Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
File:                     78NgXDK7yF0jXwqc6PRfB5a3I8s.mft (raw, json)
Hash identifier:          yUoiIaFtOK0hk0jkTO1Igq347WUHPV3/JJKbFoJvduQ=
Subject key identifier:   18:6F:31:94:4F:4B:EC:6B:48:E1:A3:02:7F:4D:44:2F:FF:60:D0:CC
Authority key identifier: EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB
Certificate issuer:       /CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
Certificate serial:       019CAAFD4F20910749CBFB50473E5F6DA302
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
Manifest number:          0BB8
Signing time:             Sun 01 Mar 2026 20:00:53 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:53 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:53 +0000
Files and hashes:         1: 78NgXDK7yF0jXwqc6PRfB5a3I8s.crl (hash: VEpD0ofp7lZpznrMvxFBcDx+80otEaNXJrNDbWeH3B4=)
                          2: U6lz5micbQvsEzEwVp3dL7mR1Os.roa (hash: NW13lN/avpR4aBD/HcMl0sRLodoqqzCepoA5qJR1XKA=)
                          3: WH8m0TMkVXBPbucXPDw6oUIRye4.roa (hash: IB0keQjNG9LRUVYhpn54n8Irz+pRxwCtrbopId4wJAg=)
                          4: t4MpcNa2tIl4W9G2LCTJWkEphB8.roa (hash: xbauCMbU4PS3RK6IhRtrAnQJjuwdmggI6BkwUnHhNwY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:4f:20:91:07:49:cb:fb:50:47:3e:5f:6d:a3:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc3605c32bbc85d235f0a9ce8f45f0796b723cb
        Validity
            Not Before: Mar  1 20:00:53 2026 GMT
            Not After : Mar  2 20:00:53 2026 GMT
        Subject: CN=186f31944f4bec6b48e1a3027f4d442fff60d0cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:69:2e:c8:84:3c:c7:b1:51:54:63:cc:bd:a0:
                    a9:36:ee:08:dd:be:81:08:f1:7d:3f:a7:ff:f8:77:
                    ef:71:00:ec:6c:12:50:6b:a3:17:5d:fd:0a:d4:25:
                    7c:05:f4:f7:fb:22:69:9b:5c:9c:55:74:d5:eb:67:
                    7b:cb:59:43:8b:06:15:4f:34:39:ea:b8:51:0b:5d:
                    47:1d:aa:02:82:2e:f7:6c:65:ed:78:69:72:cc:75:
                    b5:ea:73:3c:c1:26:e7:0e:8a:90:09:d9:6d:78:fa:
                    09:52:0b:80:aa:2e:90:55:61:0a:5b:cd:b9:f8:48:
                    ec:5c:d8:7a:06:ff:aa:e2:bf:1c:1e:c4:ad:ca:99:
                    f3:25:4c:ab:b5:de:7d:3f:a4:bf:68:58:b4:2b:a1:
                    1f:19:92:3b:20:f1:72:cf:14:4e:eb:dd:8d:e8:95:
                    5b:22:f9:fd:4a:99:be:a5:22:8b:6c:b0:30:42:d6:
                    1b:8b:33:a3:be:f8:31:19:06:68:1b:99:b4:4c:11:
                    f6:54:aa:70:3f:82:a0:e6:79:ef:fe:85:6e:79:97:
                    5e:d4:ae:ba:b7:66:2b:f8:68:1f:01:4e:b4:3e:bc:
                    3c:3d:ba:a9:b4:37:58:d9:ea:80:2d:23:b9:c6:cb:
                    d1:e3:69:cb:56:22:d4:05:d4:90:6a:14:b7:37:58:
                    c5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6F:31:94:4F:4B:EC:6B:48:E1:A3:02:7F:4D:44:2F:FF:60:D0:CC
            X509v3 Authority Key Identifier:
                keyid:EF:C3:60:5C:32:BB:C8:5D:23:5F:0A:9C:E8:F4:5F:07:96:B7:23:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78NgXDK7yF0jXwqc6PRfB5a3I8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/e62169-486d-4054-b121-f2c8ba021ca8/1/78NgXDK7yF0jXwqc6PRfB5a3I8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b6:1b:15:a5:bf:e6:60:73:4d:cd:28:20:9d:f5:34:f2:fd:
         68:d6:30:7b:17:7a:dc:ed:42:fc:84:29:e0:3c:95:e1:da:85:
         7c:30:55:e9:d4:86:e9:02:ed:e4:bb:05:c8:79:f0:d0:80:5b:
         ff:b3:63:38:c2:37:17:61:e7:e5:4a:3c:c0:ec:5a:48:64:1c:
         dc:47:07:c9:82:18:10:19:96:27:d5:9d:27:63:f1:82:ab:ca:
         05:48:7f:ba:9e:53:d4:5d:cc:f1:e3:57:39:51:78:c1:7f:cc:
         4e:86:9c:c3:cc:b9:31:af:d5:31:00:e6:d9:de:72:34:66:0f:
         af:43:29:12:f2:91:84:9e:ae:3e:6d:44:d2:20:ad:f7:66:52:
         5f:74:3e:43:f9:4f:ee:76:0b:21:46:20:30:56:2d:6e:05:ee:
         57:64:24:90:99:ec:86:97:0e:a7:fe:1f:3c:39:4b:6c:1e:0b:
         45:1b:ac:66:42:95:df:0c:49:95:82:c7:7f:7b:89:bf:03:40:
         cf:dc:96:6c:26:b2:41:5a:2d:97:20:aa:62:1b:1e:7e:45:68:
         7a:16:0d:61:e8:ce:ed:cb:71:fd:e7:8f:87:86:8b:82:1f:82:
         5a:0d:65:87:b7:cb:68:3f:0f:b7:89:fd:62:dc:27:67:3b:8a:
         60:b2:39:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:41 2026 by rpki-client