Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
File:                     73i8lpqDBzNu9ARPPf7x_hNjgrM.mft (raw, json)
Hash identifier:          0LhRb/yw8jUZHjG4pMxswVHfu5iNmkAY4XX42BB8IoQ=
Subject key identifier:   04:38:7F:37:83:60:C6:94:64:09:C3:86:5C:E4:65:45:CA:54:DD:00
Authority key identifier: EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
Certificate issuer:       /CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Certificate serial:       019E30E057D2AD12ACF03F2085A74E939457
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
Manifest number:          0ED8
Signing time:             Sat 16 May 2026 13:01:09 +0000
Manifest this update:     Sat 16 May 2026 13:01:09 +0000
Manifest next update:     Sun 17 May 2026 13:01:09 +0000
Files and hashes:         1: 73i8lpqDBzNu9ARPPf7x_hNjgrM.crl (hash: +mkxKCLCRE0CQgh76bIqsQaoDAJan83d3guCxYuifJI=)
                          2: tX9OyoBEYMF2XV4dez69hRjVkN4.roa (hash: jRKxFIJbG2B0T0vVXLe06uc5pOJoGJLwsVGTSpeMt0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:57:d2:ad:12:ac:f0:3f:20:85:a7:4e:93:94:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
        Validity
            Not Before: May 16 13:01:09 2026 GMT
            Not After : May 17 13:01:09 2026 GMT
        Subject: CN=04387f378360c6946409c3865ce46545ca54dd00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b8:d4:15:34:7a:cd:d1:7e:66:5a:72:66:f3:
                    f3:a8:f5:ce:1a:1b:6a:02:a6:e3:a4:14:ae:c1:7c:
                    67:88:74:70:44:ce:23:fd:1c:3b:6d:7d:2e:b7:63:
                    f1:26:a8:f1:16:dd:85:cf:d3:11:94:d8:b3:14:4a:
                    81:07:46:e8:3d:e9:66:13:eb:ab:3a:fa:1d:1c:21:
                    28:54:c2:48:1f:d1:f7:6a:20:ae:13:0e:49:9e:52:
                    7d:b3:11:73:81:7c:4c:ae:49:3f:6e:33:1e:95:82:
                    08:f7:fe:68:64:cb:7a:26:cf:f5:99:47:92:18:5e:
                    d6:0c:9f:e8:93:be:e8:2e:53:20:ac:63:43:72:14:
                    b3:f8:94:25:a2:7a:39:ea:65:83:c9:3f:9f:53:89:
                    e6:a4:73:86:e4:9e:26:f2:64:b4:7a:25:75:38:22:
                    ed:c2:fa:80:c0:06:17:0e:81:51:8f:ea:81:9e:5d:
                    64:35:5c:e7:0f:48:d8:9f:11:1b:dd:20:2a:cf:fd:
                    1a:58:cf:ac:d9:2a:65:5a:9d:c8:c9:8f:8e:b4:05:
                    83:00:d4:ed:06:17:76:23:10:2d:3e:03:81:ff:3c:
                    f1:f6:58:7b:b1:e1:1b:81:35:79:06:31:c3:39:8b:
                    2f:a8:b6:34:f3:c6:44:65:49:9f:94:60:1b:e4:ab:
                    40:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:38:7F:37:83:60:C6:94:64:09:C3:86:5C:E4:65:45:CA:54:DD:00
            X509v3 Authority Key Identifier:
