Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
File:                     78NgXDK7yF0jXwqc6PRfB5a3I8s.mft (raw, json)
Hash identifier:          5Y+97oQ6sGBWZo3InXK3SCoaUa2AXZkzZiu3EX/nB4U=
Subject key identifier:   4B:09:85:A0:41:5F:70:1D:15:2A:A5:32:FD:80:C7:42:D9:66:82:75
Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
Certificate issuer:       /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Certificate serial:       019CE6DB01F4170243362A2539523355DB2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
Manifest number:          0BD7
Signing time:             Fri 13 Mar 2026 11:00:38 +0000
Manifest this update:     Fri 13 Mar 2026 11:00:38 +0000
Manifest next update:     Sat 14 Mar 2026 11:00:38 +0000
Files and hashes:         1: 78NgXDK7yF0jXwqc6PRfB5a3I8s.crl (hash: QjYPJ2xs3H+y8/JclUrDPbPbxcVS44mzozkrA3gk968=)
                          2: U6lz5micbQvsEzEwVp3dL7mR1Os.roa (hash: NW13lN/avpR4aBD/HcMl0sRLodoqqzCepoA5qJR1XKA=)
                          3: WH8m0TMkVXBPbucXPDw6oUIRye4.roa (hash: IB0keQjNG9LRUVYhpn54n8Irz+pRxwCtrbopId4wJAg=)
                          4: t4MpcNa2tIl4W9G2LCTJWkEphB8.roa (hash: xbauCMbU4PS3RK6IhRtrAnQJjuwdmggI6BkwUnHhNwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:db:01:f4:17:02:43:36:2a:25:39:52:33:55:db:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
        Validity
            Not Before: Mar 13 11:00:38 2026 GMT
            Not After : Mar 14 11:00:38 2026 GMT
        Subject: CN=4b0985a0415f701d152aa532fd80c742d9668275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:10:1e:74:81:3b:0d:05:d2:69:3c:4e:3b:7e:
                    8a:70:b3:88:cb:a3:17:c3:5f:d0:59:44:27:cb:cf:
                    8b:84:8b:82:86:c2:7e:9d:47:40:56:6b:d5:48:a1:
                    0b:76:34:fa:b8:75:e8:66:2d:d4:13:ec:a8:b4:ea:
                    68:3b:7d:59:b4:11:e3:b7:57:f5:a6:4d:71:42:c4:
                    e7:48:13:71:8b:1d:f5:41:b4:41:4c:4a:5f:99:7d:
                    dd:43:43:e9:a5:17:53:d2:17:4d:af:59:85:97:99:
                    b4:30:e6:5f:fd:a0:71:f0:42:b8:82:aa:28:ce:c5:
                    c1:a7:42:93:e2:61:34:cb:e3:4a:9b:6e:09:ee:0d:
                    cb:64:dc:6a:ec:fb:9f:65:bb:1f:02:36:3a:39:8f:
                    e8:db:8c:a2:65:34:98:76:c3:e1:6d:72:a5:43:bb:
                    dc:6d:1e:27:18:f5:37:ed:5b:7f:14:2c:25:cb:8e:
                    87:24:22:50:99:5f:14:d6:ab:77:13:fb:17:f7:42:
                    54:e8:14:8d:f0:53:87:4c:f9:dd:94:b4:c4:f4:e7:
                    1a:b5:38:64:6a:ca:b7:bc:da:29:e2:85:d1:19:4d:
                    97:2a:42:1d:b0:8e:fa:08:b6:29:87:ee:f0:d3:4a:
                    e8:f9:9b:93:88:cc:2d:b0:80:ca:c0:2d:d0:6a:f8:
                    c6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:09:85:A0:41:5F:70:1D:15:2A:A5:32:FD:80:C7:42:D9:66:82:75
