Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
File:                     78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft (raw, json)
Hash identifier:          c9/1Koh3Ue2+GdsDPcWuay5vlPs39G4xul74XBkB1L8=
Subject key identifier:   65:BF:2C:CC:99:A1:78:B6:4F:8E:F4:4A:93:43:DA:7B:39:97:72:DB
Authority key identifier: EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5
Certificate issuer:       /CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
Certificate serial:       019FA9E2AC3275F18078C7B772979683724F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
Manifest number:          15CA
Signing time:             Tue 28 Jul 2026 18:00:32 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:32 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:32 +0000
Files and hashes:         1: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl (hash: UmL0FGHi39hB1pHfspky76rwcXUFjo51pZ64nkmbrSs=)
                          2: l3l8yxUr9omdcAUQmmd6AOhV5wc.roa (hash: QwmCoU6dspwPSObVe7zaLFVkXzPFM4im8S89hkRVGe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:ac:32:75:f1:80:78:c7:b7:72:97:96:83:72:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5
        Validity
            Not Before: Jul 28 18:00:32 2026 GMT
            Not After : Jul 29 18:00:32 2026 GMT
        Subject: CN=65bf2ccc99a178b64f8ef44a9343da7b399772db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b0:0b:fb:ce:4e:d1:20:8b:d3:6d:c2:2b:e0:
                    aa:06:51:f0:55:fb:26:c9:c8:d9:79:06:7c:03:c7:
                    15:52:fd:5e:82:c0:05:18:56:d3:f1:d9:29:27:9f:
                    2b:bd:23:92:8a:2b:92:b4:27:8d:b6:6a:1c:48:bd:
                    7f:6e:5a:7a:cd:0c:1e:79:5f:23:af:95:89:b4:53:
                    08:3b:b8:04:88:e9:e7:b2:b0:5d:5e:dd:57:52:8f:
                    0d:fe:1c:27:12:f0:e5:8e:0a:a1:1c:87:dd:a2:10:
                    34:66:fb:00:f7:00:1c:6c:b4:96:cf:b4:bc:84:06:
                    a3:52:31:24:91:9a:e2:a4:bd:89:5a:87:db:82:5e:
                    1e:cd:26:64:38:87:49:24:95:81:70:07:91:ce:95:
                    2b:9d:63:be:77:b0:7b:b6:77:27:1f:e0:02:69:b7:
                    3b:61:31:d6:89:e7:27:d4:c6:c9:e4:d4:49:45:8e:
                    20:61:ca:e9:7b:b4:28:58:97:ac:b6:32:dc:d9:ae:
                    31:2b:0f:76:8b:5c:d6:7e:a9:9c:22:c1:c2:68:b9:
                    14:91:87:ee:63:91:07:67:9e:b8:ed:15:8f:0a:32:
                    6d:b4:59:5a:7c:26:f5:49:25:43:da:db:91:9e:f4:
                    8b:d0:cc:e3:c5:4c:04:21:4f:e8:59:b8:b2:58:42:
                    d8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BF:2C:CC:99:A1:78:B6:4F:8E:F4:4A:93:43:DA:7B:39:97:72:DB
            X509v3 Authority Key Identifier:
                keyid:EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:bc:64:17:89:2b:39:be:be:0f:79:88:9c:e3:8c:a7:2e:3b:
         96:1a:37:ba:87:61:f5:0c:c4:81:d0:89:60:c7:7c:6e:b5:0e:
         17:3a:ec:54:36:37:46:ec:25:34:0f:0b:59:ed:41:af:31:9e:
         8d:df:03:b8:2b:93:96:fe:a4:28:e5:47:28:9f:bd:ed:c0:54:
         7f:bc:68:44:18:e2:72:e3:b2:4e:39:5b:4b:4a:fa:eb:17:93:
         a5:93:a8:a0:2a:1c:45:2b:a7:fa:5c:35:00:b7:f3:e3:b9:1c:
         62:9d:73:5b:ee:2d:c0:50:c3:17:95:a3:70:d9:06:58:01:09:
         bf:59:24:1d:43:8e:89:97:11:69:7a:75:1f:54:16:62:65:c6:
         14:f0:67:64:79:d9:95:f4:be:cc:6d:94:5c:45:64:82:83:22:
         4c:10:a1:3b:14:6a:d4:01:44:ac:b1:7a:f4:6e:51:e7:f2:8f:
         b5:18:a2:b6:44:7d:9a:ee:9c:c1:e6:40:c6:47:75:85:fd:88:
         c3:cb:a5:ba:e7:5a:0b:28:c6:e9:f2:64:ab:e3:cd:15:0c:6d:
         ae:b8:1d:b6:41:0b:30:a0:73:9e:85:02:2b:3c:47:9e:bb:db:
         72:73:38:0c:ed:bd:3b:3d:57:bb:63:11:11:d9:5d:ff:e5:60:
         15:4a:da:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:29:55 2026 by rpki-client