Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
File:                     76CXauJceI-r_CqFN4HV3_DKVg8.mft (raw, json)
Hash identifier:          BuxH0+iKllrs4sEPLaO27HnAAolPe87fHawhPEoSdP0=
Subject key identifier:   F7:3C:7C:19:DA:CD:D9:4A:A7:3C:6C:AB:3F:C7:9A:C1:7C:AB:8A:21
Authority key identifier: EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
Certificate issuer:       /CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Certificate serial:       019E2F96AB19A2A1DF9127EF1D42B3EC1F90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
Manifest number:          0F61
Signing time:             Sat 16 May 2026 07:01:03 +0000
Manifest this update:     Sat 16 May 2026 07:01:03 +0000
Manifest next update:     Sun 17 May 2026 07:01:03 +0000
Files and hashes:         1: 76CXauJceI-r_CqFN4HV3_DKVg8.crl (hash: XV0XpfODXxJTJ5wzOWf++e817g0gITdWGj/8wQw3YZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:ab:19:a2:a1:df:91:27:ef:1d:42:b3:ec:1f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
        Validity
            Not Before: May 16 07:01:03 2026 GMT
            Not After : May 17 07:01:03 2026 GMT
        Subject: CN=f73c7c19dacdd94aa73c6cab3fc79ac17cab8a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:a9:72:ea:75:15:bd:58:a2:01:38:3c:9e:
                    e1:0b:5b:73:7c:c6:f9:88:0d:09:11:51:8c:85:f6:
                    96:40:3a:51:b1:f0:8c:31:e8:4e:9d:df:3e:ce:da:
                    b6:7d:9d:2c:88:0c:65:99:d5:e4:dd:8f:0c:2d:c8:
                    0f:ed:be:14:af:12:d4:a6:a8:41:71:18:02:5d:28:
                    4c:59:7f:fd:6c:ce:45:97:b5:21:ae:ef:d5:fb:f2:
                    c5:f5:ad:d0:80:fa:46:4f:10:a4:47:e8:96:3b:b9:
                    d7:4d:34:c8:74:18:19:b5:7c:6a:cb:4a:46:fa:bd:
                    a5:bc:13:73:4c:62:28:c0:fd:ce:ad:56:b3:02:57:
                    10:a5:d9:75:f1:69:64:89:7b:42:80:21:04:3f:2d:
                    32:9c:7a:1c:b3:1b:fd:be:ae:28:d3:99:f7:2f:98:
                    6a:17:db:ac:50:a0:66:fe:69:46:52:85:ce:dd:77:
                    3f:24:b3:31:25:89:34:04:92:14:6a:16:63:fd:36:
                    8c:88:e3:df:1b:75:5b:e2:5c:a0:fb:bd:80:42:93:
                    4f:a5:31:8c:67:22:ce:74:ed:44:d6:55:da:6c:7b:
                    25:26:9d:6c:15:e8:0c:1a:e9:10:68:7e:39:bf:f7:
                    4e:8b:f5:0e:67:d9:d1:66:83:59:15:56:e1:8b:29:
                    43:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:3C:7C:19:DA:CD:D9:4A:A7:3C:6C:AB:3F:C7:9A:C1:7C:AB:8A:21
            X509v3 Authority Key Identifier:
                keyid:EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a9:c7:10:1c:b8:0c:93:6d:d3:c8:58:e2:8c:99:42:a9:bb:
         a6:03:15:3c:40:c0:78:e8:20:24:3b:1c:71:d0:de:14:6e:16:
         24:2d:7e:49:20:ea:cd:96:86:09:13:51:d4:31:e9:51:00:2e:
         5b:54:43:22:fb:5f:90:af:c3:a3:c6:0d:65:0c:3e:61:d4:a2:
         61:cf:c9:32:ef:a8:8e:ad:56:fb:67:dd:83:18:24:31:99:cf:
         e3:cb:8e:1e:7c:dc:e4:e1:d1:f7:00:b3:24:4b:19:ea:30:8c:
         f4:a5:5c:eb:30:f7:e5:2b:75:2f:4c:77:4e:80:78:88:96:90:
         18:d9:e0:73:9d:4c:28:27:d4:99:b0:1e:09:e0:cb:1a:75:23:
         ea:cd:b2:84:7b:4c:d0:2b:3e:e8:8d:3c:94:b7:f4:12:28:8c:
         cd:14:8d:b0:d4:af:ef:66:8b:9b:29:82:e0:9b:50:02:ae:a1:
         3d:ee:e2:b4:dd:d2:b3:ea:2c:6e:cf:e1:2b:37:32:df:5b:08:
         df:2a:4f:9d:e8:50:29:84:df:b8:e9:c5:48:8a:c4:2b:85:15:
         60:37:14:51:40:1f:a2:16:a2:b3:0e:36:5a:a3:ee:ef:1a:4a:
         49:f7:3f:ec:c6:b2:97:0b:22:1a:47:c8:22:0a:9d:73:5a:d6:
         20:d0:15:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:12:22 2026 by rpki-client