Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
File:                     73i8lpqDBzNu9ARPPf7x_hNjgrM.mft (raw, json)
Hash identifier:          i1LI82iOrxB88bPD7Evbz4Ec9gEL1FW/q/SwSu1VrwA=
Subject key identifier:   3D:C6:B3:E6:B6:F2:CE:43:70:12:57:D0:8E:E7:9C:72:76:ED:CC:7B
Authority key identifier: EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
Certificate issuer:       /CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Certificate serial:       019D265F813D3E3C120723565F5F3AC2C427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
Manifest number:          0E4E
Signing time:             Wed 25 Mar 2026 19:01:26 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:26 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:26 +0000
Files and hashes:         1: 73i8lpqDBzNu9ARPPf7x_hNjgrM.crl (hash: Qkfj51AxGyvi3nhIA34G1D9gjavv0VWWN0dN/wi/8ag=)
                          2: tX9OyoBEYMF2XV4dez69hRjVkN4.roa (hash: jRKxFIJbG2B0T0vVXLe06uc5pOJoGJLwsVGTSpeMt0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:81:3d:3e:3c:12:07:23:56:5f:5f:3a:c2:c4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
        Validity
            Not Before: Mar 25 19:01:26 2026 GMT
            Not After : Mar 26 19:01:26 2026 GMT
        Subject: CN=3dc6b3e6b6f2ce43701257d08ee79c7276edcc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:1b:3d:43:d9:2f:b9:01:e9:ec:f4:9a:31:
                    38:cf:21:96:eb:ee:fb:27:22:8a:d1:74:94:53:fd:
                    a9:92:06:bf:0b:70:72:1c:9d:e4:17:d2:3c:16:72:
                    fa:fd:86:d1:7d:f1:5c:0f:b9:ee:f8:db:d7:63:48:
                    15:3e:f0:33:5b:c7:ec:1a:6c:12:bb:2c:b0:12:43:
                    65:21:e7:cc:2c:f3:8a:8a:28:fe:b0:99:49:d2:43:
                    49:be:1e:a5:1b:4f:37:9c:f0:69:bf:3a:db:61:c2:
                    60:98:ac:47:c0:49:04:ba:dc:24:77:eb:52:16:30:
                    96:c6:40:a8:79:f5:f5:00:a5:32:28:cb:ab:6c:7d:
                    17:10:39:e1:64:0e:50:a3:9c:cb:bc:39:4b:73:75:
                    ec:08:c2:ef:54:aa:30:9d:62:4b:00:ae:f8:b4:41:
                    12:65:05:1a:78:eb:19:b1:c1:d4:a0:5c:3e:e0:95:
                    39:b0:e9:11:05:a4:92:2e:23:ea:04:df:f5:60:27:
                    bd:14:2d:73:b3:30:e4:07:a3:f1:fb:95:06:28:61:
                    69:4c:d5:38:12:c0:44:b2:21:24:d3:b4:ee:7b:db:
                    e2:6d:00:0f:4f:cc:36:ff:3d:4f:f7:92:8d:72:ff:
                    cd:15:c8:3f:43:26:96:be:f9:3c:65:ce:dc:ef:8d:
                    95:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C6:B3:E6:B6:F2:CE:43:70:12:57:D0:8E:E7:9C:72:76:ED:CC:7B
            X509v3 Authority Key Identifier:
                keyid:EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:39:3d:d3:57:b9:d6:10:b2:8e:42:25:89:d2:36:61:f6:86:
         04:23:7c:99:81:09:8b:aa:a6:4d:2e:5c:be:55:83:fe:7d:30:
         85:7b:79:f6:28:18:d9:d9:35:b7:e7:46:c8:db:83:cd:64:7a:
         f9:77:5e:94:36:d2:d2:49:bb:5e:df:d3:c3:17:91:9d:06:57:
         61:8a:ee:d6:b3:19:2a:94:f6:9a:d8:77:88:d6:fb:4a:98:52:
         7c:f1:3e:a9:f9:9b:33:ed:b5:fd:68:e2:9f:11:3a:36:b1:12:
         07:69:72:8d:46:7e:16:d4:33:19:0a:f6:32:5d:be:90:6c:7b:
         19:d9:4c:ce:0e:a9:30:8b:a8:8c:cd:c6:93:ce:fd:74:e4:35:
         03:46:e3:f9:f9:b0:12:3f:7a:a4:b4:19:db:29:0a:e3:ff:9f:
         45:3a:87:71:82:05:df:00:22:e3:ad:81:e3:ac:82:74:5f:3e:
         08:2c:94:9d:92:60:46:2c:50:2e:f3:ff:8b:fe:1e:17:0f:cd:
         3e:0d:25:98:e6:c6:a3:cd:d1:64:2c:f3:87:93:7b:1f:d2:a0:
         5c:af:f3:f3:cd:d8:aa:31:42:66:1d:84:e7:4f:02:a3:6b:59:
         78:b7:1c:dd:6a:1b:7a:ce:41:63:99:84:8f:59:d9:42:a7:c1:
         0a:c6:41:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:33 2026 by rpki-client