Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
File:                     73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json)
Hash identifier:          h29auMxl6ZCaPuNg89TCLSC+ckoihAyjlS4D9qs8fQw=
Subject key identifier:   D6:51:F7:25:02:2F:FE:32:68:06:8B:79:8E:10:45:D9:C9:46:27:A1
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Certificate issuer:       /CN=ef75517b3161a047762413301614217679a82608
Certificate serial:       01A0C520224DDE541D9B6E656BD013BB75C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
Manifest number:          0953
Signing time:             Mon 21 Sep 2026 18:00:12 +0000
Manifest this update:     Mon 21 Sep 2026 18:00:12 +0000
Manifest next update:     Tue 22 Sep 2026 18:00:12 +0000
Files and hashes:         1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: kwBK8iS7ApRRorZDtXhRJ8VB1PoGpl+OWdl8zu6Xz34=)
                          2: 9b1WVB4SRbPnLJ7MMROFIOe7IyI.roa (hash: o6KKd6GFzp4x33O4H64EWtykpwPkOuUVM1rFQ860o14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:20:22:4d:de:54:1d:9b:6e:65:6b:d0:13:bb:75:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef75517b3161a047762413301614217679a82608
        Validity
            Not Before: Sep 21 18:00:12 2026 GMT
            Not After : Sep 22 18:00:12 2026 GMT
        Subject: CN=d651f725022ffe3268068b798e1045d9c94627a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:37:e2:f6:04:9e:00:40:c5:df:78:72:80:a6:
                    94:39:1b:55:15:9f:53:f2:e2:7a:c8:8f:da:39:eb:
                    0b:23:29:ca:51:85:93:0c:6e:9a:00:98:ab:60:d6:
                    ae:64:f1:32:6b:b9:fb:06:01:6c:b8:0f:04:b1:5c:
                    60:82:56:16:90:5e:11:2d:9c:2b:44:67:dd:14:dc:
                    12:c3:d4:88:b7:06:e1:8e:43:91:c4:11:83:46:97:
                    26:06:7f:13:d2:82:07:0e:6b:c1:3d:78:4a:bc:38:
                    d8:89:c2:4d:96:83:57:0b:bb:01:a0:1a:4a:dc:cc:
                    a4:76:4a:8a:22:5b:b4:56:6d:a0:e1:12:2f:40:3d:
                    d2:03:e3:88:aa:e1:d4:c8:36:1f:d1:a9:ca:02:12:
                    21:f8:c0:fb:de:d8:35:95:d9:01:06:f2:58:56:04:
                    e0:58:26:a7:1b:39:af:70:65:38:7a:60:4f:24:f9:
                    3d:f1:03:10:51:ca:90:9c:15:06:ba:13:14:89:e2:
                    8e:38:2f:ca:8b:f3:16:ad:4d:b4:1c:d3:85:db:7b:
                    21:f2:dc:16:aa:83:8e:7c:58:eb:44:18:90:b0:3f:
                    df:8c:b7:c3:09:46:f8:3d:83:f0:65:d7:c7:93:27:
                    47:74:ed:e2:3d:a1:b2:77:8f:8f:0d:f3:36:d5:06:
                    3a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:51:F7:25:02:2F:FE:32:68:06:8B:79:8E:10:45:D9:C9:46:27:A1
            X509v3 Authority Key Identifier:
                keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:6b:24:df:98:c5:87:1f:21:af:92:5a:75:4b:60:da:d8:42:
         68:32:0a:78:9b:d2:37:5b:4e:bd:32:23:a9:bc:d8:5c:e6:d7:
         37:ba:4b:4d:60:b4:57:64:9b:bc:80:f9:58:53:32:21:f7:0c:
         40:61:03:dd:c1:3d:5d:54:d8:7e:24:1d:76:1c:68:8a:85:69:
         d5:0f:92:02:01:10:65:f6:7a:fb:10:e7:1e:2c:f3:cc:56:5c:
         f8:95:6b:bd:4b:02:fd:a8:62:46:52:a5:42:e2:ab:bd:9b:d3:
         57:bb:f4:1d:e2:a0:a4:23:48:3a:cb:8d:ce:b3:50:bd:65:70:
         b2:8e:ce:e3:a4:42:2a:01:24:3e:2e:3f:5a:0a:89:ee:bf:72:
         36:96:87:78:d4:1d:7d:d4:06:42:67:cb:ab:21:f0:5d:22:df:
         eb:cb:16:b8:a6:2d:1e:a4:f8:a3:4b:ee:7e:85:a4:61:0b:e3:
         93:2a:39:ea:9d:e3:7e:88:a4:ce:8e:9a:d4:b6:e1:9d:35:c6:
         79:53:76:b6:df:20:7f:25:c6:69:be:45:b2:ce:1b:fa:27:60:
         82:7f:71:d6:09:3d:a4:8c:d4:93:84:5e:66:ff:81:fd:3b:93:
         5d:1a:7f:d2:53:d6:c3:b9:de:01:50:e4:b7:e8:90:8c:16:92:
         da:71:36:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:53:39 2026 by rpki-client