Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
File:                     76CXauJceI-r_CqFN4HV3_DKVg8.mft (raw, json)
Hash identifier:          6jXSaFcgAoIRlewX6iIkwQWPUOzosr4MqqftICxCWK4=
Subject key identifier:   9F:66:9C:D6:DD:EB:3E:5B:D6:6B:E2:D4:CD:D0:89:21:08:59:27:70
Authority key identifier: EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
Certificate issuer:       /CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Certificate serial:       01A14D2B77E2DF2A384EA78884556CA9E693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
Manifest number:          10FE
Signing time:             Sun 18 Oct 2026 04:00:56 +0000
Manifest this update:     Sun 18 Oct 2026 04:00:56 +0000
Manifest next update:     Mon 19 Oct 2026 04:00:56 +0000
Files and hashes:         1: 76CXauJceI-r_CqFN4HV3_DKVg8.crl (hash: avduRayMfGmTm6ENK9ZXfPMojSMaDBRFzzfDRw/foTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:2b:77:e2:df:2a:38:4e:a7:88:84:55:6c:a9:e6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
        Validity
            Not Before: Oct 18 04:00:56 2026 GMT
            Not After : Oct 19 04:00:56 2026 GMT
        Subject: CN=9f669cd6ddeb3e5bd66be2d4cdd0892108592770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7d:ca:47:f1:df:13:45:1f:e3:6d:e7:e0:14:
                    7e:b1:eb:54:e2:1f:ec:4f:ba:99:41:eb:df:dc:9b:
                    43:62:cd:f8:90:7f:24:58:74:2a:f7:32:1f:29:f6:
                    ed:c1:7c:c9:dd:95:42:d8:24:f0:1f:db:9f:97:e7:
                    98:b5:f8:40:a7:d9:2f:c8:8a:61:a4:c3:7d:97:0c:
                    90:d5:2f:25:02:a9:a4:bd:99:fd:4b:cb:0c:a8:c5:
                    bf:8d:6f:b6:50:0c:e6:36:ac:f5:7c:ac:91:d2:88:
                    2d:6f:10:f4:6d:b5:cd:2c:b0:10:76:91:b9:e5:e7:
                    dd:14:fd:48:8d:bb:75:72:6d:91:e4:4e:80:ea:ee:
                    d5:a8:f8:96:e5:c7:00:01:78:24:fa:41:e1:ee:d0:
                    f3:e2:3d:27:1d:fe:2d:da:84:5d:28:4c:2a:f6:98:
                    ae:8d:43:fc:ce:63:8d:51:b0:8a:15:11:78:83:35:
                    1c:87:b2:6b:c4:6c:fd:75:8b:b9:63:fc:02:5c:0a:
                    08:a0:e0:52:bb:b3:db:31:0a:b3:02:94:4a:cf:fd:
                    ba:15:b9:e1:82:54:ac:a3:e2:57:8d:e3:3a:44:53:
                    41:9a:9a:3b:18:2c:36:00:90:e7:3b:dc:1d:90:ca:
                    9a:af:39:73:0e:d5:a7:55:7f:cc:e1:18:fa:ab:60:
                    63:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:66:9C:D6:DD:EB:3E:5B:D6:6B:E2:D4:CD:D0:89:21:08:59:27:70
            X509v3 Authority Key Identifier:
