Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
File:                     73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json)
Hash identifier:          Sa7gNgJ0KVoq2q475xeE+BP3MRlQDZzQXjW3SiUliFM=
Subject key identifier:   3E:AA:05:94:D0:75:62:DE:50:F1:60:E2:3E:49:29:0A:30:7D:9B:E7
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Certificate issuer:       /CN=ef75517b3161a047762413301614217679a82608
Certificate serial:       019EBF9141D953802AAC0A1BA21AD5ED9B1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
Manifest number:          0847
Signing time:             Sat 13 Jun 2026 06:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:28 +0000
Files and hashes:         1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: C5LbuJEcHenYNHxuoC0UTZcXK/EtOeG9p917peMyacA=)
                          2: 9b1WVB4SRbPnLJ7MMROFIOe7IyI.roa (hash: o6KKd6GFzp4x33O4H64EWtykpwPkOuUVM1rFQ860o14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:41:d9:53:80:2a:ac:0a:1b:a2:1a:d5:ed:9b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef75517b3161a047762413301614217679a82608
        Validity
            Not Before: Jun 13 06:00:28 2026 GMT
            Not After : Jun 14 06:00:28 2026 GMT
        Subject: CN=3eaa0594d07562de50f160e23e49290a307d9be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:82:82:1d:ea:f9:cd:a1:3e:66:e1:ec:e5:b8:
                    3d:12:30:14:9a:c2:d1:ff:88:e3:dc:92:ab:dc:ae:
                    eb:c9:c4:6e:7d:c3:cb:7d:98:b1:09:00:9e:e2:6a:
                    d7:44:45:64:9d:ab:31:9d:21:46:f3:11:fa:0b:f4:
                    5a:f6:ce:6f:6a:0e:e3:b4:c2:c2:8d:57:7a:c4:18:
                    47:93:f7:cb:bc:a7:59:85:d4:64:ea:7d:a8:b4:8b:
                    15:e9:61:df:00:e0:a1:ba:1f:ad:d4:80:72:7c:69:
                    90:cc:19:79:6b:2e:10:fb:b5:87:66:e8:69:3f:4a:
                    97:85:cc:ab:38:f2:a2:fd:c2:1f:35:26:62:48:15:
                    c4:8a:15:e2:84:27:29:35:74:2d:71:e4:88:1b:8f:
                    0d:67:db:97:78:fa:cb:e8:f7:06:1a:31:58:4c:a7:
                    9a:86:e8:49:3f:07:1d:05:aa:fd:25:52:65:37:1f:
                    6c:4b:05:e4:2d:99:a8:3a:b1:04:6c:69:4e:e7:eb:
                    41:ef:ce:3a:eb:fa:2a:a5:1e:5a:01:ab:4c:e3:43:
                    07:85:cf:ca:74:c3:69:4c:90:0b:c5:ec:f7:f4:89:
                    81:f3:30:05:58:8d:0b:85:a1:51:63:ee:b8:90:17:
                    1b:6a:41:e7:3b:10:8f:95:f5:cf:18:25:a8:02:3a:
                    96:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AA:05:94:D0:75:62:DE:50:F1:60:E2:3E:49:29:0A:30:7D:9B:E7
            X509v3 Authority Key Identifier:
                keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:ce:4b:c1:e0:55:e5:7a:f3:5e:69:5b:f8:a3:05:c1:b0:20:
         88:fe:ef:75:f1:4c:62:70:45:99:f7:1c:89:86:03:a7:45:6d:
         7e:77:08:e0:cc:25:ea:35:46:18:15:c6:23:b4:ff:25:31:99:
         cd:9a:80:77:1e:f4:71:0c:3b:e0:5e:1d:0c:d2:e6:27:63:41:
         60:4a:a1:0d:19:2b:aa:06:b4:9f:ca:70:59:fc:1e:fa:37:fe:
         6c:71:b1:09:cd:02:46:55:8c:59:1a:87:e5:7c:77:de:83:03:
         dd:31:06:93:c9:9c:ee:7e:bf:48:bc:01:43:b4:69:d4:25:6a:
         67:ea:64:31:1e:b9:3c:76:37:5d:26:f0:00:60:d9:62:dd:fb:
         f9:88:63:9f:2b:cd:20:d8:65:d6:65:98:94:a4:2f:26:3b:86:
         e7:88:f6:c3:2e:4d:67:11:0a:89:e1:90:52:b8:47:7f:be:b9:
         3e:46:20:df:fe:24:07:6f:fa:69:d5:e1:53:11:18:ce:96:a3:
         c0:9a:cf:7f:30:ae:e0:e9:13:69:54:e1:ea:d7:cb:a1:04:d3:
         d0:24:7c:ac:69:4e:2f:9e:9b:fb:19:ee:03:9a:83:a4:9f:fe:
         5c:54:05:8b:b7:f4:5b:50:b6:e9:0d:2f:94:5c:38:3d:4f:13:
         cb:9c:57:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:01:36 2026 by rpki-client