Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
File:                     78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft (raw, json)
Hash identifier:          4hKkA8xSLsyFu8wyhQ6+WOJOc/jr4B5ZQgPJrAtGBug=
Subject key identifier:   EA:F6:74:EE:F2:78:8C:28:47:64:28:8A:CA:CF:13:AE:8A:55:20:93
Authority key identifier: EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5
Certificate issuer:       /CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
Certificate serial:       019F90C77F1BADBA0F30C5F90751701C5908
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
Manifest number:          15BD
Signing time:             Thu 23 Jul 2026 21:00:21 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:21 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:21 +0000
Files and hashes:         1: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl (hash: gDdTTEkBOXg6h2kU8DzFxx4gehh3uACReItCRZQUC94=)
                          2: l3l8yxUr9omdcAUQmmd6AOhV5wc.roa (hash: QwmCoU6dspwPSObVe7zaLFVkXzPFM4im8S89hkRVGe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:7f:1b:ad:ba:0f:30:c5:f9:07:51:70:1c:59:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
        Validity
            Not Before: Jul 23 21:00:21 2026 GMT
            Not After : Jul 24 21:00:21 2026 GMT
        Subject: CN=eaf674eef2788c284764288acacf13ae8a552093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:f5:1a:e0:75:3d:1b:d2:fe:81:b5:3e:61:
                    da:35:a1:08:ea:38:eb:f4:2c:8f:61:f5:75:c1:6f:
                    a3:3b:0c:f9:59:60:a1:94:9f:d6:0f:71:5d:9e:36:
                    7b:c8:80:ac:13:09:ec:3b:d6:bf:10:b3:e2:d0:16:
                    33:a3:fb:66:5c:ad:06:f5:db:a0:1b:b0:c7:f8:4f:
                    9e:8d:2a:08:91:6a:37:6d:c7:4f:12:21:d1:b5:55:
                    e8:d8:31:21:f1:23:7a:90:c9:47:5e:0c:9b:70:30:
                    5b:2c:88:b1:55:87:e9:25:c9:85:b3:55:03:9c:0c:
                    2b:13:95:c0:c0:05:56:0b:aa:6f:d9:6b:3e:18:7f:
                    b0:60:f3:0d:6e:b0:94:44:f2:d3:3b:c7:b1:bd:18:
                    db:b8:19:8e:b1:c1:97:62:4d:b5:01:99:91:9b:8a:
                    ab:da:4f:4e:ee:b7:4d:58:f1:d4:cf:69:f8:35:c3:
                    1e:cc:36:5b:8b:94:09:8f:58:eb:6a:a3:ab:03:98:
                    d9:1f:81:5a:1c:b3:71:f2:e9:95:a1:14:2e:de:5d:
                    25:44:12:c1:b6:ac:b7:dc:82:4b:8c:37:5e:f6:51:
                    94:4f:73:e1:e2:80:71:d9:6b:3e:e8:53:9c:cd:00:
                    3d:00:67:eb:18:7c:7c:c4:8a:32:5c:b8:95:77:bc:
                    cd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F6:74:EE:F2:78:8C:28:47:64:28:8A:CA:CF:13:AE:8A:55:20:93
            X509v3 Authority Key Identifier:
                keyid:EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:30:3e:6a:ef:d8:30:00:ad:a5:b4:76:dd:aa:e2:b9:f5:c2:
         3f:d3:41:bf:b2:d7:dc:ac:f2:12:67:08:5d:1c:80:96:da:b3:
         20:c8:2e:08:78:73:14:6b:dc:23:2c:9d:41:c1:5f:0b:97:47:
         8d:26:97:f7:5b:db:61:b8:ab:6b:78:b8:27:aa:1f:b9:b6:4a:
         df:7a:7c:53:c9:ad:dd:9f:40:f2:91:61:f7:76:c3:ad:98:8f:
         a3:3b:e8:85:2f:94:3e:48:6d:4c:61:c9:0b:e0:c7:0f:84:94:
         e1:9e:b0:91:5e:c0:82:88:27:61:20:5e:0a:ae:24:d6:0f:d7:
         8b:18:ac:33:66:c1:a9:4c:31:ce:ad:e9:56:4f:a1:aa:d9:04:
         9d:e0:4e:77:51:80:62:cf:65:1c:d3:64:78:5b:5a:82:0a:5e:
         74:8e:6b:69:af:14:9b:3b:2f:0a:c7:58:6a:07:e7:14:8f:fa:
         8a:18:65:cb:82:77:b9:b6:65:78:2a:8b:ac:2c:e3:c8:71:b1:
         7d:7b:00:15:79:95:60:0e:b3:f0:52:b4:6b:3d:d6:6c:3a:db:
         d3:c9:92:6a:21:a5:6a:3d:34:11:b0:1f:7a:ce:3f:07:9a:15:
         2c:d1:a3:af:16:c1:c9:22:d3:c2:8d:a8:ea:66:4f:e4:d4:2c:
         bb:19:e0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:40:42 2026 by rpki-client