                keyid:EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:2b:fe:88:65:3c:68:09:12:90:90:87:d9:1d:e2:11:33:ef:
         ff:dd:3c:21:5f:c8:c6:ad:40:e3:72:bf:16:74:d7:49:96:01:
         df:f4:e2:03:ce:1b:f3:98:ee:31:b8:4a:0e:c1:10:bb:3b:0b:
         23:80:26:58:03:e4:67:80:f1:92:94:e4:61:30:13:bb:61:1a:
         8a:ab:31:36:df:8d:9e:b1:b7:b7:7d:ad:a3:63:5c:90:43:ab:
         f0:4e:df:7b:ad:95:09:66:99:4a:0f:2f:21:30:c5:2f:b8:55:
         53:ed:8d:4d:c7:96:eb:da:b0:02:65:99:a3:db:0c:48:63:fd:
         96:22:42:da:22:0f:b2:34:da:87:a7:7c:57:fb:ef:03:eb:15:
         b2:ee:ec:04:17:61:0d:bf:23:07:b7:a3:8d:b2:8c:e0:de:dc:
         0e:7c:dc:e5:67:a0:26:c1:06:19:8f:dd:bf:f5:96:99:f4:97:
         a6:95:da:9b:fb:17:18:fb:b4:11:65:f7:d3:c8:7f:e3:05:ec:
         d1:2f:d6:73:a4:f5:29:6c:a4:b0:74:6b:85:82:52:71:f5:6d:
         b5:af:56:d5:e7:8f:ab:16:cd:34:2b:52:aa:6a:af:28:e0:23:
         34:8d:7c:39:22:88:94:42:36:b6:04:d6:20:e0:53:0d:de:3b:
         04:78:d4:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4FfSrRKs8D8ghadOk5RXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNzhiYzk2OWE4MzA3MzM2ZWY0MDQ0ZjNkZmVmMWZlMTM2
MzgyYjMwHhcNMjYwNTE2MTMwMTA5WhcNMjYwNTE3MTMwMTA5WjAzMTEwLwYDVQQD
EygwNDM4N2YzNzgzNjBjNjk0NjQwOWMzODY1Y2U0NjU0NWNhNTRkZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrjUFTR6zdF+ZlpyZvPzqPXOGhtq
AqbjpBSuwXxniHRwRM4j/Rw7bX0ut2PxJqjxFt2Fz9MRlNizFEqBB0boPelmE+ur
OvodHCEoVMJIH9H3aiCuEw5JnlJ9sxFzgXxMrkk/bjMelYII9/5oZMt6Js/1mUeS
GF7WDJ/ok77oLlMgrGNDchSz+JQlono56mWDyT+fU4nmpHOG5J4m8mS0eiV1OCLt
wvqAwAYXDoFRj+qBnl1kNVznD0jYnxEb3SAqz/0aWM+s2SplWp3IyY+OtAWDANTt
Bhd2IxAtPgOB/zzx9lh7seEbgTV5BjHDOYsvqLY088ZEZUmflGAb5KtABwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQ4fzeDYMaUZAnDhlzkZUXKVN0AMB8GA1UdIwQY
MBaAFO94vJaagwczbvQETz3+8f4TY4KzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzNpOGxwcURCek51OUFSUFBmN3hfaE5qZ3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lNGJkNmEtYWRhZi00OGM4LWI5OTkt
NTM1NzBhMWFiZDA0LzEvNzNpOGxwcURCek51OUFSUFBmN3hfaE5qZ3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lNGJkNmEtYWRhZi00OGM4LWI5OTktNTM1NzBhMWFiZDA0
LzEvNzNpOGxwcURCek51OUFSUFBmN3hfaE5qZ3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiv+iGU8
aAkSkJCH2R3iETPv/908IV/Ixq1A43K/FnTXSZYB3/TiA84b85juMbhKDsEQuzsL
I4AmWAPkZ4DxkpTkYTATu2EaiqsxNt+NnrG3t32to2NckEOr8E7fe62VCWaZSg8v
ITDFL7hVU+2NTceW69qwAmWZo9sMSGP9liJC2iIPsjTah6d8V/vvA+sVsu7sBBdh
Db8jB7ejjbKM4N7cDnzc5WegJsEGGY/dv/WWmfSXppXam/sXGPu0EWX308h/4wXs
0S/Wc6T1KWyksHRrhYJScfVtta9W1eePqxbNNCtSqmqvKOAjNI18OSKIlEI2tgTW
IOBTDd47BHjU+w==
-----END CERTIFICATE-----
Generated at Sat May 16 18:40:38 2026 by rpki-client