Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
File:                     3EPqLNB5l-zf4XGIhycIZS4XLfI.mft (raw, json)
Hash identifier:          2q1GoJ9Gcx/TMJanVDrmJNbdVt0uuOQhso21sXGJ1eM=
Subject key identifier:   59:B8:76:07:28:C7:3A:59:58:5F:05:4E:C5:D2:08:C4:0D:76:34:C6
Authority key identifier: DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2
Certificate issuer:       /CN=dc43ea2cd07997ecdfe17188872708652e172df2
Certificate serial:       01A000932A9D7D79F5FC444F4453BE5FDEE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
Manifest number:          0A78
Signing time:             Fri 14 Aug 2026 14:00:39 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:39 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:39 +0000
Files and hashes:         1: 3EPqLNB5l-zf4XGIhycIZS4XLfI.crl (hash: mSF7291wsOBi8d8M0rmE6HXBpe03NpLZOKINBE4/+vM=)
                          2: fI5jVmmy88-mIgPso0R_tYbnmK8.roa (hash: DZgFgnCe+GlazLWeguoKXJElQSdORsAcJbygFhHnVCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:2a:9d:7d:79:f5:fc:44:4f:44:53:be:5f:de:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc43ea2cd07997ecdfe17188872708652e172df2
        Validity
            Not Before: Aug 14 14:00:39 2026 GMT
            Not After : Aug 15 14:00:39 2026 GMT
        Subject: CN=59b8760728c73a59585f054ec5d208c40d7634c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:35:94:c8:2b:59:08:62:21:52:c6:17:3e:dc:
                    9b:85:e7:ff:19:72:e5:95:53:95:81:2a:5e:5b:4e:
                    9e:0e:37:d2:39:02:7e:58:49:f5:70:99:74:19:6d:
                    73:b1:c0:6a:b9:6a:36:9a:d0:41:75:ee:ac:5f:31:
                    fd:75:12:7a:b1:03:1c:42:cd:32:81:f2:56:a9:c0:
                    bd:ff:65:c5:9f:84:08:cd:01:0a:4a:00:87:96:98:
                    05:72:02:0c:2e:a5:bf:7e:a2:fe:4f:b6:fc:41:f6:
                    1c:2c:15:f3:86:95:12:fb:45:67:86:b4:9f:96:e4:
                    d5:a9:f0:69:4b:28:e1:8d:45:8a:57:51:69:91:52:
                    6e:06:42:06:45:bd:c1:29:2d:fb:4e:c0:25:75:b3:
                    53:98:a4:1e:74:a2:38:4c:f6:17:61:a7:5f:ea:a5:
                    66:38:3d:f1:ba:10:f9:76:77:29:4d:5f:bf:d2:a0:
                    8e:ad:21:a4:c7:13:3f:c9:27:3a:9f:df:e9:a0:cf:
                    b0:ad:e2:9d:ac:43:fa:b1:6d:83:5a:56:22:74:58:
                    98:a2:f8:60:33:e3:48:95:94:e3:f4:dd:32:20:29:
                    8b:e0:5a:dc:89:44:ff:f0:9c:8a:a3:00:a5:8a:b5:
                    02:ad:25:16:76:f3:cd:d1:b3:f5:ab:8f:fd:7c:b4:
                    ca:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B8:76:07:28:C7:3A:59:58:5F:05:4E:C5:D2:08:C4:0D:76:34:C6
            X509v3 Authority Key Identifier:
                keyid:DC:43:EA:2C:D0:79:97:EC:DF:E1:71:88:87:27:08:65:2E:17:2D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EPqLNB5l-zf4XGIhycIZS4XLfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4fe76a-ab81-42a4-aecf-44644dd5ed44/1/3EPqLNB5l-zf4XGIhycIZS4XLfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:74:37:ff:66:64:6b:97:0b:61:cb:a3:b2:71:03:b2:f6:16:
         4a:be:cc:74:79:3a:9a:0a:07:6d:a5:ab:01:e9:f5:b7:f2:17:
         6a:a5:70:ed:2a:8c:7d:a9:99:ed:d5:d2:e0:94:f6:63:0a:c5:
         f6:a1:d3:c9:76:1d:8d:5f:ac:ed:98:71:7d:21:79:9f:4c:6f:
         83:e6:32:5a:f0:2d:70:b7:0a:4b:cc:06:95:23:96:f5:ac:06:
         bb:e0:d5:ec:58:fe:7c:86:21:01:da:db:d1:b5:20:af:7e:39:
         28:36:4a:77:e3:4d:19:f2:ca:69:7d:7a:8e:3a:19:f0:7d:9a:
         04:2c:f1:74:a5:d0:d3:11:4a:f6:42:d8:0b:31:60:f7:a5:7c:
         0f:5c:ac:31:49:a1:84:ee:06:5c:90:c9:9f:a0:36:27:2f:09:
         aa:08:a3:e7:a9:e3:f0:53:b6:85:23:f7:35:16:59:6a:5d:af:
         f6:d6:02:99:f0:4e:77:86:ad:6a:4f:71:a0:21:af:50:6d:27:
         13:62:1a:61:51:a9:8e:de:13:4f:6e:6a:f8:34:18:f0:58:b3:
         f0:35:53:ab:5a:1b:77:aa:64:14:0d:c3:df:f9:4f:25:73:82:
         cb:61:c8:89:15:65:6c:63:92:1d:14:ee:2f:49:00:56:54:d7:
         50:30:46:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:07 2026 by rpki-client