Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.mft
File:                     73hrU-ZKJA6IhOvHehLsEAfMnn0.mft (raw, json)
Hash identifier:          Vs8ma30UPDCxEWoUbp5/nJywJn1TjVMCsbTeu2WJwkA=
Subject key identifier:   EE:E4:F2:13:9A:16:1A:8B:41:B3:A3:B0:BC:7F:2B:C5:B3:49:68:6B
Authority key identifier: EF:78:6B:53:E6:4A:24:0E:88:84:EB:C7:7A:12:EC:10:07:CC:9E:7D
Certificate issuer:       /CN=ef786b53e64a240e8884ebc77a12ec1007cc9e7d
Certificate serial:       019F8F7E44C35D02713C95E23A8CF96FD5A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:44 +0000
Files and hashes:         1: 0FaqYlr9KAk4_T57NHEG_oNuaHw.roa (hash: COVCMMI9J8zaNTVpRqu2I7E6PzoKi92yvqnulWBZJOE=)
                          2: 2Na-UB05m2JfbPVGT0da9iQmakA.roa (hash: w2t2c5IAXMteohLNHwnbmzWNVJx1T8RkbGApW0bm8cc=)
                          3: 73hrU-ZKJA6IhOvHehLsEAfMnn0.crl (hash: AU6ML5OTXpAgVddw8R9aCVtztdPr/fSsTRJy5K3M5Ic=)
                          4: AESpqkI4WTe7jx-yC_HTg6Sh9ok.roa (hash: CCwkANLmNhgbzDwGP6j/uZpNlT/AEM2EMbdVhaDuVsM=)
                          5: C6YtMdSEYO9dKM8BLZVn3TJEVno.roa (hash: PSnggfJpFpASGtGwabVM5/Lc5DfRw7K3fjga/IuuEIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:44:c3:5d:02:71:3c:95:e2:3a:8c:f9:6f:d5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef786b53e64a240e8884ebc77a12ec1007cc9e7d
        Validity
            Not Before: Jul 23 15:00:44 2026 GMT
            Not After : Jul 24 15:00:44 2026 GMT
        Subject: CN=eee4f2139a161a8b41b3a3b0bc7f2bc5b349686b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:62:1b:99:37:17:0a:22:44:c7:9f:34:59:50:
                    5c:c3:89:d4:f7:ff:a0:7f:aa:cf:26:da:35:a7:77:
                    4d:9f:38:4e:ec:be:11:ae:21:80:51:92:6b:25:61:
                    47:8c:e4:23:ca:da:fe:33:56:2b:d7:51:52:81:b5:
                    02:28:70:95:9e:68:0a:e0:b9:d2:23:cc:f3:f5:91:
                    59:d4:64:2a:53:7b:7c:f9:de:68:00:91:90:10:66:
                    41:5b:8a:5c:22:8c:32:55:89:08:1a:1a:4c:09:1b:
                    58:83:16:87:c7:6b:d2:86:01:99:28:a8:21:bd:cd:
                    a1:d2:7c:61:37:00:dc:9a:e7:74:6c:50:c9:37:b4:
                    a1:92:00:bb:1d:8b:83:25:b0:b3:3b:27:0e:24:d4:
                    1c:84:7c:a3:f8:7e:a3:94:10:62:ff:e2:08:ea:50:
                    81:70:f3:29:d4:4b:94:69:a8:de:24:97:70:dd:6f:
                    1b:98:f4:f7:2e:cf:a2:4a:3e:19:7c:ae:02:2a:46:
                    9a:59:41:bc:9b:83:7c:30:d4:c6:d0:48:15:6a:86:
                    0c:3b:25:6c:94:d7:4f:fc:9b:9b:07:01:ee:94:e2:
                    30:30:23:b8:45:21:ad:f8:69:a9:5f:b2:c4:40:89:
                    68:dd:37:62:9b:b8:6c:bc:b6:85:17:df:5a:70:29:
                    be:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E4:F2:13:9A:16:1A:8B:41:B3:A3:B0:BC:7F:2B:C5:B3:49:68:6B
            X509v3 Authority Key Identifier:
                keyid:EF:78:6B:53:E6:4A:24:0E:88:84:EB:C7:7A:12:EC:10:07:CC:9E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73hrU-ZKJA6IhOvHehLsEAfMnn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/73hrU-ZKJA6IhOvHehLsEAfMnn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:fb:a9:c4:a7:86:c0:4d:a5:04:15:9e:2b:2c:98:3e:93:70:
         c7:a1:6d:31:b1:24:24:8a:86:d7:3b:82:0c:ef:f7:59:d0:3c:
         cb:82:7b:4c:3b:25:92:74:50:ba:93:06:95:0d:1f:cd:b5:07:
         f4:3d:8b:8d:29:f8:64:b6:9f:c3:ff:33:75:fa:b8:7d:c3:bf:
         d1:90:c2:38:45:be:65:da:77:43:f4:0a:b6:60:3d:fe:08:04:
         ce:82:ab:27:6a:69:03:3a:51:c8:c9:1a:49:bc:fe:da:78:68:
         d3:e3:2f:86:34:d5:18:f8:e9:05:6b:67:25:7e:e9:a2:5d:a0:
         c6:da:53:1f:56:36:3f:c9:3a:15:be:64:62:f4:64:63:76:fc:
         82:ab:87:7f:77:09:78:30:c3:8a:14:67:72:d2:da:d1:dc:5e:
         e1:1e:63:c6:cb:31:16:a9:35:a4:a0:1c:b3:17:49:37:2a:58:
         14:01:34:1f:a0:c3:f6:ba:85:b1:c1:42:6b:4d:be:b2:c2:a0:
         28:c6:5d:46:4a:ba:e9:60:72:dd:c1:8a:73:a7:34:39:2f:ea:
         3a:07:ca:cc:7b:64:f6:98:de:88:d9:7e:0b:98:65:a4:0e:bb:
         03:62:f1:43:c3:ad:fa:ed:06:84:99:fb:19:9e:1a:5b:ae:5d:
         bd:0d:40:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:56 2026 by rpki-client