Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft
File:                     74RV1AwuPbyyREb8yXoJ7Uut7cM.mft (raw, json)
Hash identifier:          PiPvDNE8k/WdS5JsVnE03QmL6koVlQ0rauVn/K8vpZY=
Subject key identifier:   3E:9F:44:8E:41:D8:F8:78:C2:65:09:E7:60:78:83:C5:11:61:40:18
Authority key identifier: EF:84:55:D4:0C:2E:3D:BC:B2:44:46:FC:C9:7A:09:ED:4B:AD:ED:C3
Certificate issuer:       /CN=ef8455d40c2e3dbcb24446fcc97a09ed4badedc3
Certificate serial:       019FA93DBD1E51FB15E2A3C61C004CD9AACA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft
Manifest number:          06DA
Signing time:             Tue 28 Jul 2026 15:00:23 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:23 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:23 +0000
Files and hashes:         1: 4K_3xmebXaIWZntxmO5UHmSiOZ4.roa (hash: 72+l83pi892CUObU5HxruL4klcaqhwa7zeHELCzl2wY=)
                          2: 74RV1AwuPbyyREb8yXoJ7Uut7cM.crl (hash: r6IALzUJsw8uJBjOvtbbZeHWLE9JRNpEgeKXPzQ0ewc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3d:bd:1e:51:fb:15:e2:a3:c6:1c:00:4c:d9:aa:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef8455d40c2e3dbcb24446fcc97a09ed4badedc3
        Validity
            Not Before: Jul 28 15:00:23 2026 GMT
            Not After : Jul 29 15:00:23 2026 GMT
        Subject: CN=3e9f448e41d8f878c26509e7607883c511614018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0f:f2:b0:d5:41:07:e6:23:b7:5d:69:06:b6:
                    64:10:ad:cc:30:90:0b:ce:7d:c4:43:7c:21:b2:f5:
                    fc:a6:eb:01:63:39:dd:59:05:e2:a9:ec:38:2f:bf:
                    38:cd:34:29:3a:9a:0a:93:34:ee:e4:08:64:b2:f6:
                    50:03:44:8b:9d:41:68:5a:ff:78:7e:c1:57:9f:c5:
                    d8:ec:7d:2a:52:cc:81:ee:69:fa:8f:99:a2:60:ab:
                    d4:e9:d1:9f:57:e7:60:22:25:6b:12:78:2e:ed:7e:
                    12:75:99:3b:7e:60:ef:d0:ee:32:d0:f1:7a:5c:8a:
                    60:cd:a1:cc:3b:5e:ef:f2:53:42:a0:5b:61:99:5d:
                    a1:c5:da:03:9c:b6:21:9e:ba:57:94:8d:7c:e9:22:
                    dc:4d:01:d7:1a:c7:28:9c:e3:fc:9d:85:f4:f8:00:
                    f3:5a:00:17:b3:c5:7e:bd:5a:d2:1d:c6:36:46:5a:
                    bc:62:7e:49:ae:52:89:f5:bc:1c:e0:4a:48:c7:57:
                    51:31:cc:e4:d6:1f:82:69:7a:d1:91:e8:69:d7:98:
                    dc:42:9c:5f:49:a9:11:f2:e9:ad:8c:66:42:36:91:
                    60:fb:b7:54:0e:71:26:f0:22:8d:82:ac:b4:83:63:
                    6d:c2:5b:ac:0c:88:18:e4:34:cb:66:25:82:ff:d5:
                    2e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9F:44:8E:41:D8:F8:78:C2:65:09:E7:60:78:83:C5:11:61:40:18
            X509v3 Authority Key Identifier:
                keyid:EF:84:55:D4:0C:2E:3D:BC:B2:44:46:FC:C9:7A:09:ED:4B:AD:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:3c:79:04:6a:52:30:3e:95:70:26:28:3f:22:95:de:6a:6b:
         01:99:42:94:28:5d:54:52:97:4a:0a:51:18:8f:f0:86:bb:2c:
         77:5e:b5:75:c7:14:93:e1:b4:2c:2b:91:8c:26:62:f0:e3:c5:
         9c:a9:d7:67:12:09:a5:87:16:68:75:98:e6:70:7c:3c:0f:d7:
         54:bf:de:0e:90:93:b8:3d:e9:67:67:b5:7d:b6:15:7c:be:51:
         31:fe:46:8c:03:60:7e:58:b4:08:60:52:3c:38:a3:f2:c0:be:
         16:bf:76:15:e2:c0:55:21:eb:37:39:b5:8c:e8:1e:06:ae:9e:
         63:cb:0b:a9:70:0d:f2:e3:44:a1:f6:fe:82:4a:23:2a:d4:70:
         b7:5d:fc:e9:5c:e5:a2:bb:50:43:9a:76:b4:02:3a:d4:16:90:
         e9:6c:86:02:47:e1:ec:10:aa:79:43:9c:49:0e:a9:81:b9:86:
         33:db:a5:12:6c:fe:e5:e4:f5:aa:bb:dc:f5:2a:87:53:9e:8f:
         43:0f:cc:21:b1:0f:5b:17:41:3c:9b:52:0a:89:6c:d6:2a:06:
         f5:5e:43:62:d3:44:f1:f1:ce:ed:29:6e:0f:9e:42:fe:49:0b:
         fa:d4:78:d0:cd:21:ee:c2:59:ff:ab:45:b7:9a:5f:b4:a6:a5:
         62:25:c3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:14 2026 by rpki-client