Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
File:                     R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json)
Hash identifier:          krNHaC6cqGSElTA6fOvTsB6o9d/cV31nJyttDyJq9iE=
Subject key identifier:   0E:81:34:00:62:11:D6:51:71:7B:60:AA:75:6D:53:D8:7E:FD:34:AF
Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89
Certificate issuer:       /CN=47bf2ffeda381e54818df07052cf67e222515f89
Certificate serial:       019F416421C69A866955A02C689F0796439A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
Manifest number:          0CCB
Signing time:             Wed 08 Jul 2026 11:01:48 +0000
Manifest this update:     Wed 08 Jul 2026 11:01:48 +0000
Manifest next update:     Thu 09 Jul 2026 11:01:48 +0000
Files and hashes:         1: 1_qKx7XK-VslkQaQcY5wLcf-kY4.roa (hash: aIIfDPGVCndIRJ9cOc5IQ8o5NAq5xG4vSe+WEowhC+8=)
                          2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: cIY2ORZev0fcMw8LGYPJnIz+W5ILmN/zQOw+ENYPjqs=)
                          3: v1Q5deDRNaYN2rkW1eCtdP2QCKw.roa (hash: h5DLp92XQ3AvM1H/BlIZUWuG5teJsgAD0mDg6kM2v3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 11:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:41:64:21:c6:9a:86:69:55:a0:2c:68:9f:07:96:43:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89
        Validity
            Not Before: Jul  8 11:01:48 2026 GMT
            Not After : Jul  9 11:01:48 2026 GMT
        Subject: CN=0e8134006211d651717b60aa756d53d87efd34af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:87:d5:d6:02:22:26:c4:19:c0:da:f6:e1:d5:
                    75:50:bc:f6:c6:22:70:f8:e1:88:12:3c:ea:4d:97:
                    2e:45:55:ee:1d:f6:c5:0b:98:8b:ec:8d:88:22:42:
                    ce:36:88:72:9a:29:b7:6b:be:eb:cf:1d:22:2c:00:
                    13:4f:74:bd:a5:6e:cd:8d:e1:90:8e:3d:13:25:be:
                    91:81:83:b9:1a:64:20:a2:87:28:d2:af:5c:2c:0a:
                    22:2f:0b:5c:e9:52:ea:bb:e3:c5:32:25:d5:77:f6:
                    9e:f8:fd:e1:08:32:66:d3:5d:8d:71:7e:e9:7a:c2:
                    0b:3f:55:00:38:98:dc:35:2e:df:7e:31:9e:2f:59:
                    61:a8:b4:71:6e:90:23:70:6a:58:22:f2:d2:65:0c:
                    27:84:b5:1f:dd:a0:78:9c:1b:db:d9:f5:cb:0b:5d:
                    13:cf:b7:12:23:39:9c:b4:ec:a9:3b:7d:69:32:6e:
                    4b:45:a3:b0:43:ff:19:fe:58:c1:6b:67:bd:3e:50:
                    87:95:af:b2:6d:c1:1a:82:6e:c9:a1:6d:1e:03:80:
                    5c:2b:cf:85:9d:73:86:e4:cd:a0:01:d2:7d:0f:9e:
                    39:1d:69:b9:c3:8b:2c:94:7b:ce:f5:17:d9:5c:28:
                    4b:54:4a:9a:d1:f4:b3:20:4d:6c:90:89:dd:33:0d:
