Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
File:                     78NgXDK7yF0jXwqc6PRfB5a3I8s.mft (raw, json)
Hash identifier:          s2f67JQGAKSIGmb/p6+Lk8mfE9mX7zPRrMF8kOndx2s=
Subject key identifier:   87:F6:8C:D0:5C:7D:22:98:70:B7:82:6E:33:B0:64:0E:07:73:7C:B7
Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
Certificate issuer:       /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Certificate serial:       019E1DC798A729D1DC887BFB7A8461EFFE32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
Manifest number:          0C78
Signing time:             Tue 12 May 2026 20:01:20 +0000
Manifest this update:     Tue 12 May 2026 20:01:20 +0000
Manifest next update:     Wed 13 May 2026 20:01:20 +0000
Files and hashes:         1: 78NgXDK7yF0jXwqc6PRfB5a3I8s.crl (hash: lazdjuYoUKEBHunVhKRP/q+7TvaaNmV+Lbfhhbyz050=)
                          2: U6lz5micbQvsEzEwVp3dL7mR1Os.roa (hash: NW13lN/avpR4aBD/HcMl0sRLodoqqzCepoA5qJR1XKA=)
                          3: WH8m0TMkVXBPbucXPDw6oUIRye4.roa (hash: IB0keQjNG9LRUVYhpn54n8Irz+pRxwCtrbopId4wJAg=)
                          4: t4MpcNa2tIl4W9G2LCTJWkEphB8.roa (hash: xbauCMbU4PS3RK6IhRtrAnQJjuwdmggI6BkwUnHhNwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:98:a7:29:d1:dc:88:7b:fb:7a:84:61:ef:fe:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
        Validity
            Not Before: May 12 20:01:20 2026 GMT
            Not After : May 13 20:01:20 2026 GMT
        Subject: CN=87f68cd05c7d229870b7826e33b0640e07737cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:23:d9:94:f8:63:c2:4c:de:b8:ab:71:63:
                    78:a8:d1:0b:c3:1b:9e:1a:cb:f3:d5:2a:e7:82:78:
                    16:e9:65:a9:04:89:0f:f3:82:70:7c:f9:d7:af:6e:
                    74:84:04:a3:69:e0:21:52:a8:1f:64:ed:7f:20:b0:
                    a3:47:6c:06:d2:72:23:16:10:43:f2:be:8d:22:b8:
                    68:7e:53:4b:1b:d3:1c:90:d6:17:fa:df:cb:e1:22:
                    29:1d:48:04:c6:59:fc:15:34:98:ab:a0:9d:72:66:
                    b0:53:3a:42:2d:a2:9e:70:b4:53:86:ea:f4:1e:2d:
                    ce:2a:21:1e:15:98:34:4e:6c:68:0b:d8:31:20:91:
                    5c:81:30:93:fc:95:8f:af:d5:28:c5:a4:ac:15:d4:
                    75:4f:c8:97:26:2e:7a:ee:ef:77:f4:64:ba:7f:7c:
                    96:04:08:f7:5e:fd:71:ba:7a:60:aa:fc:05:9a:53:
                    7c:55:5a:3b:df:9a:13:5e:0f:66:9f:92:dd:cb:6b:
                    3a:80:2e:2f:2f:49:e8:6e:1e:86:75:a8:b0:3f:f7:
                    2b:b4:ee:6f:be:15:d4:ef:da:82:81:09:2c:62:75:
                    7f:c7:8e:5a:24:f8:b4:f6:02:52:ed:52:6d:2c:c9:
                    14:c0:9d:80:84:13:56:e9:a7:30:dc:e3:78:53:de:
                    15:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F6:8C:D0:5C:7D:22:98:70:B7:82:6E:33:B0:64:0E:07:73:7C:B7
