Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
File:                     78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft (raw, json)
Hash identifier:          mu4SKYOqSbxIy85S/s1+UZROF77BJtciBOOfx8gJgaY=
Subject key identifier:   B2:33:45:EB:E7:FC:F5:A3:01:87:32:03:E7:98:E3:7C:B3:1D:E2:24
Authority key identifier: EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5
Certificate issuer:       /CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
Certificate serial:       019F190CA06FEA236425A84E7C7F9C23EA58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
Manifest number:          157F
Signing time:             Tue 30 Jun 2026 15:01:25 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:25 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:25 +0000
Files and hashes:         1: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl (hash: bjiN9OAUE2zRBZVCpBd2vQoloyGGDZa8kAozQz97ZY0=)
                          2: l3l8yxUr9omdcAUQmmd6AOhV5wc.roa (hash: QwmCoU6dspwPSObVe7zaLFVkXzPFM4im8S89hkRVGe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:a0:6f:ea:23:64:25:a8:4e:7c:7f:9c:23:ea:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
        Validity
            Not Before: Jun 30 15:01:25 2026 GMT
            Not After : Jul  1 15:01:25 2026 GMT
        Subject: CN=b23345ebe7fcf5a301873203e798e37cb31de224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:ee:6d:9e:57:49:51:44:ab:ed:17:34:af:
                    74:5a:6d:18:5f:ab:3d:53:11:1d:88:26:01:60:d1:
                    c1:49:5b:a2:48:7b:b7:a3:85:d3:2e:71:50:f3:8f:
                    cd:99:eb:3a:7c:46:aa:fa:fc:2f:b1:9d:0b:0b:d9:
                    27:cd:8b:12:75:59:d8:ee:7b:96:f6:fa:52:de:76:
                    01:e1:90:2c:69:2d:4d:09:34:2b:23:0a:89:90:dd:
                    d5:52:45:57:e0:90:9f:f4:b7:0b:2a:c4:96:f0:e3:
                    bf:29:c1:95:ed:4a:3e:fa:9d:d5:ac:b9:5a:06:f2:
                    06:c5:03:00:2d:68:f6:32:71:0c:0f:71:c0:cf:14:
                    8e:93:fe:4e:55:de:74:9e:28:12:fe:3e:8e:00:31:
                    f0:c3:c7:67:01:bc:36:32:47:39:9d:1d:31:41:4e:
                    7c:c2:40:5b:b3:b4:c2:02:80:a6:82:b0:cb:79:91:
                    81:a4:e2:18:6e:f2:d6:74:72:07:83:2e:85:df:c9:
                    7d:9a:12:e3:39:b4:9c:59:9d:80:90:7f:45:a5:ca:
                    14:6f:1b:4a:5b:67:38:d3:60:7b:f6:00:c1:b6:96:
                    dd:7d:eb:3b:72:d0:3a:95:8b:d4:84:d2:8b:5e:33:
                    b1:d6:8a:55:27:c1:43:8a:52:41:4d:1f:3c:c8:e2:
                    ab:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:33:45:EB:E7:FC:F5:A3:01:87:32:03:E7:98:E3:7C:B3:1D:E2:24
            X509v3 Authority Key Identifier:
                keyid:EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:2c:64:2f:83:f8:95:ad:af:9f:d6:96:c6:e7:91:02:67:06:
         ef:c0:d1:33:49:77:78:e4:ab:82:cd:c7:08:67:6c:44:26:c5:
         4c:e3:bc:e2:cc:f3:b9:83:c5:94:b5:19:43:0c:12:ae:40:15:
         1e:25:0a:f5:11:d9:51:1c:c4:20:95:62:77:8d:62:97:d0:e2:
         45:84:e4:c1:4b:82:af:aa:99:e0:de:1a:3a:73:55:a8:d6:37:
         60:da:04:39:f3:61:86:c4:33:75:8a:da:d1:5b:79:93:7a:b9:
         67:f0:3f:69:39:e7:d7:16:d6:55:f4:eb:c1:8c:bf:00:95:53:
         96:c2:06:46:03:28:88:3f:c0:18:3e:40:98:58:17:31:7c:c9:
         dc:a3:04:21:5d:9e:ab:44:a6:f2:98:c2:92:99:42:e5:fe:42:
         6c:25:4f:e8:91:34:e8:f7:a5:5a:a7:56:6a:e1:19:c2:98:f5:
         b7:dc:12:84:f8:d8:c7:25:15:05:05:d9:56:a9:5d:f3:5c:b3:
         de:c0:ce:72:ec:a6:ee:f6:22:64:ad:67:d1:60:87:f1:6e:e4:
         de:d0:23:0e:ae:3d:08:3b:f9:1f:be:51:a7:df:c6:1a:a5:61:
         ea:ff:ac:9c:13:af:2b:89:fb:35:38:e6:42:52:61:0c:8e:ed:
         fe:4b:58:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDKBv6iNkJahOfH+cI+pYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmY2ZjN2NmNTcwOTU4OGE3MDg3ZTZjOWUxMGVjYWFhOGFi
YTU5ZjUwHhcNMjYwNjMwMTUwMTI1WhcNMjYwNzAxMTUwMTI1WjAzMTEwLwYDVQQD
EyhiMjMzNDVlYmU3ZmNmNWEzMDE4NzMyMDNlNzk4ZTM3Y2IzMWRlMjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprrubZ5XSVFEq+0XNK90Wm0YX6s9
UxEdiCYBYNHBSVuiSHu3o4XTLnFQ84/Nmes6fEaq+vwvsZ0LC9knzYsSdVnY7nuW
9vpS3nYB4ZAsaS1NCTQrIwqJkN3VUkVX4JCf9LcLKsSW8OO/KcGV7Uo++p3VrLla
BvIGxQMALWj2MnEMD3HAzxSOk/5OVd50nigS/j6OADHww8dnAbw2Mkc5nR0xQU58
wkBbs7TCAoCmgrDLeZGBpOIYbvLWdHIHgy6F38l9mhLjObScWZ2AkH9FpcoUbxtK
W2c402B79gDBtpbdfes7ctA6lYvUhNKLXjOx1opVJ8FDilJBTR88yOKrgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIzRevn/PWjAYcyA+eY43yzHeIkMB8GA1UdIwQY
MBaAFO/Px89XCViKcIfmyeEOyqqKuln1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDNmNDgtZjdiMi00NDA1LWExNTkt
YWMxYmY4MDU0NGNhLzEvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jZDNmNDgtZjdiMi00NDA1LWExNTktYWMxYmY4MDU0NGNh
LzEvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtyxkL4P4
la2vn9aWxueRAmcG78DRM0l3eOSrgs3HCGdsRCbFTOO84szzuYPFlLUZQwwSrkAV
HiUK9RHZURzEIJVid41il9DiRYTkwUuCr6qZ4N4aOnNVqNY3YNoEOfNhhsQzdYra
0Vt5k3q5Z/A/aTnn1xbWVfTrwYy/AJVTlsIGRgMoiD/AGD5AmFgXMXzJ3KMEIV2e
q0Sm8pjCkplC5f5CbCVP6JE06PelWqdWauEZwpj1t9wShPjYxyUVBQXZVqld81yz
3sDOcuym7vYiZK1n0WCH8W7k3tAjDq49CDv5H75Rp9/GGqVh6v+snBOvK4n7NTjm
QlJhDI7t/ktY7w==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:04 2026 by rpki-client