Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
File:                     76psy3hXNGAC5rvEmPiLnobfGAY.mft (raw, json)
Hash identifier:          KNTFb/+ZLxBWdQ6zH7GYz9/BaQ+uSRwVRc4U6VVZtYc=
Subject key identifier:   E2:1C:27:C5:D8:F2:FD:D6:AE:6A:88:B2:35:47:E1:49:81:66:78:AD
Authority key identifier: EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
Certificate issuer:       /CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Certificate serial:       019D273AFE192474BFF450FC7CE045418626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
Manifest number:          0648
Signing time:             Wed 25 Mar 2026 23:01:10 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:10 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:10 +0000
Files and hashes:         1: 76psy3hXNGAC5rvEmPiLnobfGAY.crl (hash: C1qajCWby5vll6DuMbUrh5+rvlkQ/tJ3EUCr56D0IyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:fe:19:24:74:bf:f4:50:fc:7c:e0:45:41:86:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
        Validity
            Not Before: Mar 25 23:01:10 2026 GMT
            Not After : Mar 26 23:01:10 2026 GMT
        Subject: CN=e21c27c5d8f2fdd6ae6a88b23547e149816678ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:85:ed:50:d4:fc:b1:a3:f1:ae:7c:56:14:e8:
                    e9:09:bf:00:6a:0c:c7:2a:bd:1d:45:c5:8a:fd:39:
                    11:f3:c5:f4:bf:93:85:67:14:33:ea:06:d8:08:db:
                    85:25:f4:56:28:fb:a4:72:50:d0:80:2c:d3:45:4a:
                    08:7d:a3:93:0f:a6:6a:73:18:4c:41:cf:ef:99:8b:
                    b9:36:c0:8b:3e:23:82:10:2a:2e:56:a9:9d:ae:40:
                    8c:44:27:8b:84:6a:6d:7a:46:94:f2:e9:fc:46:8c:
                    1a:ff:74:dc:da:3d:57:c0:15:8e:95:a7:a6:2d:57:
                    f4:2a:08:d9:97:19:c0:3b:b1:01:09:76:f2:06:ee:
                    98:d3:95:7c:6f:26:49:d4:eb:ed:e0:3a:46:55:15:
                    1c:e0:6b:a4:d5:2b:53:5c:62:b4:0b:c5:5f:d8:13:
                    24:cb:08:d2:b4:01:d8:a4:8a:bc:a2:38:88:36:fa:
                    1e:1e:05:76:04:14:27:7e:b9:f4:72:db:9f:74:51:
                    37:6e:4e:cc:f3:c8:b2:9c:69:13:c9:97:39:88:a2:
                    f2:d1:a3:79:4c:96:f8:66:28:19:af:91:73:71:9e:
                    ca:e8:5d:f0:e7:a7:e3:4d:58:04:92:e2:d4:04:18:
                    cd:94:59:e9:af:99:2e:f9:c0:ea:0b:1d:b6:59:3c:
                    6b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1C:27:C5:D8:F2:FD:D6:AE:6A:88:B2:35:47:E1:49:81:66:78:AD
            X509v3 Authority Key Identifier:
                keyid:EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:12:4e:dd:79:63:a2:97:e7:bf:ad:2e:6c:f5:52:e2:73:88:
         72:66:1c:79:5d:66:47:ff:3f:62:15:95:f6:f1:2b:9d:f5:0b:
         09:d5:7f:13:83:73:67:33:4c:f0:f3:0e:b3:27:f4:ee:63:7a:
         e1:b1:05:b1:1d:58:c0:d1:1a:f1:f0:39:38:61:4e:79:a2:e5:
         cc:d8:65:e0:82:16:cf:c5:44:21:0a:5d:bb:de:76:d4:ea:7c:
         02:f2:9b:65:37:ba:3c:cc:4c:78:79:fb:5d:82:13:ea:cb:03:
         aa:8d:2a:81:82:19:9e:75:6a:85:3d:12:88:4d:aa:01:91:0d:
         f2:f6:d4:2e:cc:13:f4:ea:f1:23:cd:bc:ff:36:fc:ba:04:1f:
         06:40:75:11:6f:ce:c2:c2:c6:5d:1f:8a:af:9f:16:0c:b3:8b:
         43:35:b2:a2:bc:f2:f2:76:9f:d2:9d:7e:7a:57:e5:4b:54:89:
         c6:b8:39:02:b4:35:a9:3e:f1:4a:22:7b:6a:fb:ee:36:78:b2:
         3c:f3:f0:25:42:f1:31:af:a5:21:1a:02:b5:d2:9a:f1:99:c6:
         bf:5b:31:25:37:2e:0a:89:95:36:1d:0a:cb:63:9d:b8:dc:a9:
         6d:cc:76:63:f2:b7:98:95:94:a9:57:76:bb:4a:b2:cd:de:2c:
         95:d1:52:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:17 2026 by rpki-client