                    28:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:81:34:00:62:11:D6:51:71:7B:60:AA:75:6D:53:D8:7E:FD:34:AF
            X509v3 Authority Key Identifier:
                keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:04:82:a7:35:de:85:df:b2:9b:6b:92:41:c0:51:f0:99:a9:
         ab:2e:ed:91:db:6e:fa:ea:34:eb:82:fd:ee:e7:52:4d:19:21:
         71:31:46:29:92:55:4c:4a:ff:4f:62:a9:85:0e:44:f8:e5:3f:
         5e:0c:f8:2f:bf:0e:b0:80:a9:0b:15:33:e0:71:9e:5b:73:e8:
         10:63:3b:1e:5a:2f:fb:2e:70:f7:a3:37:81:6c:3e:3d:91:8d:
         50:13:be:97:70:c8:c9:cb:64:df:73:b8:e6:5e:ee:ea:3b:88:
         af:02:9a:43:30:66:01:00:d2:19:cf:4a:1c:3f:67:b0:45:19:
         24:9c:5f:3c:da:dd:dd:e3:b7:2f:05:7f:52:c4:92:ce:0c:b6:
         1b:e3:3e:b8:cf:06:b7:18:ad:e4:fe:47:9a:97:47:a0:8a:42:
         26:48:f8:a9:2f:fe:df:c4:9c:c9:e3:c9:93:d0:b3:65:17:57:
         fc:e2:f4:46:85:72:6c:26:94:39:bb:e8:b5:a7:36:d4:05:98:
         8d:a8:bb:19:62:a0:48:ce:ce:d9:19:59:a2:97:ba:4d:ff:96:
         f8:4e:bc:16:63:96:32:44:f9:e9:98:5e:b9:e1:b9:5d:d8:ed:
         76:8a:bd:be:58:50:7c:09:18:bf:e9:52:f9:ba:b6:1c:0b:4b:
         62:0d:05:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9BZCHGmoZpVaAsaJ8HlkOaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YmYyZmZlZGEzODFlNTQ4MThkZjA3MDUyY2Y2N2UyMjI1
MTVmODkwHhcNMjYwNzA4MTEwMTQ4WhcNMjYwNzA5MTEwMTQ4WjAzMTEwLwYDVQQD
EygwZTgxMzQwMDYyMTFkNjUxNzE3YjYwYWE3NTZkNTNkODdlZmQzNGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzofV1gIiJsQZwNr24dV1ULz2xiJw
+OGIEjzqTZcuRVXuHfbFC5iL7I2IIkLONohymim3a77rzx0iLAATT3S9pW7NjeGQ
jj0TJb6RgYO5GmQgooco0q9cLAoiLwtc6VLqu+PFMiXVd/ae+P3hCDJm012NcX7p
esILP1UAOJjcNS7ffjGeL1lhqLRxbpAjcGpYIvLSZQwnhLUf3aB4nBvb2fXLC10T
z7cSIzmctOypO31pMm5LRaOwQ/8Z/ljBa2e9PlCHla+ybcEagm7JoW0eA4BcK8+F
nXOG5M2gAdJ9D545HWm5w4sslHvO9RfZXChLVEqa0fSzIE1skIndMw0owwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6BNABiEdZRcXtgqnVtU9h+/TSvMB8GA1UdIwQY
MBaAFEe/L/7aOB5UgY3wcFLPZ+IiUV+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEt
MGJkMDk1ZGE3OGVmLzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEtMGJkMDk1ZGE3OGVm
LzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgSCpzXe
hd+ym2uSQcBR8Jmpqy7tkdtu+uo064L97udSTRkhcTFGKZJVTEr/T2KphQ5E+OU/
Xgz4L78OsICpCxUz4HGeW3PoEGM7Hlov+y5w96M3gWw+PZGNUBO+l3DIyctk33O4
5l7u6juIrwKaQzBmAQDSGc9KHD9nsEUZJJxfPNrd3eO3LwV/UsSSzgy2G+M+uM8G
txit5P5HmpdHoIpCJkj4qS/+38ScyePJk9CzZRdX/OL0RoVybCaUObvotac21AWY
jai7GWKgSM7O2RlZope6Tf+W+E68FmOWMkT56ZheueG5Xdjtdoq9vlhQfAkYv+lS
+bq2HAtLYg0FYQ==
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:30:49 2026 by rpki-client