d3:c3:6f:a9:cd:a8:b4:3f:4d:6e:39:
         a3:21:0a:83:cd:b0:c2:e3:e6:15:ac:d3:c4:73:05:72:b0:43:
         37:85:e3:a6:99:17:66:11:83:1b:d7:a9:91:d4:29:f1:00:a0:
         24:28:a5:54:22:43:a5:f0:17:5d:ae:79:e0:b8:09:96:d4:81:
         c0:40:0c:16:56:70:4d:46:64:f8:f6:fb:e0:26:28:de:37:3a:
         0e:75:8b:a3:4b:29:26:93:8d:c8:e7:0f:1b:ec:ea:79:f8:4c:
         8c:05:9d:5d:57:97:07:ed:62:81:b3:91:90:f0:cb:4e:2b:a7:
         6d:6d:a9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:30:33 2026 by rpki-client