            X509v3 Authority Key Identifier:
                keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:89:ea:6e:63:86:a3:53:86:20:04:5d:5b:05:e0:5e:de:eb:
         96:b3:cd:d5:4d:28:2d:60:55:a9:a8:8e:be:d2:0d:ef:7b:af:
         e2:40:4c:80:49:8d:a5:3e:cb:e1:cb:e0:9a:96:79:8d:51:60:
         8c:69:10:ce:cb:df:69:f1:e3:b7:40:15:39:01:40:44:65:ca:
         92:23:5d:86:25:65:67:d8:b5:a1:b9:00:41:ac:42:03:ce:31:
         98:54:89:21:e5:48:7f:38:4a:f0:fb:b3:35:bf:95:f3:27:2b:
         4d:83:9f:97:f6:9c:78:79:d5:3f:ce:78:5f:6a:31:38:85:df:
         14:d2:e7:d7:5c:e3:68:38:13:76:ee:d8:53:a9:3f:34:24:6f:
         66:94:ae:5d:fb:c1:e0:8c:dd:fd:99:c4:fc:34:77:b9:ff:c3:
         16:1c:19:cf:f1:16:3d:1e:52:8c:1b:bc:05:5f:c9:b8:13:20:
         e3:92:79:a0:a8:da:91:4f:ce:10:ee:e5:c5:ad:90:5e:e6:fa:
         8e:fc:13:b5:41:b8:70:82:d6:8a:71:12:bf:e2:50:7b:8c:31:
         1e:70:d1:71:26:31:97:b7:ae:0c:32:bb:85:69:8e:02:cb:86:
         c9:3f:e3:03:0d:4e:81:b6:9f:7b:b0:03:a2:0b:81:e1:67:38:
         82:52:c8:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzm2wH0FwJDNiolOVIzVdsqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYzM2MDVjMzJiYmM4NWQyMzVmMGE5Y2U4ZjQ1ZjA3OTZi
NzIzY2IwHhcNMjYwMzEzMTEwMDM4WhcNMjYwMzE0MTEwMDM4WjAzMTEwLwYDVQQD
Eyg0YjA5ODVhMDQxNWY3MDFkMTUyYWE1MzJmZDgwYzc0MmQ5NjY4Mjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RAedIE7DQXSaTxOO36KcLOIy6MX
w1/QWUQny8+LhIuChsJ+nUdAVmvVSKELdjT6uHXoZi3UE+yotOpoO31ZtBHjt1f1
pk1xQsTnSBNxix31QbRBTEpfmX3dQ0PppRdT0hdNr1mFl5m0MOZf/aBx8EK4gqoo
zsXBp0KT4mE0y+NKm24J7g3LZNxq7PufZbsfAjY6OY/o24yiZTSYdsPhbXKlQ7vc
bR4nGPU37Vt/FCwly46HJCJQmV8U1qt3E/sX90JU6BSN8FOHTPndlLTE9OcatThk
asq3vNop4oXRGU2XKkIdsI76CLYph+7w00ro+ZuTiMwtsIDKwC3QavjGhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsJhaBBX3AdFSqlMv2Ax0LZZoJ1MB8GA1UdIwQY
MBaAFO/DYFwyu8hdI18KnOj0XweWtyPLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzhOZ1hESzd5RjBqWHdxYzZQUmZCNWEzSThzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lNjIxNjktNDg2ZC00MDU0LWIxMjEt
ZjJjOGJhMDIxY2E4LzEvNzhOZ1hESzd5RjBqWHdxYzZQUmZCNWEzSThzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9lNjIxNjktNDg2ZC00MDU0LWIxMjEtZjJjOGJhMDIxY2E4
LzEvNzhOZ1hESzd5RjBqWHdxYzZQUmZCNWEzSThzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYnqbmOG
o1OGIARdWwXgXt7rlrPN1U0oLWBVqaiOvtIN73uv4kBMgEmNpT7L4cvgmpZ5jVFg
jGkQzsvfafHjt0AVOQFARGXKkiNdhiVlZ9i1obkAQaxCA84xmFSJIeVIfzhK8Puz
Nb+V8ycrTYOfl/aceHnVP854X2oxOIXfFNLn11zjaDgTdu7YU6k/NCRvZpSuXfvB
4Izd/ZnE/DR3uf/DFhwZz/EWPR5SjBu8BV/JuBMg45J5oKjakU/OEO7lxa2QXub6
jvwTtUG4cILWinESv+JQe4wxHnDRcSYxl7euDDK7hWmOAsuGyT/jAw1Ogbafe7AD
oguB4Wc4glLIQg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 17:25:56 2026 by rpki-client