Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
File:                     78NgXDK7yF0jXwqc6PRfB5a3I8s.mft (raw, json)
Hash identifier:          m4rrvkZw8rGc6QGIScj90+LaR0c1Y7SAYTu1g3xrg/g=
Subject key identifier:   E9:51:7F:BF:59:4C:4C:5A:CE:7F:1C:E9:CF:55:0B:88:37:FA:88:02
Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
Certificate issuer:       /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Certificate serial:       01A0CF3662E8E548B13593F8E9BDE4B0792C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
Manifest number:          0DDD
Signing time:             Wed 23 Sep 2026 17:00:42 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:42 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:42 +0000
Files and hashes:         1: 78NgXDK7yF0jXwqc6PRfB5a3I8s.crl (hash: C2pm/pNXrv2sJz1E6myeiQvfo7XAKs3fb5oU2T8PNlU=)
                          2: U6lz5micbQvsEzEwVp3dL7mR1Os.roa (hash: NW13lN/avpR4aBD/HcMl0sRLodoqqzCepoA5qJR1XKA=)
                          3: WH8m0TMkVXBPbucXPDw6oUIRye4.roa (hash: IB0keQjNG9LRUVYhpn54n8Irz+pRxwCtrbopId4wJAg=)
                          4: t4MpcNa2tIl4W9G2LCTJWkEphB8.roa (hash: xbauCMbU4PS3RK6IhRtrAnQJjuwdmggI6BkwUnHhNwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:36:62:e8:e5:48:b1:35:93:f8:e9:bd:e4:b0:79:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
        Validity
            Not Before: Sep 23 17:00:42 2026 GMT
            Not After : Sep 24 17:00:42 2026 GMT
        Subject: CN=e9517fbf594c4c5ace7f1ce9cf550b8837fa8802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:a9:74:36:80:6a:58:35:1f:3b:d9:19:cf:
                    7f:e6:2f:f1:58:3e:e4:31:2b:fd:94:3f:4f:5d:9d:
                    aa:73:65:23:c2:ae:ef:84:f1:ef:39:d2:57:d6:b9:
                    f9:16:24:69:4e:37:81:81:fb:07:fa:4f:93:10:70:
                    a4:5c:3e:64:e6:4e:3c:84:72:98:40:e0:c8:eb:84:
                    6c:e4:bd:8f:20:29:5a:90:54:2c:85:60:7d:c5:16:
                    31:4a:39:29:29:77:94:df:15:fc:13:e8:ba:b2:1d:
                    66:a6:f2:10:67:e6:73:47:c5:aa:91:b8:7b:57:b7:
                    6f:c9:70:fd:6b:2d:d6:9c:7a:d1:c9:d0:b7:a7:1f:
                    86:e6:92:86:aa:a3:3a:f7:27:e6:dc:9f:9a:8d:60:
                    e0:72:2d:9d:8f:4a:0d:fe:0e:5a:fe:9e:b6:35:a6:
                    22:09:d5:80:a3:09:da:fa:cb:34:34:3a:27:84:6e:
                    c2:7e:92:27:38:73:12:fe:e5:2a:f5:9b:78:e8:79:
                    6e:00:0b:7b:44:8b:aa:12:17:4a:2f:0d:39:05:63:
                    d4:fc:42:4e:72:25:f3:52:cc:d5:4a:33:0a:24:6a:
                    9b:8f:68:53:e4:ad:f4:74:ed:54:61:7f:a5:83:8c:
                    d2:03:4e:6d:3d:f6:fa:97:4a:18:ae:0e:48:99:a8:
                    6a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:51:7F:BF:59:4C:4C:5A:CE:7F:1C:E9:CF:55:0B:88:37:FA:88:02
            X509v3 Authority Key Identifier:
                keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8c:dc:b7:87:ef:4c:1c:29:37:69:62:47:88:63:ad:51:e7:
         6e:89:48:b0:7e:62:63:50:ba:17:e7:a4:d6:57:a3:8b:32:33:
         a3:ae:19:b6:c7:53:da:13:3e:50:45:ba:26:75:4e:3e:5c:9a:
         18:24:a0:45:0c:ff:8a:67:a3:ea:83:87:0d:21:c5:aa:8c:68:
         63:e5:78:d3:b6:08:f6:39:b5:02:12:3c:91:70:c8:fc:a8:a9:
         cc:96:df:01:a5:c4:a2:f0:49:91:0c:04:cb:b7:cc:29:ae:8c:
         c1:27:70:49:d9:c5:9f:73:c2:7b:cd:1b:47:96:d7:a9:ef:51:
         35:73:2b:2a:60:f1:d8:2f:ea:0a:31:9e:af:2b:5b:1a:e5:8b:
         b7:56:a2:d4:c2:e4:8d:49:b6:8b:53:1a:03:2a:8f:f4:20:98:
         d0:5a:bc:0e:0c:87:f0:ff:5e:32:e0:9c:35:2a:06:4c:53:46:
         b6:b9:c2:22:f2:19:1a:b2:a0:38:bf:1c:1c:4e:c9:b1:c1:a8:
         a1:36:3f:45:af:8c:8a:5e:b6:88:34:de:8c:0e:b1:15:25:58:
         5b:a8:9c:6b:87:6d:bd:26:fa:e0:46:fb:8d:12:c3:77:b8:6f:
         68:97:34:c2:dc:41:94:24:21:b7:85:3b:50:8f:a4:d6:b3:e5:
         21:0b:5a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:23:38 2026 by rpki-client