Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
File:                     76CXauJceI-r_CqFN4HV3_DKVg8.mft (raw, json)
Hash identifier:          nzRKt1+Krag8EcaMf6SFqdc5ysvP9NwMYB+mReNqTx0=
Subject key identifier:   52:E9:AD:BF:AB:30:DB:13:E3:62:F0:83:88:05:6B:33:36:6E:B3:FA
Authority key identifier: EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F
Certificate issuer:       /CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
Certificate serial:       01A0C5FC656ED1A5FDCF1DA93ADDED7BF825
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
Manifest number:          10B8
Signing time:             Mon 21 Sep 2026 22:00:47 +0000
Manifest this update:     Mon 21 Sep 2026 22:00:47 +0000
Manifest next update:     Tue 22 Sep 2026 22:00:47 +0000
Files and hashes:         1: 76CXauJceI-r_CqFN4HV3_DKVg8.crl (hash: tZhReBRLD0JiYKjN0cxVpCbLg/Ybax7E2Ijhk75UdSU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:fc:65:6e:d1:a5:fd:cf:1d:a9:3a:dd:ed:7b:f8:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa0976ae25c788fabfc2a853781d5dff0ca560f
        Validity
            Not Before: Sep 21 22:00:47 2026 GMT
            Not After : Sep 22 22:00:47 2026 GMT
        Subject: CN=52e9adbfab30db13e362f08388056b33366eb3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:99:01:f9:f7:f8:93:20:16:f6:29:2b:19:47:
                    37:82:ae:33:6c:ee:41:ef:d6:b3:a4:dc:19:e7:25:
                    2e:8b:1b:98:e7:cb:2b:6d:88:27:c6:95:05:84:ae:
                    c4:8c:e8:0c:a6:a5:10:05:e9:70:52:9f:c9:5f:dc:
                    94:3f:f9:75:cb:15:1d:92:3f:4a:77:b4:cd:ed:0b:
                    1b:eb:5b:c6:52:47:58:cc:c7:ab:0c:c4:ee:0b:a8:
                    d5:e6:83:74:26:01:41:f3:00:58:18:cb:52:5b:79:
                    32:7b:06:09:29:70:e3:58:53:c4:bb:6b:15:90:b0:
                    a8:73:9a:44:2f:29:55:12:f6:ac:89:df:1d:7b:9d:
                    ae:cb:1f:01:d3:2d:68:18:6e:a0:93:48:74:ef:db:
                    5c:1a:21:ec:c8:81:6a:35:43:cc:87:64:5f:de:32:
                    50:12:7e:65:78:3a:60:39:a6:e1:46:e3:07:ec:24:
                    36:5f:b6:35:46:53:18:17:0e:69:9b:bf:8c:b5:3f:
                    f3:2d:49:bf:b2:e8:8b:5e:33:03:3f:7d:8a:0d:32:
                    5b:b4:0c:a1:7c:71:ad:74:8f:fa:d9:54:10:65:68:
                    42:4e:81:86:31:47:a3:ed:c3:a8:bf:06:66:03:f1:
                    07:7b:aa:2b:7e:b6:c4:05:2c:47:2c:4e:6e:b0:c4:
                    31:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E9:AD:BF:AB:30:DB:13:E3:62:F0:83:88:05:6B:33:36:6E:B3:FA
            X509v3 Authority Key Identifier:
                keyid:EF:A0:97:6A:E2:5C:78:8F:AB:FC:2A:85:37:81:D5:DF:F0:CA:56:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76CXauJceI-r_CqFN4HV3_DKVg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b0467b-d166-4e7b-af5c-d1654975c3bc/1/76CXauJceI-r_CqFN4HV3_DKVg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:9f:db:ac:f6:ce:8d:4c:d8:25:6d:7e:ae:d4:03:37:8c:ca:
         12:02:bd:7e:a9:fd:bb:d9:54:73:d3:56:fe:6b:24:95:65:cc:
         28:05:7f:bf:e9:47:6a:70:e6:82:12:8c:ec:be:bc:26:cd:18:
         fc:51:85:95:29:ac:e9:9b:3a:21:97:13:f3:27:15:df:0b:60:
         08:2f:d5:5f:c9:cf:75:26:86:16:9b:27:b9:3d:a4:a9:c9:be:
         3e:37:f2:07:c7:69:ac:a3:98:b3:69:0c:e1:b9:73:28:dc:4f:
         3b:4a:c8:c0:60:c0:c6:22:22:ad:6f:f1:19:6b:13:f5:d1:ca:
         91:3b:c6:2c:dd:ca:4d:b7:c7:9e:99:13:1b:fe:17:9e:70:a6:
         0b:66:c3:e0:9d:b5:c1:fe:e5:ba:cd:6a:e6:c0:98:87:7f:15:
         10:3f:6b:c2:0c:fd:8b:04:cd:17:fc:bf:84:98:e8:83:24:a8:
         92:a5:94:14:37:2d:f1:f7:75:89:f3:43:19:63:e8:76:32:25:
         ba:45:b7:c1:12:26:74:11:1f:cc:2f:cb:43:67:17:b7:57:48:
         df:8f:2d:bf:c0:a8:0a:41:65:c7:e1:59:aa:9a:55:c2:1e:23:
         29:cd:e6:41:ca:b3:96:9f:94:e5:10:3b:1b:83:d9:70:96:72:
         f4:1a:de:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:49:06 2026 by rpki-client