Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
File:                     76cMuEnjg3RRvXmvfcfgNZY-YEM.mft (raw, json)
Hash identifier:          yK+givsTZYb18kkQ7WA+Kbe+H88LfrPMQN9Du4S4fRY=
Subject key identifier:   96:D7:1B:58:74:35:77:46:9A:B4:04:75:54:7A:B6:18:63:53:F0:85
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Certificate issuer:       /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial:       019E1F1113BD988D33039C037A165557DCAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
Manifest number:          1215
Signing time:             Wed 13 May 2026 02:01:13 +0000
Manifest this update:     Wed 13 May 2026 02:01:13 +0000
Manifest next update:     Thu 14 May 2026 02:01:13 +0000
Files and hashes:         1: 76cMuEnjg3RRvXmvfcfgNZY-YEM.crl (hash: 2HPyQM4AdKOA9CRS9jK8Gy/jL1reZezEA9U1D9FKvEw=)
                          2: d0r-Z1tATflEg34xH8LpeTJxCeg.roa (hash: /VLriREqzzV93h2U9Y2YNTNewlDjbuqqOCTeloMXxjY=)
                          3: z2ya0O-Zt1HkSFnRFpNhzUiEpKw.roa (hash: Bw/EG1OV5fOeDsNlaq4pIbVENapXiEYMLsr9/Cjedk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:13:bd:98:8d:33:03:9c:03:7a:16:55:57:dc:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
        Validity
            Not Before: May 13 02:01:13 2026 GMT
            Not After : May 14 02:01:13 2026 GMT
        Subject: CN=96d71b58743577469ab40475547ab6186353f085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:2f:6f:3d:d2:9d:21:df:14:a1:2b:34:5b:
                    3a:a0:b6:8d:fc:0d:72:9e:ae:29:df:dd:06:8e:1f:
                    86:97:c2:d6:d6:97:38:f0:60:3f:c7:01:5a:6c:03:
                    11:68:d6:e1:79:d2:6b:47:75:7a:ca:2b:70:34:5d:
                    ad:a2:65:67:b9:a7:72:73:1b:54:26:7e:06:87:3d:
                    18:7c:11:9d:12:0d:d9:24:ac:4f:06:d5:01:01:b7:
                    64:49:47:51:30:5f:26:1d:8c:28:d6:ff:0d:58:c4:
                    97:3a:be:2d:15:5e:8f:49:d4:e7:a1:f5:7c:da:8e:
                    87:99:27:62:72:57:3f:b1:7c:29:2b:ee:51:54:cd:
                    d7:39:fe:c8:a3:2f:cb:78:70:74:72:b0:95:06:e4:
                    87:d4:d5:4c:d4:ba:6c:61:45:58:da:95:d5:76:b8:
                    66:db:93:ad:b7:74:ba:36:3c:84:d8:a3:d7:33:e9:
                    06:9a:7c:c9:b2:6e:8a:8b:ba:6b:21:7f:32:63:82:
                    be:96:c4:1f:75:2c:d2:7d:ca:97:c5:05:3b:25:10:
                    8b:46:a2:75:8a:d6:f9:d0:56:b0:84:02:65:38:a2:
                    93:36:16:43:a7:86:c1:98:9b:ae:37:9a:cc:c0:fd:
                    70:58:1c:95:ba:7e:c6:b8:49:e3:6d:06:87:43:80:
                    5b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D7:1B:58:74:35:77:46:9A:B4:04:75:54:7A:B6:18:63:53:F0:85
            X509v3 Authority Key Identifier:
                keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:99:8d:a7:41:97:47:73:70:57:53:45:6c:d3:3e:09:03:5d:
         a8:7f:a8:2d:bb:e6:ca:5d:8f:fe:71:1b:05:ec:c2:8a:87:2a:
         86:b8:b1:9b:b3:fc:c9:12:fd:d8:31:50:65:25:31:d6:1a:ad:
         07:a5:1f:8b:d3:b8:73:3f:af:92:4a:57:46:e1:4b:46:55:b3:
         33:fb:fe:f4:19:55:aa:41:01:06:44:f3:2f:b5:66:51:14:5f:
         76:a9:b0:ab:2f:ac:09:ed:ed:36:ec:da:8f:70:1d:b1:37:17:
         98:d7:66:b8:8d:22:7b:0f:2b:7d:d4:e2:54:ca:75:52:41:e1:
         e2:46:8f:89:da:7b:a1:39:bf:d6:af:36:b3:bc:2f:d2:35:db:
         40:d3:de:ac:c2:e5:b4:dc:9c:4f:b8:85:1d:16:38:94:2f:98:
         e8:1b:54:79:d8:06:29:74:53:a3:71:da:6b:17:83:2f:9f:88:
         c6:68:77:ec:65:28:4c:c2:14:c0:64:d3:4c:39:34:23:72:3a:
         bd:51:a9:1a:ed:bb:b3:87:7a:8c:f7:0b:c1:9e:80:0f:e5:03:
         77:cd:b5:a4:c1:b4:e3:4d:bd:f7:9a:65:3e:1e:b3:a1:9a:ae:
         c9:13:9f:0f:cd:37:cd:6e:69:9f:19:21:c2:ce:59:28:44:06:
         21:74:e8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:57 2026 by rpki-client