Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
File:                     76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json)
Hash identifier:          VHJ4q/VYWwTZ1v7GfPQMrQjfa0jfMO6tJ/+yjyVhmBU=
Subject key identifier:   71:AE:F8:61:F2:E6:FF:9B:5C:4E:45:67:40:0A:1D:08:E5:4C:54:38
Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
Certificate issuer:       /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Certificate serial:       019F916D04E80270398123E987B0880F14A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
Manifest number:          19C1
Signing time:             Fri 24 Jul 2026 00:01:08 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:08 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:08 +0000
Files and hashes:         1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: E2t4Ly5qBvkZo9Z0jKfP8Hl68eIwN9WRd5wIOZwXyIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:04:e8:02:70:39:81:23:e9:87:b0:88:0f:14:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
        Validity
            Not Before: Jul 24 00:01:08 2026 GMT
            Not After : Jul 25 00:01:08 2026 GMT
        Subject: CN=71aef861f2e6ff9b5c4e4567400a1d08e54c5438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:8e:b9:c1:08:e2:21:b7:33:a3:f2:9f:64:
                    df:21:d0:0a:13:90:54:54:0c:5b:8c:0c:c9:f3:4d:
                    96:2a:93:83:93:91:a4:55:f7:fb:b8:39:29:7c:cf:
                    34:f1:b9:e5:3b:f1:b6:5b:53:0b:62:88:33:3d:ba:
                    8d:f7:3d:8c:b5:6b:88:85:7a:50:86:e4:c6:f8:72:
                    f0:19:69:e1:b3:10:f4:e7:b4:3e:90:4e:0b:11:c6:
                    9c:6b:3c:aa:2a:cf:46:2d:25:c4:c5:f1:e5:97:34:
                    05:e8:d4:fd:6b:ed:92:f0:d1:3e:c0:63:77:b1:5e:
                    ba:ae:00:51:5f:0c:95:4b:50:54:51:41:e7:e2:60:
                    b2:42:66:da:8b:96:00:71:92:c6:42:41:a3:ae:05:
                    22:47:53:48:cc:ea:42:6e:52:19:a3:48:15:5f:12:
                    54:ce:ee:e6:31:b9:5c:68:88:2b:be:3f:87:31:34:
                    f0:79:cd:b5:4b:d2:03:80:8b:91:9b:46:49:1a:50:
                    c8:51:6c:0a:45:9c:48:05:ec:b0:60:c7:81:76:e9:
                    3b:2d:f3:35:f4:80:c7:a0:46:c5:87:46:ba:42:7d:
                    ed:d5:2e:f2:04:ba:3e:e8:d8:de:e7:8a:73:65:35:
                    f9:b8:be:a7:46:ee:cf:2b:0c:2f:fb:ee:e5:a5:11:
                    a4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AE:F8:61:F2:E6:FF:9B:5C:4E:45:67:40:0A:1D:08:E5:4C:54:38
            X509v3 Authority Key Identifier:
                keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:a7:aa:0d:ef:33:fd:0d:0c:f6:d6:da:42:59:8c:79:ad:37:
         5f:3c:ad:b9:7c:5d:3d:6b:5c:66:59:9e:18:74:4f:54:e2:49:
         4b:4a:ee:dc:d3:5b:88:87:f5:f9:c4:19:29:39:45:96:da:0e:
         80:8d:c9:32:67:ac:0d:31:36:19:fc:97:e1:03:2b:ed:0a:fe:
         5a:43:e5:09:ef:70:70:bd:67:fb:a9:89:20:bc:12:d4:54:db:
         cf:8b:30:ae:70:a3:90:73:55:2b:c6:f7:07:52:63:f2:fc:51:
         dc:b6:22:39:53:f4:ea:36:71:11:d1:b8:a4:4a:f8:de:61:21:
         c2:f0:c5:9b:59:eb:0f:87:ea:ee:e6:a2:ce:51:75:e9:34:26:
         98:13:45:9c:f8:b0:f3:3d:b0:b3:3e:ed:18:6f:37:ae:e1:67:
         66:f7:a5:5c:49:92:a2:b2:01:00:fd:a2:89:fd:05:41:84:8c:
         4d:b4:9e:9e:54:18:a0:fc:50:4c:32:52:07:e4:43:a6:8e:46:
         80:3f:f8:39:5d:51:ad:9f:63:3a:1f:99:29:4c:37:05:2b:e8:
         94:ef:c7:4a:25:e1:6c:41:60:4e:cb:f4:ca:e8:ba:93:30:9e:
         0d:9d:ae:59:24:c7:57:d6:23:c5:73:d8:ed:ad:80:67:8c:29:
         e3:b6:c9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----