Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/139d97-5068-4143-b94e-58b246de5b33/1/78Xbv2Q-C4qlG0N8qu9wD94sV1k.mft
File:                     78Xbv2Q-C4qlG0N8qu9wD94sV1k.mft (raw, json)
Hash identifier:          ZEGsIAp07ItlwpeC4dCP0KCtwSBUaV+xZoMPy/AhSno=
Subject key identifier:   2C:F8:3A:AE:44:F2:02:DE:85:21:1F:76:E1:68:53:9D:F2:FF:9E:A9
Authority key identifier: EF:C5:DB:BF:64:3E:0B:8A:A5:1B:43:7C:AA:EF:70:0F:DE:2C:57:59
Certificate issuer:       /CN=efc5dbbf643e0b8aa51b437caaef700fde2c5759
Certificate serial:       01A0DC84D689B04975E4866EAB537AA52EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/78Xbv2Q-C4qlG0N8qu9wD94sV1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/139d97-5068-4143-b94e-58b246de5b33/1/78Xbv2Q-C4qlG0N8qu9wD94sV1k.mft
Manifest number:          020C
Signing time:             Sat 26 Sep 2026 07:01:28 +0000
Manifest this update:     Sat 26 Sep 2026 07:01:28 +0000
Manifest next update:     Sun 27 Sep 2026 07:01:28 +0000
Files and hashes:         1: 5fz1zKYJK1UTJkPiRCb-jDr6mSk.asa (hash: 44T26rsoEycmXc15VpmD9Up9fj9Nmv9b3qSTrcMSSmg=)
                          2: 78Xbv2Q-C4qlG0N8qu9wD94sV1k.crl (hash: nm/brUUE6IvTAS12S6+UaTSJND8hiwMppgcOpExbCoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/139d97-5068-4143-b94e-58b246de5b33/1/78Xbv2Q-C4qlG0N8qu9wD94sV1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/139d97-5068-4143-b94e-58b246de5b33/1/78Xbv2Q-C4qlG0N8qu9wD94sV1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/78Xbv2Q-C4qlG0N8qu9wD94sV1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:84:d6:89:b0:49:75:e4:86:6e:ab:53:7a:a5:2e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc5dbbf643e0b8aa51b437caaef700fde2c5759
        Validity
            Not Before: Sep 26 07:01:28 2026 GMT
            Not After : Sep 27 07:01:28 2026 GMT
        Subject: CN=2cf83aae44f202de85211f76e168539df2ff9ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:41:7a:00:a7:e9:1d:9f:a7:35:0c:a6:b7:b2:
                    3b:ca:8a:50:61:3a:77:b9:57:29:68:1c:4a:42:21:
                    8a:1c:36:f8:22:82:7f:f5:f2:82:ed:7f:23:97:19:
                    f1:44:16:27:35:79:a9:ef:b7:27:2d:39:c0:61:53:
                    dc:2b:6e:fc:38:1e:fe:89:20:68:73:bd:93:83:1f:
                    c0:b1:33:56:b1:65:a4:c6:ee:99:4e:2f:b5:c8:f5:
                    1e:97:26:76:1e:54:6f:11:49:fa:6c:65:96:1f:69:
                    17:a1:de:df:56:14:c1:03:33:b3:3c:bc:f0:6a:ed:
                    8d:8b:5c:57:d7:6b:6d:99:1f:b9:8e:ba:be:8c:5f:
                    bd:db:84:17:82:8c:95:4b:70:28:84:01:bd:ff:60:
                    be:8c:c1:63:7c:45:25:a5:a7:ec:a1:15:34:71:ff:
                    04:d4:ce:69:4a:5d:06:79:ba:d9:e5:b7:79:ab:c3:
                    5f:db:34:37:6d:5d:26:65:88:59:eb:a1:7a:93:07:
                    f1:b6:b4:00:ae:d8:4f:8f:f1:10:a3:e8:39:b3:57:
                    54:b0:d6:4b:a6:05:3a:ef:76:15:88:56:11:7d:69:
                    50:ac:4c:c7:d7:f5:69:83:b0:a3:4a:30:a4:a6:40:
                    f5:9a:63:b0:a2:68:8c:e4:d4:d4:3e:d0:1b:47:4d:
                    a8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F8:3A:AE:44:F2:02:DE:85:21:1F:76:E1:68:53:9D:F2:FF:9E:A9
            X509v3 Authority Key Identifier:
                keyid:EF:C5:DB:BF:64:3E:0B:8A:A5:1B:43:7C:AA:EF:70:0F:DE:2C:57:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78Xbv2Q-C4qlG0N8qu9wD94sV1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/139d97-5068-4143-b94e-58b246de5b33/1/78Xbv2Q-C4qlG0N8qu9wD94sV1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/139d97-5068-4143-b94e-58b246de5b33/1/78Xbv2Q-C4qlG0N8qu9wD94sV1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ef:c2:50:c8:8f:a7:71:33:fe:09:75:34:d7:f6:da:5e:fb:
         5f:ee:57:0d:f5:88:38:7e:a8:dc:3c:f3:e9:33:60:13:c1:98:
         bf:27:87:64:97:63:50:f3:5f:a5:79:0a:65:ae:7c:32:ca:98:
         8a:bc:63:ca:71:52:dc:0f:1e:c3:72:6f:c3:da:5b:91:ba:b4:
         4b:69:26:dc:e4:aa:2d:ed:af:19:14:9d:d9:95:2a:89:42:aa:
         85:6d:a3:5e:4f:1d:c6:f1:78:39:24:3b:a8:ed:84:68:7f:05:
         06:1e:d7:11:3b:dd:79:57:1e:79:c5:77:97:d5:7c:bc:0f:f6:
         a0:6d:85:3d:24:37:e9:35:5a:37:23:d4:30:ec:4c:18:a4:be:
         0a:d7:a5:99:75:b5:83:2e:9f:a5:2e:ed:1c:6d:3a:b3:21:29:
         5a:3f:59:b8:8b:8a:5a:73:24:2b:21:22:4c:31:c5:31:d9:11:
         5e:ca:4d:ad:d8:0b:e4:83:33:17:52:e0:ad:28:fe:f6:65:2e:
         6f:15:16:fd:22:e2:57:50:ef:a1:8d:27:6b:1b:a1:2c:98:86:
         d4:08:36:34:6f:da:a0:3b:78:b7:47:80:26:6e:55:bd:fd:e2:
         e8:6b:5e:ad:43:ac:90:56:95:c7:95:3f:e3:24:fc:f9:d8:61:
         a0:48:ca:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:30:29 2026 by rpki-client