Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
File:                     76psy3hXNGAC5rvEmPiLnobfGAY.mft (raw, json)
Hash identifier:          DMgTfpPBsPUQyDFQfKxxCMyx7clt6X/peIs763dqeno=
Subject key identifier:   8F:44:DF:5D:4A:41:A6:7D:FA:FE:E9:5F:ED:DA:7D:41:6E:A9:97:F1
Authority key identifier: EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
Certificate issuer:       /CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Certificate serial:       01A0CDECE34BE14E4C2BF3458EF7270D5D01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
Manifest number:          082C
Signing time:             Wed 23 Sep 2026 11:00:49 +0000
Manifest this update:     Wed 23 Sep 2026 11:00:49 +0000
Manifest next update:     Thu 24 Sep 2026 11:00:49 +0000
Files and hashes:         1: 76psy3hXNGAC5rvEmPiLnobfGAY.crl (hash: s+7p5q+B7ACC3WDG6z/0jJVxJpURD7mFCj+56QOfyjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:ec:e3:4b:e1:4e:4c:2b:f3:45:8e:f7:27:0d:5d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
        Validity
            Not Before: Sep 23 11:00:49 2026 GMT
            Not After : Sep 24 11:00:49 2026 GMT
        Subject: CN=8f44df5d4a41a67dfafee95fedda7d416ea997f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c3:71:6f:a1:0a:6b:11:5c:e9:d7:2f:41:26:
                    e6:2c:12:47:fe:36:47:17:55:97:67:ae:aa:18:10:
                    ee:1d:0d:42:8d:66:5f:33:5a:59:17:7d:4f:ac:e0:
                    66:58:3a:ac:07:9d:26:a8:cd:6f:84:2f:6b:85:77:
                    02:40:97:cf:29:d5:ef:d9:76:e8:3f:31:02:1a:1d:
                    ae:23:0a:3d:c0:f7:9b:07:8c:59:0a:85:77:1f:fe:
                    1a:54:51:96:cd:be:6b:60:f7:02:8c:36:9c:8a:11:
                    dc:d8:ee:09:08:6e:7c:7f:20:75:ea:ee:66:8f:4b:
                    8e:e7:0e:10:a8:8b:59:e7:79:ee:1e:e0:b8:00:db:
                    84:e7:4b:45:20:85:45:e7:ac:81:a3:84:85:4e:ed:
                    2b:8c:e7:f5:9e:e4:48:7b:68:9a:a2:ba:f2:38:44:
                    e5:42:d9:e9:cd:00:02:5a:a4:a3:6c:79:6a:95:93:
                    e7:9b:78:32:77:db:9e:19:25:be:67:e2:73:46:d8:
                    1e:a7:ae:98:23:78:13:84:e4:5f:d3:0d:a9:96:5e:
                    b7:38:9d:cc:50:46:19:16:db:d6:67:5f:2c:01:0b:
                    e1:1f:2e:76:37:29:da:57:7c:36:fe:c7:b9:30:5e:
                    51:2e:61:32:39:a6:c0:a7:c4:a5:c3:cc:8c:6b:c4:
                    2c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:44:DF:5D:4A:41:A6:7D:FA:FE:E9:5F:ED:DA:7D:41:6E:A9:97:F1
            X509v3 Authority Key Identifier:
                keyid:EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:2b:cf:84:ff:7d:50:18:32:b4:d4:87:a7:8c:7f:67:2a:76:
         df:c7:21:1a:dd:0c:28:aa:d5:e6:48:b7:a8:2f:87:94:ae:f0:
         28:e4:e9:9d:c2:9e:58:16:41:4b:6d:25:5b:09:fc:62:8f:5d:
         f7:86:ff:15:96:1c:ce:17:4c:54:6b:79:61:62:30:1e:5a:65:
         41:5d:83:2b:b2:cd:39:a6:c2:72:3c:2a:cc:93:39:60:a8:9a:
         18:83:de:49:5e:19:99:58:b6:cd:27:7d:74:1a:12:be:b9:36:
         97:2d:b6:da:60:f4:d9:48:2b:7a:86:fe:f7:e2:cd:f6:d7:6b:
         05:e1:02:89:62:4d:e3:ef:b9:dc:2a:ff:bf:49:11:40:43:38:
         62:62:33:6b:b4:4e:6c:b5:96:74:b0:da:44:0c:e8:9e:9e:99:
         f9:e9:bf:8f:e0:ee:02:d1:38:39:28:65:2a:75:1c:09:d3:f9:
         1c:96:de:32:ef:03:52:92:d8:cd:7b:35:6c:00:27:4b:95:8d:
         19:e7:95:7c:54:3b:2c:8f:1d:34:2c:5b:b9:9f:9a:8f:81:5c:
         c0:d0:88:6f:ba:63:d5:5e:07:c7:7e:0d:23:a8:00:91:48:31:
         5b:ae:f5:3a:63:6a:e1:e8:87:f2:e7:38:7c:bd:42:ed:30:a7:
         03:b1:85:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:48:42 2026 by rpki-client