Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
File:                     73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json)
Hash identifier:          /SbakX6n8GwHoXTSLtoygj5xsFw9L34VkoBThtJHrw8=
Subject key identifier:   4B:3E:02:9F:4C:8F:8B:7F:DA:CB:8D:1E:9D:11:E1:D7:32:92:59:9A
Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
Certificate issuer:       /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Certificate serial:       019D27E01A22DF52B03549F1220678BC815D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
Manifest number:          104C
Signing time:             Thu 26 Mar 2026 02:01:31 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:31 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:31 +0000
Files and hashes:         1: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: pncIf8THyhaA6IMfqsIOa2P2h8gws7G+qwPmUUrjY8U=)
                          2: SlpF7r7mXCWXhPzZBmODYnXQ2AQ.roa (hash: jMJC3ZxPYgXKuHU+fXZq1zQnba0EbcW6rqUVC+m4QQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:1a:22:df:52:b0:35:49:f1:22:06:78:bc:81:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
        Validity
            Not Before: Mar 26 02:01:31 2026 GMT
            Not After : Mar 27 02:01:31 2026 GMT
        Subject: CN=4b3e029f4c8f8b7fdacb8d1e9d11e1d73292599a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cb:a4:fa:94:c3:e3:f4:4b:82:92:f6:12:a5:
                    1b:01:83:54:bf:23:43:b0:a5:5d:d3:94:8e:2e:d7:
                    c9:a6:22:30:20:1e:0a:3c:d6:83:63:c7:96:3e:5c:
                    3d:02:8a:b1:b7:f9:8f:85:5d:ef:82:e9:0c:2c:15:
                    c0:b3:1d:e4:e9:eb:86:33:32:1b:6c:55:fc:9d:00:
                    ef:30:a9:bc:a9:dc:4f:5c:f0:59:22:35:c3:c6:d4:
                    7f:4b:fc:1a:8e:bb:09:d4:1b:5e:d1:2c:62:73:16:
                    7f:db:20:06:1d:49:94:b1:97:dd:16:de:49:09:c8:
                    99:b9:88:02:89:12:37:66:68:aa:4d:50:f4:38:3c:
                    9f:17:8d:11:8b:df:03:43:b5:2d:0d:2d:ea:a8:7e:
                    0e:37:b2:94:c5:c2:e7:58:36:5c:48:18:ec:03:61:
                    40:aa:57:7b:ec:43:9c:db:10:8c:77:1f:90:7b:3f:
                    e6:92:d3:0c:bb:0a:78:39:66:af:c1:16:e4:a6:b9:
                    75:c8:c0:9f:bb:5b:27:0c:47:9c:9b:b4:75:ad:ad:
                    b6:75:3c:71:bf:7f:2d:00:3b:5b:c4:5b:f0:40:df:
                    cb:fa:89:e3:bd:9e:5e:d3:d9:73:23:1a:8d:7b:76:
                    ed:93:fe:d2:da:4a:d1:4a:af:ba:aa:18:af:b6:6a:
                    f9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3E:02:9F:4C:8F:8B:7F:DA:CB:8D:1E:9D:11:E1:D7:32:92:59:9A
            X509v3 Authority Key Identifier:
                keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:f1:5c:4c:e7:0d:b1:bb:51:8c:e0:7a:d1:3f:e5:c7:9c:04:
         c2:81:52:59:ea:38:28:67:20:1f:80:c9:91:67:92:77:90:56:
         2a:99:5f:ec:3e:44:bc:ae:1a:84:a0:a6:65:54:1e:40:50:d0:
         88:f4:ab:41:69:09:50:21:f5:2a:4a:c4:da:d6:ac:8c:9f:f7:
         f1:c4:3d:15:01:38:d4:c0:45:01:5f:a4:ad:2d:3c:93:2f:f0:
         a7:fa:9f:43:54:ef:4c:b2:09:73:92:d2:29:cc:00:b1:66:e0:
         05:d5:bf:e3:86:46:42:03:c0:10:3f:d0:81:93:cf:ee:c8:d5:
         4a:61:06:bf:f6:d2:be:55:9f:e3:2d:5c:fd:22:fa:eb:b9:57:
         58:a4:cf:c0:3a:2c:b7:12:1f:e8:e4:ba:f7:c1:af:8f:23:89:
         a9:3c:a0:62:78:7e:81:12:44:a5:29:c7:6e:4e:01:c6:0a:1e:
         7f:79:be:ff:f1:be:37:c8:a8:54:3b:84:7e:ce:a2:2f:08:60:
         af:d1:d0:28:f0:16:c5:53:0a:1c:6e:64:f5:83:d9:73:3e:2c:
         60:b0:76:58:0e:a8:b6:f6:1f:cb:cd:c0:f9:0d:64:b6:88:99:
         51:f6:b8:12:e2:ad:7d:f6:a4:1b:60:40:e8:9d:bd:55:32:1b:
         73:c5:db:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:58 2026 by rpki-client