Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
File:                     73i8lpqDBzNu9ARPPf7x_hNjgrM.mft (raw, json)
Hash identifier:          /rovT9ySoLugo3r/8ePr9B3JftXLn+rfbiRdp0QttRg=
Subject key identifier:   D7:58:27:E7:CE:E8:77:82:69:15:9A:86:18:F0:34:24:20:4B:39:72
Authority key identifier: EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
Certificate issuer:       /CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Certificate serial:       019E1D90054E30FE7BE8D17703BC3F0C33DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
Manifest number:          0ECE
Signing time:             Tue 12 May 2026 19:00:38 +0000
Manifest this update:     Tue 12 May 2026 19:00:38 +0000
Manifest next update:     Wed 13 May 2026 19:00:38 +0000
Files and hashes:         1: 73i8lpqDBzNu9ARPPf7x_hNjgrM.crl (hash: CVed6focgpN63fQZt86Pd8w1wkUMb/H2gmMAxzyekJY=)
                          2: tX9OyoBEYMF2XV4dez69hRjVkN4.roa (hash: jRKxFIJbG2B0T0vVXLe06uc5pOJoGJLwsVGTSpeMt0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:05:4e:30:fe:7b:e8:d1:77:03:bc:3f:0c:33:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
        Validity
            Not Before: May 12 19:00:38 2026 GMT
            Not After : May 13 19:00:38 2026 GMT
        Subject: CN=d75827e7cee8778269159a8618f03424204b3972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:79:ab:3e:b2:98:2b:27:07:20:2d:4c:88:
                    3a:f0:74:0a:b3:99:77:d8:53:44:69:b7:af:b4:e8:
                    59:29:4f:f5:52:01:c6:7f:21:b1:d3:15:17:2e:96:
                    f2:ae:ed:8b:3c:3b:a5:2f:73:1b:48:87:17:a0:25:
                    04:25:3e:a5:0a:f2:99:5c:cd:ce:2c:da:ed:03:cb:
                    78:9b:2e:1e:28:ed:b6:a5:fc:7f:23:96:dd:a4:c6:
                    14:ff:68:d2:0e:a0:98:99:6d:5a:c3:62:ae:a2:96:
                    61:58:8a:d8:1f:9f:c9:d8:d0:ac:4d:6f:a3:27:b3:
                    ac:fc:2d:7a:15:5c:f9:cc:b0:7f:5f:07:29:c0:78:
                    e2:f0:47:1d:a6:39:9c:2d:bb:04:57:2d:29:fa:a1:
                    19:72:e3:9e:73:2b:b9:5e:61:e5:0a:b8:b5:d6:17:
                    cf:14:d7:7c:0c:1a:1d:e5:c9:f5:42:70:92:85:cf:
                    66:37:93:82:4b:ff:ab:e9:7c:fa:4f:1e:92:b3:c0:
                    c5:16:10:5f:df:23:8d:bc:eb:0a:50:79:7e:0c:0b:
                    b3:87:6d:38:9c:83:99:65:00:ba:a5:ce:ca:6c:9b:
                    19:19:7b:a1:51:04:4c:af:df:30:1b:3c:25:67:00:
                    b3:97:6c:40:20:a3:ca:45:57:7e:69:a3:0e:30:30:
                    a9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:58:27:E7:CE:E8:77:82:69:15:9A:86:18:F0:34:24:20:4B:39:72
            X509v3 Authority Key Identifier:
                keyid:EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:46:8a:6b:3e:8d:15:ca:44:10:19:97:0b:da:a7:b5:ed:7b:
         f4:c2:6c:4b:d3:f8:c2:49:1d:33:69:aa:72:8e:42:ce:a9:35:
         e1:d5:14:b7:3a:e5:1a:c2:41:19:d4:25:92:13:5d:c3:08:1c:
         c0:02:96:05:5e:77:72:d8:66:78:f9:17:fc:f4:a7:b9:6a:2f:
         da:7e:b2:29:97:f7:e5:50:11:06:4b:6c:bb:c5:8a:82:34:9c:
         4f:ac:b5:a2:03:c8:30:c8:55:24:ed:9d:d8:2c:e6:de:9e:1d:
         29:b3:4e:78:e5:63:17:d9:e4:af:d0:8c:15:bc:38:6e:a5:10:
         09:5f:e6:94:2c:b6:6b:e8:e7:ff:5d:8f:40:16:da:36:5c:24:
         49:28:36:22:5a:9c:8e:87:51:b6:d0:90:87:e4:1b:f8:81:dd:
         19:49:b3:8e:1b:a1:6e:10:f0:ed:df:d7:e0:d7:47:96:23:67:
         2a:73:d9:70:aa:61:80:04:52:ee:80:cd:85:0d:bc:5f:2f:23:
         b8:57:a8:a2:0f:98:9a:ea:1a:a3:6c:7f:4e:5c:53:03:41:5c:
         5d:ce:3b:9c:e5:45:8e:f2:d3:0f:b2:46:71:b1:2a:24:20:f1:
         55:9c:68:06:01:1b:95:3e:9e:e2:50:05:48:25:e6:0f:b2:ae:
         9b:ac:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:52:34 2026 by rpki-client