Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
File:                     76AvL3KWXJ4cmy1X6j_BL8-skQM.mft (raw, json)
Hash identifier:          7/8CmVzIrMkiDOv4jr3yGLoKqjKFp7mualbrygYp0Gw=
Subject key identifier:   9E:83:04:40:42:3F:57:34:48:36:90:67:DE:62:AA:BE:C2:12:E4:B3
Authority key identifier: EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03
Certificate issuer:       /CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
Certificate serial:       019DA30A76E0D87D2CA1CB9E2FE7A160F0AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
Manifest number:          18C1
Signing time:             Sun 19 Apr 2026 00:01:05 +0000
Manifest this update:     Sun 19 Apr 2026 00:01:05 +0000
Manifest next update:     Mon 20 Apr 2026 00:01:05 +0000
Files and hashes:         1: 76AvL3KWXJ4cmy1X6j_BL8-skQM.crl (hash: YpyQTo4D/2qLlJz9X66T4+6OP1DNwqdL8NdrvQYq6TM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:0a:76:e0:d8:7d:2c:a1:cb:9e:2f:e7:a1:60:f0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa02f2f72965c9e1c9b2d57ea3fc12fcfac9103
        Validity
            Not Before: Apr 19 00:01:05 2026 GMT
            Not After : Apr 20 00:01:05 2026 GMT
        Subject: CN=9e830440423f573448369067de62aabec212e4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:ba:d6:16:51:46:df:3b:16:0f:20:32:50:
                    a1:a3:bc:16:82:cf:d5:4c:45:bc:42:56:23:89:78:
                    fa:4d:7b:e9:83:40:f4:fe:f3:8e:46:43:0e:cc:ab:
                    57:87:07:93:02:0b:9e:08:05:50:0c:f1:4f:47:f9:
                    6c:6f:cd:e5:59:63:62:96:8b:e1:80:fe:08:ac:3b:
                    22:6a:e8:a8:17:95:8c:74:8e:9b:7f:bc:fd:c6:e5:
                    83:5f:55:36:9f:89:87:4a:a5:eb:19:a3:47:6f:cb:
                    87:f5:c9:bf:23:09:13:b9:13:0b:ff:f3:da:06:5c:
                    24:75:c4:30:46:a9:b6:1b:b7:4c:d9:02:60:74:70:
                    58:8c:80:d2:c2:34:6b:2c:73:d1:ef:c9:63:06:58:
                    e0:9c:8a:83:c3:49:16:59:6f:0e:cc:d8:01:c9:73:
                    3f:b6:a3:a7:53:be:b3:b2:18:05:56:f8:05:dd:5c:
                    36:0d:21:a2:a0:08:f6:83:a1:b0:a1:ad:a4:c2:6d:
                    1e:ac:47:64:7d:f6:84:4c:8c:99:04:c0:36:a9:1f:
                    1e:46:ad:25:49:1c:2e:33:d4:e4:3b:b2:e7:38:56:
                    76:08:b4:8d:52:b0:e3:4e:ff:c8:aa:5c:cf:c3:e6:
                    02:46:c7:4b:aa:aa:42:2c:4a:5a:14:6c:fc:97:0d:
                    2e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:83:04:40:42:3F:57:34:48:36:90:67:DE:62:AA:BE:C2:12:E4:B3
            X509v3 Authority Key Identifier:
                keyid:EF:A0:2F:2F:72:96:5C:9E:1C:9B:2D:57:EA:3F:C1:2F:CF:AC:91:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76AvL3KWXJ4cmy1X6j_BL8-skQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/58dc5d-89ab-42bd-8baa-488926cfdc2d/1/76AvL3KWXJ4cmy1X6j_BL8-skQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:5c:08:e6:da:f4:e6:79:76:49:18:c9:58:2b:76:06:c5:1b:
         23:f1:a6:93:85:3a:20:6e:94:d6:dd:0b:1e:80:d7:ee:38:84:
         04:aa:1a:76:ff:42:5b:92:4f:59:34:e8:fc:f7:64:2c:3e:25:
         04:ae:e7:67:d8:51:51:04:f8:fa:89:c0:8c:ca:57:15:1d:f2:
         1c:9e:46:f3:a1:72:53:73:1a:71:95:83:ad:90:03:00:1a:a6:
         ef:96:dd:a5:2f:a8:a0:49:9e:ed:a4:ba:59:e0:c2:09:ed:85:
         d5:1e:af:41:93:73:f7:11:81:08:40:be:9a:20:a2:fc:bb:ac:
         cf:25:2c:b4:d9:9b:5c:5e:03:8c:6f:b6:09:bd:72:77:4e:31:
         ed:8b:5d:85:34:6c:1c:4f:ce:8f:00:d5:a6:7c:09:db:47:9f:
         db:34:09:e3:23:b6:45:8c:a1:b3:9b:af:1d:46:5b:88:e5:ae:
         ef:d7:3d:28:89:1b:61:57:8c:30:2b:3e:91:08:76:6b:7a:85:
         f7:31:fe:a4:8b:9e:62:83:92:ce:50:ee:5c:f0:06:66:b2:ed:
         7a:d9:a7:b8:2e:db:ae:2e:82:68:cf:00:35:af:a0:59:0f:91:
         ee:b2:43:04:4c:3b:dc:2a:02:ed:e7:3c:f8:fd:bf:40:3f:c2:
         98:ce:ac:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:39 2026 by rpki-client