                keyid:EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:7d:ff:ac:24:5f:a0:af:38:fe:7d:01:f4:ff:e3:0f:04:e8:
         28:4e:f7:f7:f6:15:de:15:d9:14:25:a1:ce:ad:ec:b5:63:79:
         a9:dd:9f:46:5e:34:c5:2f:1c:33:3c:44:f5:89:1a:23:d6:4e:
         1b:5b:46:95:5f:25:88:f3:3e:f9:25:74:5e:2b:8a:0f:c8:bb:
         ac:83:df:70:dd:59:2e:b5:45:3d:c6:fc:c8:7c:a8:9b:d0:ec:
         d1:40:13:9b:e5:fc:31:a5:18:f4:a8:c3:03:40:3a:61:38:cb:
         1b:45:b3:c8:72:0d:58:a9:f1:8c:22:2d:dd:f3:25:f4:cb:8c:
         53:19:e5:be:15:6d:07:eb:94:da:1b:0d:4b:23:b7:6b:f0:1d:
         a9:ce:30:dd:b2:f9:fa:44:e3:af:f3:b6:05:65:2f:91:3f:0d:
         cb:71:2f:a2:2c:b2:0a:e8:d7:32:72:02:72:97:33:71:47:44:
         be:08:dc:c8:9e:26:be:85:ec:de:8d:1e:c6:c0:5d:54:6a:06:
         19:87:09:8c:e6:40:57:b2:ae:f0:c7:08:5e:6f:a1:71:f7:2a:
         80:75:8b:5d:df:18:10:ae:72:44:66:1c:6a:37:7f:84:b2:cd:
         2d:5d:cf:45:d1:cf:2d:16:8b:34:e6:69:6d:56:bd:8a:c4:15:
         38:fb:74:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFNK3fi3yo4TqeIhFVsqeaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTA5NzZhZTI1Yzc4OGZhYmZjMmE4NTM3ODFkNWRmZjBj
YTU2MGYwHhcNMjYxMDE4MDQwMDU2WhcNMjYxMDE5MDQwMDU2WjAzMTEwLwYDVQQD
Eyg5ZjY2OWNkNmRkZWIzZTViZDY2YmUyZDRjZGQwODkyMTA4NTkyNzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn3KR/HfE0Uf423n4BR+setU4h/s
T7qZQevf3JtDYs34kH8kWHQq9zIfKfbtwXzJ3ZVC2CTwH9ufl+eYtfhAp9kvyIph
pMN9lwyQ1S8lAqmkvZn9S8sMqMW/jW+2UAzmNqz1fKyR0ogtbxD0bbXNLLAQdpG5
5efdFP1Ijbt1cm2R5E6A6u7VqPiW5ccAAXgk+kHh7tDz4j0nHf4t2oRdKEwq9piu
jUP8zmONUbCKFRF4gzUch7JrxGz9dYu5Y/wCXAoIoOBSu7PbMQqzApRKz/26Fbnh
glSso+JXjeM6RFNBmpo7GCw2AJDnO9wdkMqarzlzDtWnVX/M4Rj6q2BjLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9mnNbd6z5b1mvi1M3QiSEIWSdwMB8GA1UdIwQY
MBaAFO+gl2riXHiPq/wqhTeB1d/wylYPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZDWGF1SmNlSS1yX0NxRk40SFYzX0RLVmc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iMDQ2N2ItZDE2Ni00ZTdiLWFmNWMt
ZDE2NTQ5NzVjM2JjLzEvNzZDWGF1SmNlSS1yX0NxRk40SFYzX0RLVmc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9iMDQ2N2ItZDE2Ni00ZTdiLWFmNWMtZDE2NTQ5NzVjM2Jj
LzEvNzZDWGF1SmNlSS1yX0NxRk40SFYzX0RLVmc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHX3/rCRf
oK84/n0B9P/jDwToKE739/YV3hXZFCWhzq3stWN5qd2fRl40xS8cMzxE9YkaI9ZO
G1tGlV8liPM++SV0XiuKD8i7rIPfcN1ZLrVFPcb8yHyom9Ds0UATm+X8MaUY9KjD
A0A6YTjLG0WzyHINWKnxjCIt3fMl9MuMUxnlvhVtB+uU2hsNSyO3a/Adqc4w3bL5
+kTjr/O2BWUvkT8Ny3EvoiyyCujXMnICcpczcUdEvgjcyJ4mvoXs3o0exsBdVGoG
GYcJjOZAV7Ku8McIXm+hcfcqgHWLXd8YEK5yRGYcajd/hLLNLV3PRdHPLRaLNOZp
bVa9isQVOPt0OQ==
-----END CERTIFICATE-----
Generated at Sun Oct 18 06:00:11 2026 by rpki-client