Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/2d9db4-5707-41ee-b221-95d7a611ca56/1/eFdKfQ1O092jCAk9qvH6vuk4UPA.mft
File:                     eFdKfQ1O092jCAk9qvH6vuk4UPA.mft (raw, json)
Hash identifier:          G8kk9cPQ7A25XOvkRa87Wv/t/s06jF25Eksppkj6lAs=
Subject key identifier:   F9:A7:45:9B:B1:CE:B4:A0:59:FA:C0:67:DD:72:D1:C7:39:42:91:2A
Authority key identifier: 78:57:4A:7D:0D:4E:D3:DD:A3:08:09:3D:AA:F1:FA:BE:E9:38:50:F0
Certificate issuer:       /CN=78574a7d0d4ed3dda308093daaf1fabee93850f0
Certificate serial:       01A0CFA4BBCAD59ECAA741FE1D675EB1D751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eFdKfQ1O092jCAk9qvH6vuk4UPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/2d9db4-5707-41ee-b221-95d7a611ca56/1/eFdKfQ1O092jCAk9qvH6vuk4UPA.mft
Manifest number:          77
Signing time:             Wed 23 Sep 2026 19:01:14 +0000
Manifest this update:     Wed 23 Sep 2026 19:01:14 +0000
Manifest next update:     Thu 24 Sep 2026 19:01:14 +0000
Files and hashes:         1: eFdKfQ1O092jCAk9qvH6vuk4UPA.crl (hash: G8T1J4NijoeD5P2VFEwP+QpXTW5Yr5HDn9JbqvqjfBs=)
                          2: uWINjLXyzzz15SveFToMSSh06YY.asa (hash: 1vVDwziBAybLEC7T2mThcbiNw1ELRtkLd7LQgJmOVxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/2d9db4-5707-41ee-b221-95d7a611ca56/1/eFdKfQ1O092jCAk9qvH6vuk4UPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/2d9db4-5707-41ee-b221-95d7a611ca56/1/eFdKfQ1O092jCAk9qvH6vuk4UPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eFdKfQ1O092jCAk9qvH6vuk4UPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:bb:ca:d5:9e:ca:a7:41:fe:1d:67:5e:b1:d7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78574a7d0d4ed3dda308093daaf1fabee93850f0
        Validity
            Not Before: Sep 23 19:01:14 2026 GMT
            Not After : Sep 24 19:01:14 2026 GMT
        Subject: CN=f9a7459bb1ceb4a059fac067dd72d1c73942912a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:15:01:f5:12:28:54:2c:75:a8:ad:dc:c1:
                    4c:a5:f7:bf:5a:89:2b:18:a7:39:66:43:bd:c5:d1:
                    64:6b:8d:f0:1e:b8:c9:0d:f2:e7:92:63:80:93:33:
                    17:b1:a7:5b:a8:07:61:fb:84:6d:85:19:31:b5:91:
                    2d:59:64:f2:e6:7b:61:c8:c1:ef:9d:9a:51:c6:46:
                    8e:37:b8:8f:30:f2:2b:e8:ee:dd:c0:cf:10:5f:c3:
                    e7:38:87:f7:e7:6a:18:fc:0d:c7:e3:f3:f2:2d:7e:
                    fe:f2:ea:a9:35:5e:8f:c5:72:0e:10:de:f2:41:f2:
                    cd:43:14:57:ec:72:3d:6f:ad:7b:eb:58:22:1d:b3:
                    7a:a0:14:b6:6c:97:1f:00:68:6b:13:c2:be:c1:27:
                    ee:64:7c:b4:88:60:ea:94:22:11:54:35:b2:9b:3f:
                    c2:6f:0d:dc:8f:7b:39:40:f7:02:67:cf:7b:35:47:
                    8c:91:f3:9e:ff:cc:a5:41:0f:9a:52:35:d8:cd:aa:
                    a5:9f:3d:41:08:bf:f1:b9:ec:58:cd:bd:8c:b6:58:
                    e4:d6:8b:e3:d9:3e:ad:fa:af:a9:cd:37:11:63:42:
                    5b:9b:da:70:a9:7b:25:a5:c8:00:3b:36:78:e0:ed:
                    0e:59:e6:a9:43:b8:53:82:53:00:cf:1d:c8:45:e7:
                    1b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A7:45:9B:B1:CE:B4:A0:59:FA:C0:67:DD:72:D1:C7:39:42:91:2A
