Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
File:                     73i8lpqDBzNu9ARPPf7x_hNjgrM.mft (raw, json)
Hash identifier:          gKQjkBdj+kS4sQGXAA2ejX2IYTlfe/ac7clU5O2GQC8=
Subject key identifier:   63:1B:CD:9A:EE:6B:FE:38:91:96:59:E6:E3:1A:26:B8:D3:6A:CC:15
Authority key identifier: EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
Certificate issuer:       /CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Certificate serial:       01A0C745B7E10D35EF12CC865BCC413E1899
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
Manifest number:          102F
Signing time:             Tue 22 Sep 2026 04:00:30 +0000
Manifest this update:     Tue 22 Sep 2026 04:00:30 +0000
Manifest next update:     Wed 23 Sep 2026 04:00:30 +0000
Files and hashes:         1: 73i8lpqDBzNu9ARPPf7x_hNjgrM.crl (hash: +IhGkJ6kXaLry51ugRvp4ZyKmUTIeuzuCveloxSg9MA=)
                          2: tX9OyoBEYMF2XV4dez69hRjVkN4.roa (hash: jRKxFIJbG2B0T0vVXLe06uc5pOJoGJLwsVGTSpeMt0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 04:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:45:b7:e1:0d:35:ef:12:cc:86:5b:cc:41:3e:18:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
        Validity
            Not Before: Sep 22 04:00:30 2026 GMT
            Not After : Sep 23 04:00:30 2026 GMT
        Subject: CN=631bcd9aee6bfe38919659e6e31a26b8d36acc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:87:f3:d7:8d:a0:d8:c7:62:96:15:48:d8:
                    64:8d:1e:d5:ca:37:11:2f:d7:bc:b9:56:25:b2:f4:
                    ad:fd:d7:72:50:ec:b2:4b:99:40:e6:ad:d9:04:bb:
                    a6:b3:d1:33:ff:97:22:4a:da:73:81:cc:e2:2b:d4:
                    51:34:43:60:d1:27:69:7b:5a:27:dd:7b:10:ff:a1:
                    a8:b4:ca:28:77:0e:4f:e1:a9:d7:df:de:0a:ed:6a:
                    23:f3:f8:ad:bf:e8:62:74:86:c7:8f:4d:33:3d:28:
                    e1:53:13:d6:af:8a:d6:b0:68:33:6c:7c:91:f0:64:
                    e5:c7:ed:a0:92:19:ed:2a:52:91:dd:05:0f:f3:97:
                    53:ab:c4:1d:b5:08:e0:d6:08:35:95:69:93:36:91:
                    ea:cf:24:e0:94:04:34:c4:aa:a1:ce:d3:eb:71:cf:
                    65:32:0c:ed:76:9b:49:41:2c:1a:8b:3d:d1:e1:0f:
                    10:a5:9d:f9:01:99:79:be:ac:bf:65:02:81:b5:ab:
                    ce:5e:af:44:57:24:5c:a2:f8:fd:24:4d:a5:70:ee:
                    da:f3:04:12:15:6e:94:14:1b:33:5d:46:25:f0:81:
                    a7:d0:2c:bf:b1:b8:82:b1:3e:82:9b:ef:ed:22:3d:
                    d5:8f:34:e0:c6:b4:22:b8:48:2b:ef:65:04:14:6f:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1B:CD:9A:EE:6B:FE:38:91:96:59:E6:E3:1A:26:B8:D3:6A:CC:15
            X509v3 Authority Key Identifier:
