Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
File:                     76psy3hXNGAC5rvEmPiLnobfGAY.mft (raw, json)
Hash identifier:          b1/UXdnXqDdNtLtLNWyldh9ddjFQPUleOzXw4bt3jN8=
Subject key identifier:   BF:B1:37:6C:D1:F6:F3:EB:57:FA:E8:2B:D9:A8:6B:91:3A:FA:0A:F4
Authority key identifier: EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06
Certificate issuer:       /CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
Certificate serial:       019FAA508D2DF8BD6589C744BEC0174A1BAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
Manifest number:          0795
Signing time:             Tue 28 Jul 2026 20:00:33 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:33 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:33 +0000
Files and hashes:         1: 76psy3hXNGAC5rvEmPiLnobfGAY.crl (hash: JvIlsuMWMXap0o7DPIA2MtcDuHqB2Q37M9c3X86ST1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:8d:2d:f8:bd:65:89:c7:44:be:c0:17:4a:1b:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efaa6ccb7857346002e6bbc498f88b9e86df1806
        Validity
            Not Before: Jul 28 20:00:33 2026 GMT
            Not After : Jul 29 20:00:33 2026 GMT
        Subject: CN=bfb1376cd1f6f3eb57fae82bd9a86b913afa0af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:55:0c:56:35:c3:19:e4:7e:b6:88:47:36:
                    74:77:50:f1:e8:66:74:99:89:98:22:bd:c1:9f:48:
                    d0:8d:8b:a2:4f:63:98:33:d2:e5:9e:e6:09:50:36:
                    15:98:f6:d6:d6:17:e2:74:28:aa:2f:5c:aa:32:b1:
                    19:79:5d:11:2c:51:d4:a6:15:8d:56:9f:e3:78:3e:
                    06:6e:d0:eb:a9:2c:bf:51:2e:7b:58:40:59:b3:fc:
                    47:2e:0f:33:e5:8e:0e:de:cf:79:48:3e:e0:a7:88:
                    26:3a:e8:7d:83:db:d6:16:1e:0c:44:b8:24:66:16:
                    e2:d9:2b:d9:4c:8f:d4:3c:62:2a:0e:11:df:94:56:
                    f9:9a:6a:64:8b:da:9f:24:19:b7:2e:33:0b:18:5a:
                    4f:4c:0b:fa:d1:a8:47:87:10:fa:af:b0:ac:3b:2c:
                    10:12:72:00:4c:a3:13:fe:b8:d9:1f:3e:49:bf:98:
                    13:24:e9:5b:85:04:7d:bc:c1:54:43:73:68:d9:ef:
                    e2:d7:d8:a7:2c:7f:53:35:0f:9f:47:b6:bd:ef:40:
                    61:8f:05:91:59:53:63:9e:0b:55:d9:c8:33:7a:7a:
                    cd:ac:5b:a9:dd:6a:86:b8:24:37:8e:d2:ab:4f:59:
                    d4:92:8a:21:9c:66:4b:62:cb:bc:3b:37:e4:6d:a5:
                    cd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B1:37:6C:D1:F6:F3:EB:57:FA:E8:2B:D9:A8:6B:91:3A:FA:0A:F4
            X509v3 Authority Key Identifier:
                keyid:EF:AA:6C:CB:78:57:34:60:02:E6:BB:C4:98:F8:8B:9E:86:DF:18:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76psy3hXNGAC5rvEmPiLnobfGAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa9614-f6d7-4c33-b94b-d820f65ced81/1/76psy3hXNGAC5rvEmPiLnobfGAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:13:9b:66:77:c9:77:60:92:d4:ee:7d:87:de:18:3c:79:92:
         ca:f3:2d:ab:75:48:91:6b:81:cf:d0:d7:0a:2b:e0:f5:0d:cf:
         25:37:9a:c1:1d:5b:34:35:e8:e1:5f:54:85:ae:ac:3b:cc:64:
         13:e8:d9:f5:36:ae:5c:7c:1d:56:84:f8:1e:25:3f:40:4f:cb:
         cd:f4:24:90:ec:92:7e:0f:5f:b9:b5:db:35:d8:4a:54:7f:83:
         34:1c:d0:8a:2d:f6:bb:f2:54:c1:d4:3e:01:d4:5e:0e:89:e5:
         88:83:6d:c9:0b:a6:7b:95:52:d1:15:94:1b:89:6d:24:51:e5:
         a6:27:73:1e:5a:a9:28:c5:da:6d:d8:c4:0a:17:b2:56:57:6f:
         41:7f:92:e1:7f:cf:f6:e1:ff:d4:cf:79:6f:47:54:28:74:50:
         c8:5e:77:7d:f1:b2:f6:7e:a6:f1:ae:10:83:b1:a3:1f:df:4d:
         8e:82:a6:29:84:82:b5:5e:98:b8:55:52:61:38:60:1e:fa:9f:
         fb:73:9f:6f:68:d3:c6:82:dd:42:71:98:82:30:f1:c4:6d:c8:
         eb:a7:9b:e0:29:9d:18:da:39:ef:22:de:28:3d:01:c6:0e:c1:
         95:f4:7c:72:7b:b3:4e:36:08:b8:a4:fb:c9:1c:9f:f0:12:70:
         58:83:05:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:24:38 2026 by rpki-client