Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
File:                     78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft (raw, json)
Hash identifier:          S1uqcUouPpZ4FmukRuAZbM6nm4S6CwXhg0QlV3tdmO4=
Subject key identifier:   4F:FB:23:25:13:66:F4:96:BC:35:50:1B:27:04:B8:BC:6B:80:19:C8
Authority key identifier: EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5
Certificate issuer:       /CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
Certificate serial:       01A0D15C2111EE21F1B81AA7F78621D7E2C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
Manifest number:          1663
Signing time:             Thu 24 Sep 2026 03:01:10 +0000
Manifest this update:     Thu 24 Sep 2026 03:01:10 +0000
Manifest next update:     Fri 25 Sep 2026 03:01:10 +0000
Files and hashes:         1: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl (hash: bUls6Vu8kRQq4cSGDYJZMA7ycW6nkWZkE4wia3s4cJw=)
                          2: l3l8yxUr9omdcAUQmmd6AOhV5wc.roa (hash: QwmCoU6dspwPSObVe7zaLFVkXzPFM4im8S89hkRVGe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 03:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5c:21:11:ee:21:f1:b8:1a:a7:f7:86:21:d7:e2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
        Validity
            Not Before: Sep 24 03:01:10 2026 GMT
            Not After : Sep 25 03:01:10 2026 GMT
        Subject: CN=4ffb23251366f496bc35501b2704b8bc6b8019c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2a:1b:e0:9c:ca:4f:06:60:b3:9e:da:29:8f:
                    c9:f6:b4:ea:c8:8a:ba:63:4b:43:ce:ac:1b:10:df:
                    23:b9:bf:5c:d1:29:19:d7:f0:c5:e1:90:83:b7:b1:
                    28:0e:e7:7e:d2:70:87:f2:9c:3e:57:b9:52:e9:66:
                    9c:bf:10:cd:dc:a2:95:23:c7:f0:b7:99:9a:23:2a:
                    dd:67:29:93:cb:f0:73:04:7d:76:f6:15:8d:17:a4:
                    fd:33:88:95:20:57:d1:a2:16:38:38:78:4e:cf:6a:
                    1f:53:a8:50:d8:b9:f9:8f:38:a0:69:2c:9c:20:73:
                    55:da:cb:d4:55:20:10:31:44:d6:dc:8d:d6:3d:2c:
                    c9:d8:8d:92:d9:ce:14:24:76:90:86:86:cf:31:92:
                    ef:bf:0a:c9:50:75:37:5f:cc:be:a0:57:1b:a7:0f:
                    25:1a:be:d1:9c:6e:19:8f:fe:7f:06:96:18:b9:6a:
                    26:8a:66:74:3e:35:cc:ff:f5:c9:25:64:54:76:b0:
                    a3:3b:e2:86:a2:0a:33:2d:da:fe:ab:51:7a:54:92:
                    49:bc:ae:31:30:7b:e0:c2:19:3a:32:70:ea:a6:c7:
                    f4:21:1c:33:6c:5e:b8:25:be:89:43:e2:54:f6:ea:
                    ca:75:52:0e:7f:d8:ac:cc:8b:97:9e:5d:73:94:da:
                    1c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FB:23:25:13:66:F4:96:BC:35:50:1B:27:04:B8:BC:6B:80:19:C8
            X509v3 Authority Key Identifier:
                keyid:EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d8:cb:bb:e9:1f:fc:29:58:e8:1d:83:42:bd:82:18:0c:30:
         f6:4f:b3:16:d5:80:2d:75:83:71:b5:b9:b4:ea:36:54:62:94:
         10:f3:57:93:78:99:da:e4:a6:47:63:b2:be:e7:0b:ac:2f:55:
         69:ef:f6:34:20:a6:58:93:c1:8a:0b:ab:91:8b:b9:85:6a:50:
         8d:25:1e:c7:71:f8:f0:e6:c4:a2:55:67:30:44:4c:a0:25:ad:
         f2:f1:c1:ba:80:19:5b:5f:06:74:a6:2c:31:fc:c0:63:b9:2c:
         cb:99:f6:b9:e1:c2:52:cd:98:6a:74:d3:37:df:61:05:6d:d1:
         da:ea:6c:fc:4f:55:fd:f7:ae:28:c0:89:0f:60:2f:f9:25:da:
         1d:8e:b8:39:66:68:5c:e3:8d:da:85:9e:3e:f1:fb:13:ee:8e:
         24:b9:69:61:6f:02:56:d3:95:ed:78:eb:ee:88:6e:44:9e:c4:
         ec:7e:9c:04:0c:43:4f:bf:f9:ec:50:c2:f4:22:3a:88:89:86:
         4a:af:bd:bb:91:6e:18:fb:89:ad:ce:d4:41:b4:04:71:3e:00:
         97:6f:ee:61:3e:93:c4:36:da:c6:1b:ac:05:47:9e:53:0a:ee:
         d9:b8:48:11:ea:27:69:11:76:fa:2c:ec:f5:30:91:2d:d9:69:
         fb:70:46:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRXCER7iHxuBqn94Yh1+LDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmY2ZjN2NmNTcwOTU4OGE3MDg3ZTZjOWUxMGVjYWFhOGFi
YTU5ZjUwHhcNMjYwOTI0MDMwMTEwWhcNMjYwOTI1MDMwMTEwWjAzMTEwLwYDVQQD
Eyg0ZmZiMjMyNTEzNjZmNDk2YmMzNTUwMWIyNzA0YjhiYzZiODAxOWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyob4JzKTwZgs57aKY/J9rTqyIq6
Y0tDzqwbEN8jub9c0SkZ1/DF4ZCDt7EoDud+0nCH8pw+V7lS6WacvxDN3KKVI8fw
t5maIyrdZymTy/BzBH129hWNF6T9M4iVIFfRohY4OHhOz2ofU6hQ2Ln5jzigaSyc
IHNV2svUVSAQMUTW3I3WPSzJ2I2S2c4UJHaQhobPMZLvvwrJUHU3X8y+oFcbpw8l
Gr7RnG4Zj/5/BpYYuWomimZ0PjXM//XJJWRUdrCjO+KGogozLdr+q1F6VJJJvK4x
MHvgwhk6MnDqpsf0IRwzbF64Jb6JQ+JU9urKdVIOf9iszIuXnl1zlNocUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/7IyUTZvSWvDVQGycEuLxrgBnIMB8GA1UdIwQY
MBaAFO/Px89XCViKcIfmyeEOyqqKuln1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDNmNDgtZjdiMi00NDA1LWExNTkt
YWMxYmY4MDU0NGNhLzEvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jZDNmNDgtZjdiMi00NDA1LWExNTktYWMxYmY4MDU0NGNh
LzEvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuNjLu+kf
/ClY6B2DQr2CGAww9k+zFtWALXWDcbW5tOo2VGKUEPNXk3iZ2uSmR2OyvucLrC9V
ae/2NCCmWJPBigurkYu5hWpQjSUex3H48ObEolVnMERMoCWt8vHBuoAZW18GdKYs
MfzAY7ksy5n2ueHCUs2YanTTN99hBW3R2ups/E9V/feuKMCJD2Av+SXaHY64OWZo
XOON2oWePvH7E+6OJLlpYW8CVtOV7Xjr7ohuRJ7E7H6cBAxDT7/57FDC9CI6iImG
Sq+9u5FuGPuJrc7UQbQEcT4Al2/uYT6TxDbaxhusBUeeUwru2bhIEeonaRF2+izs
9TCRLdlp+3BGgQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:32:59 2026 by rpki-client