Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
File:                     73i8lpqDBzNu9ARPPf7x_hNjgrM.mft (raw, json)
Hash identifier:          scqDkuUJVX+DktWfm+JSgH4DJg6Zfwjd2+dTngcq1E4=
Subject key identifier:   3F:30:A1:CE:A3:9A:0D:AE:91:7F:A4:A2:77:14:9E:61:C1:6D:04:93
Authority key identifier: EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
Certificate issuer:       /CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Certificate serial:       01A0DC853D47A1BEB05748F9A681C1A62E3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
Manifest number:          103A
Signing time:             Sat 26 Sep 2026 07:01:54 +0000
Manifest this update:     Sat 26 Sep 2026 07:01:54 +0000
Manifest next update:     Sun 27 Sep 2026 07:01:54 +0000
Files and hashes:         1: 73i8lpqDBzNu9ARPPf7x_hNjgrM.crl (hash: QUBrw5lKhARVhM4RRCyvdjM/LlIyNMeWSFifiyvSd9A=)
                          2: tX9OyoBEYMF2XV4dez69hRjVkN4.roa (hash: jRKxFIJbG2B0T0vVXLe06uc5pOJoGJLwsVGTSpeMt0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:85:3d:47:a1:be:b0:57:48:f9:a6:81:c1:a6:2e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
        Validity
            Not Before: Sep 26 07:01:54 2026 GMT
            Not After : Sep 27 07:01:54 2026 GMT
        Subject: CN=3f30a1cea39a0dae917fa4a277149e61c16d0493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:80:87:3e:05:8c:70:62:46:55:d2:e4:a2:68:
                    02:a5:d4:fb:87:64:a3:85:83:ec:71:eb:13:0a:49:
                    22:e7:e9:85:b3:19:d9:31:47:c4:c5:11:84:3d:98:
                    99:ca:90:e8:6a:44:45:e8:d4:a3:f2:eb:23:3c:1f:
                    5c:61:14:9c:77:f6:3d:52:7a:d0:ba:f5:b4:48:73:
                    cf:71:7d:e2:cc:7e:98:7c:28:ad:7f:2a:f1:59:95:
                    d9:60:18:27:b6:dd:60:c3:fb:20:46:e4:4f:ae:97:
                    39:47:a9:4b:84:24:e5:50:58:ad:fa:f1:0a:9e:33:
                    e3:96:df:3d:a6:50:d8:fe:f9:cb:79:87:50:e8:f1:
                    69:b2:02:72:a0:d1:fa:d5:d4:2d:75:63:ae:91:8a:
                    3a:4a:f5:03:d4:d9:35:56:f7:f2:29:10:a4:69:2f:
                    56:2a:9f:36:af:75:63:18:4b:c2:05:90:95:1b:18:
                    98:74:8a:d0:fd:6a:7e:bb:e5:fb:12:04:de:69:b1:
                    88:ea:6e:8b:3d:21:0b:05:0f:e4:f2:ac:85:6d:bd:
                    99:ae:28:63:3f:bf:4e:8d:17:f5:04:af:ce:34:ea:
                    64:69:c7:ae:69:87:62:92:ef:e5:3e:2a:b1:40:a1:
                    4a:a2:a8:81:60:01:d2:22:f0:4a:57:7f:07:6d:75:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:30:A1:CE:A3:9A:0D:AE:91:7F:A4:A2:77:14:9E:61:C1:6D:04:93
            X509v3 Authority Key Identifier:
                keyid:EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f3:c4:df:c2:a1:f6:0f:4d:1d:72:ac:d4:cf:1f:77:27:01:
         28:96:d7:b4:dd:9d:9a:44:02:25:e7:de:d1:1b:30:f0:38:98:
         f2:d1:59:53:d0:cb:ca:ca:0a:06:32:58:77:7f:da:d4:da:94:
         15:53:59:c2:ad:07:9a:77:10:ba:a5:dd:ed:3a:26:88:dc:d4:
         95:82:8b:8c:32:60:15:2b:c3:9f:e5:da:96:fd:d2:65:64:02:
         98:3c:ce:ba:d8:48:de:8f:f2:6f:3a:85:45:33:9a:aa:77:49:
         50:df:1d:18:99:3f:91:cf:34:d7:d1:0e:7c:52:6c:21:45:b1:
         e4:56:cf:50:51:5d:18:ae:b6:73:27:a4:61:3e:cf:aa:a8:80:
         77:fa:26:bb:af:f9:d1:55:a8:1f:9c:6a:8a:ae:e9:2f:8b:11:
         e1:28:d5:73:20:e2:3e:bf:83:45:1a:ea:37:40:29:ea:c0:cb:
         b2:de:3e:9a:cc:79:2e:64:d0:fc:b3:7f:17:1c:25:18:9a:d5:
         cc:0c:f5:a5:2f:cc:8d:40:73:13:96:49:ec:27:f5:7f:c3:02:
         7b:5c:a3:34:ed:9a:16:c8:05:71:37:39:5f:98:53:6d:40:15:
         dd:3f:74:cd:0f:1f:1e:2f:cc:d0:03:7f:7b:5e:4a:58:7d:d5:
         52:94:fd:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:24:23 2026 by rpki-client