Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
File:                     77RcySOXjBokve6WzHs683OG0qg.mft (raw, json)
Hash identifier:          MnstVD7igoxqhq51NHm2kv/ZG2PT3kOqzY12pGvI0aI=
Subject key identifier:   2E:01:14:6A:90:E9:F6:F1:0E:4D:31:E7:D4:04:EC:24:57:AA:C9:35
Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
Certificate issuer:       /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Certificate serial:       01A0D34A6EDEC85B0580264DFE575F988D9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
Manifest number:          120F
Signing time:             Thu 24 Sep 2026 12:01:05 +0000
Manifest this update:     Thu 24 Sep 2026 12:01:05 +0000
Manifest next update:     Fri 25 Sep 2026 12:01:05 +0000
Files and hashes:         1: 77RcySOXjBokve6WzHs683OG0qg.crl (hash: zuae5hSVN8S+XedF3GqLKU0X9RI9/oMKxS4m5ZbNJ64=)
                          2: u_-bKVkvV1_IEBiW7GWJfYQG3Kw.roa (hash: Cp1BYoJHxmwK4gyFN+04N6JzdugvrevYPjr0cqKdM10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 12:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:4a:6e:de:c8:5b:05:80:26:4d:fe:57:5f:98:8d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
        Validity
            Not Before: Sep 24 12:01:05 2026 GMT
            Not After : Sep 25 12:01:05 2026 GMT
        Subject: CN=2e01146a90e9f6f10e4d31e7d404ec2457aac935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:f3:4a:25:c2:ab:ea:d2:65:2f:7f:cb:8b:
                    5f:c6:48:b8:6d:20:80:78:8c:29:a9:09:1e:e7:c2:
                    8b:bf:e3:99:db:d7:76:4e:64:1b:a1:5a:69:07:8a:
                    3a:30:14:79:16:9c:16:a8:9d:77:98:15:30:86:1e:
                    66:38:f1:2f:81:70:57:ad:2a:5e:a8:26:59:a3:40:
                    18:14:0f:8d:db:81:be:eb:c1:84:05:75:a8:7e:46:
                    bc:60:d6:08:87:9c:cd:41:6f:24:77:fd:27:52:e8:
                    4d:d1:d3:d9:64:55:ca:75:50:67:2b:3d:4f:0d:47:
                    3c:f2:45:14:ac:da:09:cc:08:98:ba:9b:01:3a:8b:
                    ea:bc:35:66:90:08:f7:bf:71:7d:66:5f:9a:4d:70:
                    f8:59:38:56:41:72:5b:7a:8d:68:05:79:5f:a6:56:
                    9d:0f:b2:c9:75:6d:3d:34:f8:d3:df:cf:1c:b5:eb:
                    4d:5a:9e:b0:19:81:fe:23:0a:2e:bb:70:3a:6c:1c:
                    cb:7f:f8:47:25:70:33:6a:99:11:5b:a8:98:8b:94:
                    0e:7d:e8:a7:fb:2d:39:39:a3:ec:90:87:c5:01:23:
                    83:fa:c8:bd:0b:3d:0e:c1:4e:fe:c0:a0:1b:6f:3d:
                    c7:ba:f7:f3:c6:47:2b:c6:8a:66:bf:39:ab:f7:29:
                    f0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:01:14:6A:90:E9:F6:F1:0E:4D:31:E7:D4:04:EC:24:57:AA:C9:35
            X509v3 Authority Key Identifier:
                keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:a7:98:14:f5:47:d6:d4:ca:b8:a0:7a:60:bc:e1:78:4e:b5:
         0d:2c:c0:4d:c0:1b:3f:95:1e:b5:8a:61:11:76:3e:ba:c3:01:
         08:56:62:f6:bd:33:bf:a1:a3:1d:71:85:9c:7c:42:31:bf:ec:
         19:4b:a3:26:ad:d1:22:db:d9:35:33:79:2e:da:fb:fc:70:dd:
         4f:2e:c8:65:93:77:c8:98:e2:39:d2:94:5e:aa:7e:66:2e:5e:
         1c:47:a5:02:39:0f:13:55:fe:c1:06:e9:f3:dc:e0:1c:c6:01:
         f0:2b:73:b4:93:94:f7:0f:d0:b5:21:a4:79:3e:31:3a:3a:f6:
         17:4f:29:5b:65:f2:b3:b3:44:00:c9:79:1a:ec:64:2a:d4:31:
         26:74:4b:79:fd:c2:51:bc:63:63:e1:13:c3:19:cb:cd:6d:34:
         33:5b:84:2b:f7:4c:81:63:9d:db:51:89:21:2a:c3:1f:34:2b:
         c7:bb:14:75:f4:01:75:6c:24:43:7f:b5:26:96:ad:d4:62:67:
         73:6b:64:05:f9:9a:2b:69:c9:99:55:41:99:10:8b:f1:f3:96:
         83:90:fa:52:2c:d1:60:4d:19:f8:17:6f:ef:b0:7b:fc:e3:88:
         1d:3c:68:3a:a5:a8:b9:98:c2:43:51:99:7e:dd:24:ee:68:dd:
         0a:44:73:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:51:17 2026 by rpki-client