Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
File:                     73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json)
Hash identifier:          mQmVPw4Hrv9vxZZmxkl1XprfaVJxy01XzVmvAF9lbjA=
Subject key identifier:   8B:C8:B2:A3:2B:02:0C:08:6D:AB:C7:28:78:4C:F1:13:87:61:65:79
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Certificate issuer:       /CN=ef75517b3161a047762413301614217679a82608
Certificate serial:       019DA3AF29CB8B0A8AD5A3E64601432D77D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
Manifest number:          07B4
Signing time:             Sun 19 Apr 2026 03:00:58 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:58 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:58 +0000
Files and hashes:         1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: +t9rCGC4kqUJmU263XhKtIQ+QFQN3dHhzpxXRcYHuaA=)
                          2: 9b1WVB4SRbPnLJ7MMROFIOe7IyI.roa (hash: o6KKd6GFzp4x33O4H64EWtykpwPkOuUVM1rFQ860o14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:af:29:cb:8b:0a:8a:d5:a3:e6:46:01:43:2d:77:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef75517b3161a047762413301614217679a82608
        Validity
            Not Before: Apr 19 03:00:58 2026 GMT
            Not After : Apr 20 03:00:58 2026 GMT
        Subject: CN=8bc8b2a32b020c086dabc728784cf11387616579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9f:50:85:79:e1:fb:ab:e1:b7:21:d4:fc:e3:
                    e6:41:01:9a:9e:09:5e:a3:89:9b:0a:a3:bf:c5:4e:
                    eb:0d:de:3d:0d:7a:e9:a7:7b:53:93:03:41:7b:44:
                    df:fa:31:f4:c5:87:8a:0b:3c:e6:04:fc:2f:bf:7c:
                    25:47:5f:6e:48:38:ed:c0:b3:0e:ca:50:b2:45:e7:
                    00:e8:f3:31:17:39:ea:af:21:ec:d9:13:d5:d2:80:
                    37:c9:e5:9d:07:82:a8:06:69:81:da:ed:45:de:00:
                    58:7a:9a:0f:8d:74:93:29:ff:79:92:54:f0:70:56:
                    4d:12:0e:d9:c9:72:63:5b:e9:da:e0:fc:6c:74:35:
                    43:d1:06:9b:44:79:de:04:ed:7f:de:08:25:ab:50:
                    76:91:05:f2:f8:20:10:43:b6:ff:f3:54:7d:92:d9:
                    79:3f:dc:a7:b9:06:06:bd:2c:5a:1f:ed:74:e4:1c:
                    78:76:65:38:ec:4c:80:ba:36:27:fb:ae:4c:ee:05:
                    33:d6:9b:93:9c:da:ba:92:39:75:c2:59:1b:05:1d:
                    0e:91:a8:d6:76:c5:04:bf:7e:76:a6:39:66:2f:7d:
                    b3:84:84:01:70:1e:6f:1c:6b:4f:6b:bc:41:2d:e7:
                    66:96:30:0c:ce:12:ad:bd:06:fe:22:ab:93:a5:9d:
                    8f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C8:B2:A3:2B:02:0C:08:6D:AB:C7:28:78:4C:F1:13:87:61:65:79
            X509v3 Authority Key Identifier:
                keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:69:67:38:4b:2a:72:df:b4:75:03:97:36:95:c8:7e:ee:3a:
         b3:73:0a:56:e0:b1:07:5b:1d:66:11:f0:d9:48:01:18:b1:c5:
         ca:7c:31:30:e0:61:f9:be:eb:60:82:c6:8e:8b:ed:4d:75:98:
         ef:ad:a6:94:97:8a:39:2b:c5:3f:82:56:27:72:82:bd:d6:18:
         9e:53:7e:01:f0:54:84:c0:56:8e:e6:28:85:8b:e5:58:4e:f1:
         ca:ab:69:4c:2c:1b:aa:35:17:af:46:89:6a:76:bf:7e:6b:d0:
         82:8a:33:88:a1:85:67:cb:bd:0e:6a:67:67:3f:86:47:9b:f3:
         43:91:2a:dd:91:fd:ab:f7:c7:1a:0d:01:d3:13:7c:fe:fc:3e:
         bd:0e:56:0d:39:3f:0a:61:9b:03:6d:b3:1a:bf:8b:8c:76:b8:
         da:82:e6:41:f5:d6:39:e0:56:65:66:31:ae:2c:b0:e9:ed:20:
         21:55:8c:6b:f1:8a:c9:aa:4d:25:b3:65:3e:a2:a8:53:db:97:
         54:a1:85:39:61:91:38:31:aa:ef:22:4e:c8:87:5c:d6:b7:e7:
         7c:de:91:92:97:c9:ed:4f:4c:92:15:38:34:ba:00:9b:af:1b:
         10:e5:84:4c:28:d3:37:df:a2:e9:96:1a:94:b2:e6:c7:57:7c:
         77:45:da:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:31:03 2026 by rpki-client