Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft
File:                     74RV1AwuPbyyREb8yXoJ7Uut7cM.mft (raw, json)
Hash identifier:          ACEhjbOLcao0Bq6ReOnI+trCN/TVJRX294neeiVXuFA=
Subject key identifier:   77:6E:76:7C:D1:74:04:2A:21:25:58:A2:1E:87:2E:3A:1C:B4:27:1C
Authority key identifier: EF:84:55:D4:0C:2E:3D:BC:B2:44:46:FC:C9:7A:09:ED:4B:AD:ED:C3
Certificate issuer:       /CN=ef8455d40c2e3dbcb24446fcc97a09ed4badedc3
Certificate serial:       019D9A0713B70709FFEB3834AB7F35599CBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft
Manifest number:          05C9
Signing time:             Fri 17 Apr 2026 06:00:48 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:48 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:48 +0000
Files and hashes:         1: 4K_3xmebXaIWZntxmO5UHmSiOZ4.roa (hash: 72+l83pi892CUObU5HxruL4klcaqhwa7zeHELCzl2wY=)
                          2: 74RV1AwuPbyyREb8yXoJ7Uut7cM.crl (hash: dUZxcaduZvxrd47gFufN4VodMSt+KpZ0IlT9qaarUec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:13:b7:07:09:ff:eb:38:34:ab:7f:35:59:9c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef8455d40c2e3dbcb24446fcc97a09ed4badedc3
        Validity
            Not Before: Apr 17 06:00:48 2026 GMT
            Not After : Apr 18 06:00:48 2026 GMT
        Subject: CN=776e767cd174042a212558a21e872e3a1cb4271c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0f:30:1b:81:14:74:4e:ca:93:0b:bd:02:8a:
                    1b:9c:2c:81:2c:d7:9a:3e:1e:58:03:ef:4a:03:94:
                    59:bf:0c:8b:04:60:48:54:50:54:d4:d9:aa:f2:54:
                    6b:f4:08:ba:48:d9:ef:74:98:d9:2c:1e:ae:ad:43:
                    76:5e:e3:d7:48:55:67:f9:a0:1d:81:84:1f:f2:16:
                    c8:59:c4:9f:31:ec:48:27:d3:6e:a8:b9:b4:a8:fb:
                    29:bf:90:44:31:de:cc:08:75:85:44:24:cd:c5:a8:
                    43:b1:30:93:08:b9:56:e4:54:75:ae:f9:cf:ad:ee:
                    c6:66:4f:7a:bf:81:25:7d:da:18:89:23:dd:80:27:
                    ca:e9:80:46:25:2a:c1:db:8f:a6:1c:62:53:d3:d0:
                    f5:4e:1d:f4:a6:d1:ec:25:5f:5a:19:2e:80:a3:cb:
                    6e:5f:b0:1e:f6:80:eb:63:19:82:d2:1f:eb:c2:ab:
                    12:c5:64:bd:f7:87:9b:04:3d:2f:e4:62:3b:b6:a1:
                    6b:40:3b:a7:28:83:ed:f2:07:1c:8e:5c:39:e0:87:
                    ba:ea:2c:1e:a8:2a:7e:a0:f8:78:ad:4d:9e:dd:4e:
                    e0:34:8c:25:cf:ef:47:86:5f:c9:ef:19:70:d6:d7:
                    37:1c:5b:e5:d6:cf:c1:22:cc:5f:d4:19:f5:17:68:
                    7c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6E:76:7C:D1:74:04:2A:21:25:58:A2:1E:87:2E:3A:1C:B4:27:1C
            X509v3 Authority Key Identifier:
                keyid:EF:84:55:D4:0C:2E:3D:BC:B2:44:46:FC:C9:7A:09:ED:4B:AD:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:bb:f2:6b:f7:7f:66:23:44:c8:ec:a3:44:90:db:d1:13:f8:
         18:3d:a8:ea:3b:ca:ce:b3:1e:7d:7d:fc:0e:43:ea:50:c0:6a:
         86:ad:78:8e:54:50:0d:62:02:e7:8b:50:ac:9f:da:f3:14:7d:
         ed:8a:e3:8e:3d:71:f5:af:92:98:0e:6a:e5:38:d8:f9:a6:17:
         a5:c0:7a:49:ba:eb:f1:bf:5c:2c:de:16:ce:b0:af:98:27:e3:
         82:44:84:fc:18:5b:a6:4c:ef:51:94:c7:d2:d8:fa:4d:90:f0:
         98:19:7e:f2:07:d9:05:5d:af:cb:9c:bb:43:13:60:6e:a7:d6:
         8c:bb:22:a2:67:44:99:bd:49:0c:a1:dc:5d:48:01:bc:a5:64:
         a4:a8:2c:d6:ae:c4:9e:0f:5f:14:b1:bc:53:2c:e9:36:e4:4e:
         90:08:7d:29:11:07:5a:21:6b:d1:0a:db:ff:cd:d1:c5:16:2c:
         0a:c7:fd:ce:19:e5:33:8b:e4:a9:bd:80:d2:8d:49:c9:27:a6:
         33:3b:16:21:75:e7:94:41:25:13:57:f8:63:91:ae:4f:05:5a:
         12:b7:d6:cf:90:09:b1:77:b9:eb:a3:a2:3c:87:67:3b:21:f0:
         47:b8:75:52:9f:09:f5:9f:59:87:96:f8:13:d8:87:a8:f1:85:
         dc:5b:34:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:29 2026 by rpki-client