Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/139d97-5068-4143-b94e-58b246de5b33/1/78Xbv2Q-C4qlG0N8qu9wD94sV1k.mft
File:                     78Xbv2Q-C4qlG0N8qu9wD94sV1k.mft (raw, json)
Hash identifier:          OTV0lCRimGelqzF8mEWEoSDp8TOjubKxbq+STqOl0po=
Subject key identifier:   E4:4C:69:E4:26:99:80:ED:D4:3B:8B:88:B3:7E:B9:5A:74:B7:0C:0E
Authority key identifier: EF:C5:DB:BF:64:3E:0B:8A:A5:1B:43:7C:AA:EF:70:0F:DE:2C:57:59
Certificate issuer:       /CN=efc5dbbf643e0b8aa51b437caaef700fde2c5759
Certificate serial:       01A0D0ED972F45E6E525E7BE0AF73BE6DC55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/78Xbv2Q-C4qlG0N8qu9wD94sV1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/139d97-5068-4143-b94e-58b246de5b33/1/78Xbv2Q-C4qlG0N8qu9wD94sV1k.mft
Manifest number:          0206
Signing time:             Thu 24 Sep 2026 01:00:26 +0000
Manifest this update:     Thu 24 Sep 2026 01:00:26 +0000
Manifest next update:     Fri 25 Sep 2026 01:00:26 +0000
Files and hashes:         1: 5fz1zKYJK1UTJkPiRCb-jDr6mSk.asa (hash: 44T26rsoEycmXc15VpmD9Up9fj9Nmv9b3qSTrcMSSmg=)
                          2: 78Xbv2Q-C4qlG0N8qu9wD94sV1k.crl (hash: KHrgEALEh1sQ07/GbCTweVhZL2cCqg75ENN6TRlUSX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/139d97-5068-4143-b94e-58b246de5b33/1/78Xbv2Q-C4qlG0N8qu9wD94sV1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/139d97-5068-4143-b94e-58b246de5b33/1/78Xbv2Q-C4qlG0N8qu9wD94sV1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/78Xbv2Q-C4qlG0N8qu9wD94sV1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ed:97:2f:45:e6:e5:25:e7:be:0a:f7:3b:e6:dc:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc5dbbf643e0b8aa51b437caaef700fde2c5759
        Validity
            Not Before: Sep 24 01:00:26 2026 GMT
            Not After : Sep 25 01:00:26 2026 GMT
        Subject: CN=e44c69e4269980edd43b8b88b37eb95a74b70c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:de:01:cc:83:80:ad:d2:7c:33:55:0a:33:
                    49:d3:85:b2:d4:6c:cc:37:64:8e:58:c7:f0:d2:22:
                    4c:8b:f2:ea:ea:a8:d6:03:60:04:bd:82:8f:a3:26:
                    f4:24:fd:8d:77:fa:ea:54:b5:90:4b:8d:71:f6:30:
                    be:b5:eb:e3:9a:d8:36:b4:11:1e:1a:b6:d6:13:15:
                    87:4f:2c:4b:09:ab:b5:4b:64:3f:ff:47:22:78:b3:
                    1a:75:28:26:40:5b:51:83:91:a8:48:13:99:34:09:
                    1e:d9:f8:5a:fc:76:13:f7:22:72:88:b9:fc:db:cb:
                    09:bf:50:8d:26:b7:56:5c:d4:26:17:64:4b:9e:10:
                    ec:88:a3:96:28:07:98:0e:f2:68:ab:ec:3d:e0:cd:
                    c7:66:c3:b8:99:78:bb:3d:bc:01:61:9d:bd:bc:14:
                    ca:9f:38:90:fa:70:c7:2f:ab:b6:4d:39:c6:a5:71:
                    4e:5d:95:39:db:3b:bc:67:eb:74:44:64:f2:dc:a4:
                    aa:41:81:9d:f5:ca:de:3f:ef:96:49:95:63:1a:82:
                    31:b7:9c:61:0e:75:75:1b:13:1e:d7:8d:ab:78:9f:
                    52:05:70:d9:03:56:05:9c:d7:29:b2:a3:d1:9c:fc:
                    0e:78:ca:dd:de:f7:28:87:2f:eb:db:39:87:ea:e1:
                    cb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4C:69:E4:26:99:80:ED:D4:3B:8B:88:B3:7E:B9:5A:74:B7:0C:0E
            X509v3 Authority Key Identifier:
                keyid:EF:C5:DB:BF:64:3E:0B:8A:A5:1B:43:7C:AA:EF:70:0F:DE:2C:57:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78Xbv2Q-C4qlG0N8qu9wD94sV1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/139d97-5068-4143-b94e-58b246de5b33/1/78Xbv2Q-C4qlG0N8qu9wD94sV1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/139d97-5068-4143-b94e-58b246de5b33/1/78Xbv2Q-C4qlG0N8qu9wD94sV1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c2:fb:76:4b:63:22:45:fa:53:29:92:f0:ff:75:98:12:94:
         ec:80:bf:71:8a:75:00:6b:b9:b5:da:77:46:45:58:bf:fb:82:
         d2:ed:c8:82:02:f5:c1:4f:7c:25:15:c0:04:02:45:88:73:eb:
         c7:52:ea:00:71:d5:0a:da:49:d1:e3:a3:da:6a:4c:40:eb:f5:
         d5:68:85:53:2b:3f:69:c8:18:17:2f:34:dd:f2:cf:07:2d:e8:
         ec:e8:11:ac:da:47:9a:78:b8:3b:45:87:fe:75:3e:ed:ea:a2:
         dc:33:38:ef:0d:11:96:1a:b7:8b:56:81:05:db:9c:fe:19:1d:
         4a:eb:40:b9:86:ff:b0:82:05:94:6b:d7:af:aa:27:f7:85:9f:
         98:43:90:7d:b0:5e:9a:c9:a4:b4:34:4f:b1:ab:bf:4b:df:76:
         04:b0:6e:96:f1:81:d9:21:9b:26:6d:5b:5a:53:7b:70:6f:6f:
         2c:7a:24:00:35:c4:62:76:d7:b9:c2:df:eb:cc:d4:f0:c6:8e:
         8b:12:b1:00:2c:08:f6:b3:cb:24:7a:80:3c:d4:de:1b:fe:10:
         68:9a:4f:21:d4:3c:03:a8:77:90:50:a7:94:d3:fb:f5:d8:b3:
         6e:aa:b9:ca:24:bc:33:c1:dd:58:93:35:5b:d2:2b:41:e2:a1:
         a1:40:1c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:07:32 2026 by rpki-client