Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
File:                     76CXauJceI-r_CqFN4HV3_DKVg8.mft (raw, json)
Hash identifier:          K/o5q0G3uiJbyodnRgXCGxF5Sy4uW0KW1izADOkWv08=
Subject key identifier:   49:CE:37:3D:1F:0F:42:2C:73:05:29:B9:E5:D0:EC:D0:60:B6:E8:A0
Authority key identifier: EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
Certificate issuer:       /CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Certificate serial:       019F90FF25B9E177917FD9C0E3C3A6304346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
Manifest number:          1018
Signing time:             Thu 23 Jul 2026 22:01:08 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:08 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:08 +0000
Files and hashes:         1: 76CXauJceI-r_CqFN4HV3_DKVg8.crl (hash: a+w5e22irA63IfiIJsHDnwAtcqbPqYLCGHb0bJhRyeA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:25:b9:e1:77:91:7f:d9:c0:e3:c3:a6:30:43:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
        Validity
            Not Before: Jul 23 22:01:08 2026 GMT
            Not After : Jul 24 22:01:08 2026 GMT
        Subject: CN=49ce373d1f0f422c730529b9e5d0ecd060b6e8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e3:47:cd:65:c4:0c:98:1d:75:2e:b9:d0:71:
                    09:83:d1:43:a1:e0:1c:40:4f:b0:e4:3e:28:4c:78:
                    4a:15:e0:ef:9c:f5:7d:3f:39:5e:bf:db:fc:43:7c:
                    05:94:48:17:7a:68:a3:07:30:3a:60:ab:68:e5:63:
                    45:f7:b5:5c:93:7d:91:9d:11:17:fd:26:9f:b4:c2:
                    fa:0c:d6:47:1a:c5:63:0c:7a:6b:46:32:83:26:e4:
                    1f:6c:35:48:54:88:e2:b2:21:8b:eb:6f:0d:09:15:
                    c8:5d:18:4a:a5:0f:47:29:76:74:de:c7:71:8b:16:
                    4f:29:e4:63:1e:c7:6a:9c:96:73:56:ec:73:58:5a:
                    62:0a:db:56:35:2c:cf:6e:a1:7c:b8:3f:9f:0c:e8:
                    94:b1:25:7e:50:e1:eb:96:06:b8:74:56:ec:ac:02:
                    06:1a:92:17:ce:60:16:32:e2:42:c1:67:64:e4:e0:
                    13:3f:b1:23:5e:91:02:22:78:af:ff:01:3f:fc:83:
                    0c:b8:f7:13:ad:4e:fd:71:e6:99:ff:b0:cd:94:2f:
                    d6:07:d9:e0:22:95:26:6f:d1:3d:48:b8:d7:9b:7c:
                    04:d6:29:69:35:21:20:8a:d5:ba:be:03:bb:14:3a:
                    5a:8c:b0:38:cb:84:db:e9:2c:fa:72:28:22:77:71:
                    a1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CE:37:3D:1F:0F:42:2C:73:05:29:B9:E5:D0:EC:D0:60:B6:E8:A0
            X509v3 Authority Key Identifier:
                keyid:EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e2:e6:ac:4e:82:7b:41:83:76:1c:80:17:d1:c9:f9:f3:e7:
         ad:ed:ed:d6:a6:ac:62:96:e6:7a:fb:c2:ab:af:f2:61:3d:7a:
         7e:62:ca:41:02:69:e9:ad:76:83:21:b9:ef:d0:6e:87:50:28:
         eb:73:6f:8a:3f:c8:b2:86:0b:14:1f:27:3d:31:17:9a:84:5c:
         69:ad:66:d2:48:31:2f:b5:2c:b8:80:f5:5b:65:88:dd:3e:e0:
         2f:ac:83:63:ab:a7:dd:68:78:c4:4c:37:67:04:f3:a2:4e:c1:
         20:93:95:18:7e:6a:cd:09:ce:7d:dd:f3:99:b6:50:75:54:01:
         64:d3:e0:e0:c2:34:8c:b9:cd:7d:f0:b6:d0:62:82:01:85:60:
         7e:ec:09:8d:8e:3c:82:a9:cd:47:c8:58:2c:c5:ac:84:0d:1c:
         6e:1d:4b:22:1c:05:23:9f:d5:ed:0b:0a:e5:43:35:39:79:07:
         a3:ef:b8:e3:11:33:34:8f:f4:e2:90:19:08:85:8e:0c:d7:6f:
         bc:77:3f:47:30:c8:50:ae:d3:4a:a1:e9:7c:ec:a2:8d:75:f6:
         01:28:e6:80:58:06:0a:16:f1:87:00:95:66:4d:94:f2:f9:f5:
         6a:06:d0:3d:2b:12:27:10:df:bd:9d:c7:24:c4:51:72:cd:e2:
         35:b4:c1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----