            X509v3 Authority Key Identifier:
                keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:51:b1:cd:c9:8f:43:99:52:1a:ee:44:5c:c3:7c:e9:e9:92:
         2d:a1:17:f5:66:9f:bd:f8:fc:e5:a8:19:d5:1b:fa:d8:31:b5:
         15:d3:75:56:31:6c:2b:cf:27:0f:a1:e3:54:34:7d:8b:8d:89:
         80:d1:60:1a:64:27:3a:25:e2:b3:e4:b1:9f:43:a5:8d:34:79:
         14:aa:cb:55:69:e0:3b:ec:98:13:c8:97:12:ec:a2:6b:5b:fc:
         0c:5f:a8:f8:e8:ee:b1:4b:e9:93:96:31:5a:e0:11:f7:22:4e:
         51:a5:5c:03:8c:df:1e:8a:f5:ae:2b:51:ea:e0:0a:4e:1e:6a:
         7b:9d:31:9c:92:56:c5:3b:48:18:8a:c1:93:7d:ed:3f:29:76:
         8a:93:df:1c:9c:7f:08:a3:ca:d6:4a:5a:8e:bd:9a:47:a9:f3:
         22:e0:6d:d3:2e:4e:8e:ed:6d:4f:2c:02:39:74:3a:a1:8a:3f:
         e5:8a:f8:31:08:ac:f9:a7:72:9d:00:0b:7b:2a:39:09:49:2c:
         40:64:ee:dc:78:84:86:22:53:55:25:ef:e3:6e:e9:d2:d7:90:
         7a:36:17:58:bf:8c:9a:28:34:4e:87:52:c1:ef:9c:bc:b5:fc:
         56:82:84:05:bc:b2:53:27:87:76:07:95:e7:67:9d:50:1c:28:
         5d:67:a8:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dx5inKdHciHv7eoRh7/4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYzM2MDVjMzJiYmM4NWQyMzVmMGE5Y2U4ZjQ1ZjA3OTZi
NzIzY2IwHhcNMjYwNTEyMjAwMTIwWhcNMjYwNTEzMjAwMTIwWjAzMTEwLwYDVQQD
Eyg4N2Y2OGNkMDVjN2QyMjk4NzBiNzgyNmUzM2IwNjQwZTA3NzM3Y2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAcj2ZT4Y8JM3rircWN4qNELwxue
Gsvz1SrngngW6WWpBIkP84JwfPnXr250hASjaeAhUqgfZO1/ILCjR2wG0nIjFhBD
8r6NIrhoflNLG9MckNYX+t/L4SIpHUgExln8FTSYq6CdcmawUzpCLaKecLRThur0
Hi3OKiEeFZg0TmxoC9gxIJFcgTCT/JWPr9UoxaSsFdR1T8iXJi567u939GS6f3yW
BAj3Xv1xunpgqvwFmlN8VVo735oTXg9mn5Ldy2s6gC4vL0nobh6GdaiwP/crtO5v
vhXU79qCgQksYnV/x45aJPi09gJS7VJtLMkUwJ2AhBNW6acw3ON4U94VZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIf2jNBcfSKYcLeCbjOwZA4Hc3y3MB8GA1UdIwQY
MBaAFO/DYFwyu8hdI18KnOj0XweWtyPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzhOZ1hESzd5RjBqWHdxYzZQUmZCNWEzSThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lNjIxNjktNDg2ZC00MDU0LWIxMjEt
ZjJjOGJhMDIxY2E4LzEvNzhOZ1hESzd5RjBqWHdxYzZQUmZCNWEzSThzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9lNjIxNjktNDg2ZC00MDU0LWIxMjEtZjJjOGJhMDIxY2E4
LzEvNzhOZ1hESzd5RjBqWHdxYzZQUmZCNWEzSThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAslGxzcmP
Q5lSGu5EXMN86emSLaEX9Wafvfj85agZ1Rv62DG1FdN1VjFsK88nD6HjVDR9i42J
gNFgGmQnOiXis+Sxn0OljTR5FKrLVWngO+yYE8iXEuyia1v8DF+o+OjusUvpk5Yx
WuAR9yJOUaVcA4zfHor1ritR6uAKTh5qe50xnJJWxTtIGIrBk33tPyl2ipPfHJx/
CKPK1kpajr2aR6nzIuBt0y5Oju1tTywCOXQ6oYo/5Yr4MQis+adynQALeyo5CUks
QGTu3HiEhiJTVSXv427p0teQejYXWL+Mmig0TodSwe+cvLX8VoKEBbyyUyeHdgeV
52edUBwoXWeofw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:28:08 2026 by rpki-client