Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
File:                     76CXauJceI-r_CqFN4HV3_DKVg8.mft (raw, json)
Hash identifier:          Yp8+PlKID57K3WDhFInUg9ys+5Zm+AAZUCJWBZBLFlc=
Subject key identifier:   6D:CF:57:C8:78:F7:4A:50:F0:EF:85:D9:93:E7:4C:75:F3:F0:5B:68
Authority key identifier: EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
Certificate issuer:       /CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Certificate serial:       019FAA1A4008569E8B66E1EADB3BCB3C1DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
Manifest number:          1025
Signing time:             Tue 28 Jul 2026 19:01:14 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:14 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:14 +0000
Files and hashes:         1: 76CXauJceI-r_CqFN4HV3_DKVg8.crl (hash: VKzGlD5q2tMIAlRAhiPPn+ETsO95K2o0cjms2/twufc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:40:08:56:9e:8b:66:e1:ea:db:3b:cb:3c:1d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
        Validity
            Not Before: Jul 28 19:01:14 2026 GMT
            Not After : Jul 29 19:01:14 2026 GMT
        Subject: CN=6dcf57c878f74a50f0ef85d993e74c75f3f05b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:b1:d6:cf:63:11:53:ca:ae:ac:18:f4:f2:
                    0f:24:71:f1:ca:88:ef:c7:4d:45:40:d5:6a:4d:c0:
                    08:36:c7:90:b7:b2:b0:ff:20:6a:97:bf:28:a3:b1:
                    64:50:b8:90:bc:fb:5e:c8:37:75:df:2e:90:de:b1:
                    1b:52:99:27:0e:18:78:14:f4:04:08:06:62:e2:ec:
                    83:bd:9b:31:42:ea:85:9f:cf:1d:cc:c6:13:b3:5b:
                    87:0b:2d:92:32:3e:dd:19:6f:df:cc:f5:b8:82:af:
                    8e:dc:78:ef:0b:03:d2:d2:a2:20:c4:8c:5e:a3:e8:
                    2c:d6:b1:29:8b:b0:24:cd:a2:0b:67:09:5f:7f:ac:
                    d4:00:e6:4a:aa:52:91:42:d1:dd:e8:d1:7c:29:95:
                    da:71:31:01:a7:7a:34:7d:69:57:60:4b:70:e9:d3:
                    97:02:53:be:a3:4b:03:14:a3:d4:9f:14:2d:b9:b0:
                    04:45:03:34:18:c0:95:8c:d6:88:02:fe:58:03:27:
                    99:06:89:d2:7b:fe:2b:32:3d:38:43:cf:92:fa:0d:
                    08:30:e3:73:cd:9a:a8:5f:3e:cf:e6:2e:d4:35:66:
                    31:6c:2d:45:3f:77:d5:37:e9:d1:89:ab:06:c6:56:
                    63:1e:e7:f6:59:a5:54:25:95:cd:26:d7:cc:1a:b2:
                    92:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CF:57:C8:78:F7:4A:50:F0:EF:85:D9:93:E7:4C:75:F3:F0:5B:68
            X509v3 Authority Key Identifier:
                keyid:EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:cc:55:93:5b:3a:44:f3:31:77:dc:7f:62:fa:fc:2c:05:61:
         85:7c:3d:04:79:a1:20:72:1c:b0:42:44:35:6b:58:da:34:96:
         10:9e:04:c5:80:b9:dc:32:b1:45:86:98:12:e8:92:67:e4:7a:
         62:d4:8d:4c:bb:18:b9:fd:42:51:b9:cb:9b:5c:48:d8:e8:06:
         0c:28:24:8f:14:05:78:ad:74:67:a9:ef:6a:43:cd:b7:56:5e:
         25:06:e3:df:c5:a7:f8:ed:27:42:64:3f:fa:69:05:8e:77:e9:
         5c:bc:5b:e8:35:d0:33:ae:ba:96:a9:9d:ea:cd:f8:0b:8c:b9:
         f6:c3:1b:2c:8b:90:3c:be:1e:4c:39:7f:36:50:b0:87:f1:dc:
         d5:4d:9c:30:5d:1c:aa:ce:2c:d4:16:f8:41:d0:f9:1b:e8:67:
         cc:bc:3a:67:e2:bb:72:79:a2:fb:6d:a4:93:01:16:f8:56:58:
         7b:8f:17:bf:68:c9:df:c9:44:c2:d8:5c:b8:66:a7:06:68:19:
         bc:4f:ce:8c:0e:a8:c3:86:ca:78:4b:4c:57:df:f5:cf:a4:ac:
         34:69:81:3c:b3:bd:7f:4a:e9:b2:a5:4b:d6:2f:cb:58:b9:37:
         ed:c7:8f:ae:5a:6d:8e:b7:a8:9f:61:15:b1:c6:41:13:be:13:
         c9:03:4f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:53 2026 by rpki-client