Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
File:                     73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json)
Hash identifier:          e+pe0Mf5Xf0NYCu9oZZbKFolMY4SOq5TQcHRT4cpNRk=
Subject key identifier:   47:BB:4B:63:CA:93:EE:1D:72:EF:C3:94:25:E6:E2:9B:CB:36:83:08
Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
Certificate issuer:       /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Certificate serial:       019EBF5AFD142DE04A905C546F182D3E65C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
Manifest number:          111F
Signing time:             Sat 13 Jun 2026 05:01:11 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:11 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:11 +0000
Files and hashes:         1: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: QktJw38eSIW3HarIn4jphGLDRl/YacazHd+yrx6kwOY=)
                          2: SlpF7r7mXCWXhPzZBmODYnXQ2AQ.roa (hash: jMJC3ZxPYgXKuHU+fXZq1zQnba0EbcW6rqUVC+m4QQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:fd:14:2d:e0:4a:90:5c:54:6f:18:2d:3e:65:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
        Validity
            Not Before: Jun 13 05:01:11 2026 GMT
            Not After : Jun 14 05:01:11 2026 GMT
        Subject: CN=47bb4b63ca93ee1d72efc39425e6e29bcb368308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:0e:72:0d:f6:30:cb:f1:49:b2:0d:c7:45:
                    fd:c5:ee:a6:d1:f0:06:25:c7:42:bd:cf:b4:f2:f3:
                    ae:8f:44:9a:74:de:51:bd:2f:52:a1:35:9b:c4:6b:
                    d7:ac:61:8d:fb:d5:64:fb:63:9f:77:76:05:2e:7d:
                    5d:f4:72:97:0f:85:94:ea:0b:41:d0:f4:4f:90:68:
                    6e:91:09:ae:5a:32:eb:49:7f:32:61:42:5b:7c:ce:
                    e5:37:6e:16:93:b1:02:c8:c4:3f:89:b3:b5:64:9c:
                    2b:ed:41:7c:9b:ff:4c:79:01:8c:2b:fc:79:9b:1e:
                    4e:ef:e1:4a:a7:ac:b3:f4:c8:9d:7e:7f:0d:a4:be:
                    c0:02:6b:ca:90:55:8f:b2:62:1d:bc:39:af:b0:f1:
                    98:8e:d6:a7:d2:74:d9:75:26:39:c7:78:84:51:7c:
                    3c:bb:17:e7:47:81:b9:52:0b:6d:9f:11:db:e4:a1:
                    2d:f4:e5:21:65:1b:b8:04:1c:32:96:9e:32:04:0c:
                    92:21:83:69:8c:df:0f:0b:59:53:09:a5:8f:82:ab:
                    94:bf:28:b9:db:c8:65:86:44:11:f7:6d:b3:95:4e:
                    6d:c7:63:11:16:c6:f7:77:f2:bd:bb:de:a5:6d:81:
                    46:6e:73:e4:e9:89:2c:77:4f:bc:37:d1:40:d7:6c:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:BB:4B:63:CA:93:EE:1D:72:EF:C3:94:25:E6:E2:9B:CB:36:83:08
            X509v3 Authority Key Identifier:
                keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:a1:e9:3f:9c:92:6c:31:fe:7d:d6:e0:10:d9:a9:33:43:e0:
         bf:84:e9:ac:d6:de:61:78:0e:6d:77:df:72:c3:7e:f6:d6:8a:
         a9:00:af:e0:0f:e2:d8:43:41:3a:e2:4d:25:ac:c1:4c:10:81:
         1b:38:74:bb:d5:2c:17:15:f9:3c:39:48:d3:2d:95:50:8b:51:
         56:7b:86:23:71:43:3d:1a:13:8c:04:97:71:05:1a:4c:d0:e6:
         90:5e:86:7a:66:17:83:32:9d:79:7e:7f:83:5e:1b:22:0a:36:
         28:65:59:b3:94:c3:9e:0a:35:18:6a:89:6a:3e:cd:dc:bf:71:
         8c:bd:45:be:3a:9a:b9:de:f7:c5:97:92:f1:d4:ca:f0:97:71:
         b1:bb:25:6f:f1:c3:59:ac:44:9f:98:ae:72:61:64:0a:f7:89:
         26:a3:74:dd:dd:6b:e0:bc:fb:c9:04:09:32:30:5d:54:35:ed:
         21:ba:ff:7b:53:f0:de:3d:fc:14:5d:91:fd:01:46:42:e9:01:
         e0:12:07:4e:d6:0e:54:f7:84:83:be:95:7c:11:2e:c9:c7:5f:
         f9:b7:52:a8:5a:83:af:4e:97:cf:1f:19:ec:ce:de:05:73:ae:
         64:32:12:e4:3c:00:a4:01:cc:2d:18:03:0d:41:7e:a2:2a:c8:
         0c:4d:e1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:50 2026 by rpki-client