Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
File:                     76CXauJceI-r_CqFN4HV3_DKVg8.mft (raw, json)
Hash identifier:          tYzlf9FD3VjPeSasiRt78WiMoEMXoH3/b4PnoYl81hc=
Subject key identifier:   F3:62:E4:C3:B0:73:8D:75:98:60:79:35:55:74:23:B2:0D:C7:FE:E8
Authority key identifier: EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
Certificate issuer:       /CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Certificate serial:       019F1943B830A9E0FF447CCF34E5C7E01158
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
Manifest number:          0FDA
Signing time:             Tue 30 Jun 2026 16:01:36 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:36 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:36 +0000
Files and hashes:         1: 76CXauJceI-r_CqFN4HV3_DKVg8.crl (hash: 1ZwKYBg3G4xLFiVdx2l3hauawJNPx00GAfCRpdf+HJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:b8:30:a9:e0:ff:44:7c:cf:34:e5:c7:e0:11:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
        Validity
            Not Before: Jun 30 16:01:36 2026 GMT
            Not After : Jul  1 16:01:36 2026 GMT
        Subject: CN=f362e4c3b0738d7598607935557423b20dc7fee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:73:99:80:1e:95:6a:34:98:00:ab:9b:91:
                    90:43:9e:eb:8f:98:eb:46:40:31:d2:2d:40:fe:f2:
                    0a:7a:d8:bc:ec:a5:de:5f:8a:cc:ce:cf:81:be:29:
                    31:13:5e:c8:37:16:c4:4e:91:35:a2:df:8f:ee:c2:
                    ad:31:00:b6:29:1f:e6:e8:79:db:7d:b2:4f:01:69:
                    0f:97:a1:1b:89:dd:0d:7b:17:43:a9:96:be:93:5d:
                    89:14:79:43:3f:20:97:4f:26:d8:d9:9c:d1:cc:18:
                    2c:95:4e:d1:58:e6:3e:62:32:96:64:fe:46:d6:0d:
                    aa:59:e2:76:ef:cc:2c:35:f1:46:1a:f5:e0:96:46:
                    33:7d:21:b4:a6:48:9f:25:82:ea:b7:35:86:f0:2f:
                    ac:c8:e3:b5:a2:fe:36:d5:71:23:5c:f0:13:2a:33:
                    2d:3c:27:3e:75:f4:c2:33:e1:99:da:12:d2:a0:bc:
                    e6:18:63:8c:23:7d:67:f8:49:62:6d:97:da:ee:7b:
                    c2:9f:a1:cb:86:96:df:b2:97:02:d8:2b:54:8c:68:
                    6f:99:fd:1c:a3:44:9a:7a:b7:ab:19:ac:28:98:a2:
                    7c:3a:29:38:8f:f1:3d:05:9b:53:1c:58:65:ff:8b:
                    5b:ec:c3:bb:2a:8f:d3:2c:1d:d6:c9:c2:69:9d:3d:
                    3c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:62:E4:C3:B0:73:8D:75:98:60:79:35:55:74:23:B2:0D:C7:FE:E8
            X509v3 Authority Key Identifier:
                keyid:EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:05:80:b9:87:61:35:cc:46:f6:cb:c0:42:8a:84:67:af:92:
         aa:6d:81:0d:9a:ad:d3:38:bf:6e:91:2e:f8:9a:fd:10:c1:3c:
         df:c6:58:e9:de:e9:42:11:e2:47:36:b7:60:6d:5c:27:09:ca:
         b7:57:fa:63:f8:0d:e9:e0:d4:33:7c:20:e5:18:dc:04:dd:dc:
         ff:d8:75:84:86:e1:63:cd:da:7c:a3:da:1a:40:25:0f:e5:b9:
         1a:c6:48:69:5b:f4:f7:1d:c8:9d:e7:d1:5e:f4:8a:94:e6:00:
         2f:a6:a3:2b:37:d6:e2:69:77:33:f5:67:00:0d:0d:54:b0:5f:
         97:48:67:3b:1d:92:76:95:eb:38:a3:7d:9d:54:1f:7e:6f:cd:
         31:9e:d8:2e:d4:82:ee:ec:1f:ad:59:ce:27:51:3f:3b:6d:96:
         04:cb:04:c0:19:cf:71:42:b6:d2:2b:37:7f:96:22:8b:b2:95:
         af:f8:48:b8:d3:94:c8:82:b7:ed:31:9f:ab:39:dd:70:98:74:
         16:90:c5:a8:fe:6b:fb:b4:60:6e:9c:03:ff:dc:c9:a2:11:31:
         ed:c4:0d:1b:c7:f0:89:21:d2:8d:77:42:88:5d:d2:98:bb:9c:
         61:0c:46:91:ff:32:5a:4d:78:e6:64:ac:d2:23:73:a3:68:0c:
         e0:82:07:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:29:02 2026 by rpki-client