                keyid:EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:40:8d:5b:ca:05:1a:1a:2b:9e:d5:1a:d3:d7:d1:45:5d:dc:
         bf:a3:42:23:73:d3:39:97:86:01:8a:b3:c8:58:f2:d6:87:fe:
         d9:73:a0:21:97:09:ed:ee:14:af:f9:ee:47:94:fa:ef:66:f3:
         ef:3b:b9:4b:21:88:48:2a:71:75:11:a1:6d:9d:a1:32:d0:f4:
         fa:91:33:dc:c2:06:12:f3:89:f6:dc:73:a8:39:e0:25:75:f5:
         59:17:32:e6:35:ae:2b:11:fb:1c:c2:e0:96:40:b0:3c:54:ff:
         c6:b5:0e:5c:4b:23:87:a2:a4:eb:f6:2b:e7:a2:9b:d6:ef:c1:
         ad:26:ab:4d:5f:58:a5:1a:b2:75:11:da:3f:8a:42:24:ed:1d:
         c6:28:7c:a0:63:c8:68:48:93:15:8a:60:79:73:fc:f3:89:25:
         bd:dd:7e:4d:b0:28:c0:45:99:42:00:3b:f6:4c:85:66:a8:09:
         0f:c7:8b:f3:0e:bb:fa:0d:65:fc:22:34:10:51:ec:1c:de:2c:
         fe:74:80:93:63:2c:9d:e8:25:4b:6d:c0:b2:89:e5:6c:68:71:
         99:16:ba:b9:4d:9e:d6:fb:6c:df:b3:3c:f2:74:27:84:67:b0:
         62:a7:68:16:20:98:19:99:c6:9f:e2:87:42:bd:65:56:70:b9:
         ca:03:1b:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRbfhDTXvEsyGW8xBPhiZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNzhiYzk2OWE4MzA3MzM2ZWY0MDQ0ZjNkZmVmMWZlMTM2
MzgyYjMwHhcNMjYwOTIyMDQwMDMwWhcNMjYwOTIzMDQwMDMwWjAzMTEwLwYDVQQD
Eyg2MzFiY2Q5YWVlNmJmZTM4OTE5NjU5ZTZlMzFhMjZiOGQzNmFjYzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGKH89eNoNjHYpYVSNhkjR7VyjcR
L9e8uVYlsvSt/ddyUOyyS5lA5q3ZBLums9Ez/5ciStpzgcziK9RRNENg0Sdpe1on
3XsQ/6GotMoodw5P4anX394K7Woj8/itv+hidIbHj00zPSjhUxPWr4rWsGgzbHyR
8GTlx+2gkhntKlKR3QUP85dTq8QdtQjg1gg1lWmTNpHqzyTglAQ0xKqhztPrcc9l
MgztdptJQSwaiz3R4Q8QpZ35AZl5vqy/ZQKBtavOXq9EVyRcovj9JE2lcO7a8wQS
FW6UFBszXUYl8IGn0Cy/sbiCsT6Cm+/tIj3VjzTgxrQiuEgr72UEFG8S4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMbzZrua/44kZZZ5uMaJrjTaswVMB8GA1UdIwQY
MBaAFO94vJaagwczbvQETz3+8f4TY4KzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzNpOGxwcURCek51OUFSUFBmN3hfaE5qZ3JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lNGJkNmEtYWRhZi00OGM4LWI5OTkt
NTM1NzBhMWFiZDA0LzEvNzNpOGxwcURCek51OUFSUFBmN3hfaE5qZ3JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lNGJkNmEtYWRhZi00OGM4LWI5OTktNTM1NzBhMWFiZDA0
LzEvNzNpOGxwcURCek51OUFSUFBmN3hfaE5qZ3JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkCNW8oF
GhorntUa09fRRV3cv6NCI3PTOZeGAYqzyFjy1of+2XOgIZcJ7e4Ur/nuR5T672bz
7zu5SyGISCpxdRGhbZ2hMtD0+pEz3MIGEvOJ9txzqDngJXX1WRcy5jWuKxH7HMLg
lkCwPFT/xrUOXEsjh6Kk6/Yr56Kb1u/BrSarTV9YpRqydRHaP4pCJO0dxih8oGPI
aEiTFYpgeXP884klvd1+TbAowEWZQgA79kyFZqgJD8eL8w67+g1l/CI0EFHsHN4s
/nSAk2MsneglS23AsonlbGhxmRa6uU2e1vts37M88nQnhGewYqdoFiCYGZnGn+KH
Qr1lVnC5ygMbtw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:34:48 2026 by rpki-client