            X509v3 Authority Key Identifier:
                keyid:78:57:4A:7D:0D:4E:D3:DD:A3:08:09:3D:AA:F1:FA:BE:E9:38:50:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFdKfQ1O092jCAk9qvH6vuk4UPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2d9db4-5707-41ee-b221-95d7a611ca56/1/eFdKfQ1O092jCAk9qvH6vuk4UPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2d9db4-5707-41ee-b221-95d7a611ca56/1/eFdKfQ1O092jCAk9qvH6vuk4UPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:62:c1:55:28:02:2d:d7:7b:7b:9b:24:78:04:55:be:20:6e:
         50:3a:54:84:63:fb:b2:a3:9f:58:49:c6:e5:01:d3:b3:d2:92:
         40:ba:ca:ee:6d:46:ed:a5:83:a3:d5:db:a2:7c:ca:d3:bf:eb:
         9c:f8:ed:7d:0f:90:e2:49:6e:5a:c5:37:e4:fb:6d:e4:1a:fc:
         1b:8c:1a:0b:7d:e9:ff:16:53:4d:74:d2:48:4a:ee:84:01:da:
         7a:2c:62:d3:1a:78:86:8e:5d:ef:01:1c:92:54:2c:62:e2:6f:
         ab:c2:56:d8:c9:14:1c:6d:0f:a1:45:f1:4f:18:cd:20:31:61:
         8e:a1:03:10:1b:42:9a:ca:ba:63:c4:73:91:d9:e1:5b:f5:f3:
         02:49:94:bb:3e:93:b5:04:54:57:7c:67:91:0f:62:85:5e:02:
         fc:86:7a:6d:91:1d:91:26:b6:b0:39:94:fa:5d:0d:4a:c7:32:
         09:7b:4f:b2:c6:fa:05:87:55:b5:ae:f6:b4:2a:70:3c:94:f0:
         c8:46:57:63:de:33:33:71:b0:5e:4d:ec:14:fd:ac:b6:50:85:
         ed:e5:07:1f:d3:26:b9:77:3f:8c:19:a5:a3:06:c3:1f:4a:73:
         17:42:5b:50:41:c6:49:0b:ec:fe:c5:6d:30:08:bd:1c:f5:63:
         3e:c7:2e:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPpLvK1Z7Kp0H+HWdesddRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4NTc0YTdkMGQ0ZWQzZGRhMzA4MDkzZGFhZjFmYWJlZTkz
ODUwZjAwHhcNMjYwOTIzMTkwMTE0WhcNMjYwOTI0MTkwMTE0WjAzMTEwLwYDVQQD
EyhmOWE3NDU5YmIxY2ViNGEwNTlmYWMwNjdkZDcyZDFjNzM5NDI5MTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJsVAfUSKFQsdait3MFMpfe/Wokr
GKc5ZkO9xdFka43wHrjJDfLnkmOAkzMXsadbqAdh+4RthRkxtZEtWWTy5nthyMHv
nZpRxkaON7iPMPIr6O7dwM8QX8PnOIf352oY/A3H4/PyLX7+8uqpNV6PxXIOEN7y
QfLNQxRX7HI9b61761giHbN6oBS2bJcfAGhrE8K+wSfuZHy0iGDqlCIRVDWymz/C
bw3cj3s5QPcCZ897NUeMkfOe/8ylQQ+aUjXYzaqlnz1BCL/xuexYzb2Mtljk1ovj
2T6t+q+pzTcRY0Jbm9pwqXslpcgAOzZ44O0OWeapQ7hTglMAzx3IRecbyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmnRZuxzrSgWfrAZ91y0cc5QpEqMB8GA1UdIwQY
MBaAFHhXSn0NTtPdowgJParx+r7pOFDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUZkS2ZRMU8wOTJqQ0FrOXF2SDZ2dWs0VVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yZDlkYjQtNTcwNy00MWVlLWIyMjEt
OTVkN2E2MTFjYTU2LzEvZUZkS2ZRMU8wOTJqQ0FrOXF2SDZ2dWs0VVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yZDlkYjQtNTcwNy00MWVlLWIyMjEtOTVkN2E2MTFjYTU2
LzEvZUZkS2ZRMU8wOTJqQ0FrOXF2SDZ2dWs0VVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApWLBVSgC
Ldd7e5skeARVviBuUDpUhGP7sqOfWEnG5QHTs9KSQLrK7m1G7aWDo9XbonzK07/r
nPjtfQ+Q4kluWsU35Ptt5Br8G4waC33p/xZTTXTSSEruhAHaeixi0xp4ho5d7wEc
klQsYuJvq8JW2MkUHG0PoUXxTxjNIDFhjqEDEBtCmsq6Y8RzkdnhW/XzAkmUuz6T
tQRUV3xnkQ9ihV4C/IZ6bZEdkSa2sDmU+l0NSscyCXtPssb6BYdVta72tCpwPJTw
yEZXY94zM3GwXk3sFP2stlCF7eUHH9MmuXc/jBmlowbDH0pzF0JbUEHGSQvs/sVt
MAi9HPVjPscuiw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:47:49 2026 by rpki-client