Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
File:                     77RcySOXjBokve6WzHs683OG0qg.mft (raw, json)
Hash identifier:          ugLHKUW3/xlyf7leE2zNz7i80gxl1p2/ICyPoQ4Rq0Y=
Subject key identifier:   9F:BD:73:68:93:FF:B7:00:BB:FC:10:59:B3:8A:FD:3C:55:85:C6:38
Authority key identifier: EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8
Certificate issuer:       /CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
Certificate serial:       019D9AAB8FDE776109200871B42415A841D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
Manifest number:          1064
Signing time:             Fri 17 Apr 2026 09:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:27 +0000
Files and hashes:         1: 77RcySOXjBokve6WzHs683OG0qg.crl (hash: /48rJQM06YnGl8LFhUHWwxe+CfRRrAhDJtNg5yK6Ftw=)
                          2: u_-bKVkvV1_IEBiW7GWJfYQG3Kw.roa (hash: Cp1BYoJHxmwK4gyFN+04N6JzdugvrevYPjr0cqKdM10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:8f:de:77:61:09:20:08:71:b4:24:15:a8:41:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efb45cc923978c1a24bdee96cc7b3af37386d2a8
        Validity
            Not Before: Apr 17 09:00:27 2026 GMT
            Not After : Apr 18 09:00:27 2026 GMT
        Subject: CN=9fbd736893ffb700bbfc1059b38afd3c5585c638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b9:09:f2:11:18:7f:54:d8:72:a3:1d:75:8b:
                    26:8a:36:18:61:06:e0:8c:0a:dc:ba:b4:96:36:60:
                    79:e4:dc:ad:3c:71:96:76:f9:d0:c9:71:16:c2:fd:
                    f5:07:32:fb:87:f4:3f:c0:2c:2d:b1:4a:10:58:77:
                    d2:e7:46:ab:45:86:ba:df:10:7c:8e:db:60:1e:15:
                    54:77:7e:63:c7:74:ab:c9:c2:fd:2f:25:25:df:24:
                    c3:1c:bf:ea:66:d3:28:ea:9c:d3:bd:48:de:71:a0:
                    67:f7:5a:7a:6b:6f:08:5d:14:1d:f0:87:e2:9e:b1:
                    8f:b8:54:52:62:ab:99:64:3e:96:11:a0:82:7b:c8:
                    da:2e:9b:50:4d:87:6e:d8:7f:1f:54:54:85:02:34:
                    e1:81:5d:56:6d:7e:7d:ab:e3:16:ba:60:d4:02:c3:
                    90:a2:ab:81:d0:f3:3d:42:a9:d4:46:a1:30:ab:af:
                    ea:e0:92:0d:39:3c:32:5d:ec:23:e3:61:19:97:55:
                    64:ef:29:1e:2e:58:0c:92:d4:2c:20:a7:18:3a:0b:
                    be:46:1c:ad:be:08:9e:f6:84:b6:b8:1e:3e:b9:40:
                    b1:85:18:32:fa:72:9f:1e:03:1d:42:fa:63:db:c9:
                    ca:7a:a4:c1:29:11:b6:b6:10:7c:2f:21:f8:50:d8:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BD:73:68:93:FF:B7:00:BB:FC:10:59:B3:8A:FD:3C:55:85:C6:38
            X509v3 Authority Key Identifier:
                keyid:EF:B4:5C:C9:23:97:8C:1A:24:BD:EE:96:CC:7B:3A:F3:73:86:D2:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/77RcySOXjBokve6WzHs683OG0qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/aac010-5ef0-4844-b233-4457ebea5a45/1/77RcySOXjBokve6WzHs683OG0qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d2:aa:33:f3:af:8c:ca:d9:80:a5:06:f8:65:5c:2a:fc:8d:
         00:d9:7f:7a:60:f5:25:d0:07:c7:7d:91:d7:46:e1:98:40:6b:
         46:c6:14:37:bb:5f:bc:67:bb:b2:4e:0c:a2:56:e2:bb:ed:56:
         6c:2d:da:6a:61:28:bb:15:6d:48:4c:3d:1e:99:cf:e2:c8:9f:
         3c:2c:bd:b8:f0:f2:cd:95:05:3b:08:13:2a:ad:7b:39:c0:35:
         58:9b:fb:13:d8:b9:dd:2c:e3:6f:92:36:65:9d:7d:54:dd:d9:
         58:1c:e8:ed:e2:83:d5:a2:bf:7c:68:74:3b:63:1b:10:22:78:
         ee:ea:ea:cd:15:d2:1d:a9:75:aa:c7:d6:7e:66:fc:0e:49:41:
         1a:f3:01:29:4b:ad:e6:54:a4:f7:f5:6d:b7:9c:6a:b0:6c:d8:
         cd:97:a9:28:ee:9b:22:53:8b:bd:54:bf:82:64:e9:a7:ac:b9:
         a2:07:6f:9f:34:cd:78:48:15:7f:04:87:47:36:d3:66:07:83:
         84:79:98:81:14:d4:28:af:7d:78:a4:3a:fc:bd:eb:16:58:4a:
         64:e3:91:05:07:95:ca:f2:17:e2:09:d8:33:fc:db:98:d9:55:
         ae:05:62:3f:fc:12:e0:e7:f9:6c:32:3e:24:0d:9a:8b:16:c0:
         45:26:1f:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq4/ed2EJIAhxtCQVqEHRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYjQ1Y2M5MjM5NzhjMWEyNGJkZWU5NmNjN2IzYWYzNzM4
NmQyYTgwHhcNMjYwNDE3MDkwMDI3WhcNMjYwNDE4MDkwMDI3WjAzMTEwLwYDVQQD
Eyg5ZmJkNzM2ODkzZmZiNzAwYmJmYzEwNTliMzhhZmQzYzU1ODVjNjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LkJ8hEYf1TYcqMddYsmijYYYQbg
jArcurSWNmB55NytPHGWdvnQyXEWwv31BzL7h/Q/wCwtsUoQWHfS50arRYa63xB8
jttgHhVUd35jx3SrycL9LyUl3yTDHL/qZtMo6pzTvUjecaBn91p6a28IXRQd8Ifi
nrGPuFRSYquZZD6WEaCCe8jaLptQTYdu2H8fVFSFAjThgV1WbX59q+MWumDUAsOQ
oquB0PM9QqnURqEwq6/q4JINOTwyXewj42EZl1Vk7ykeLlgMktQsIKcYOgu+Rhyt
vgie9oS2uB4+uUCxhRgy+nKfHgMdQvpj28nKeqTBKRG2thB8LyH4UNirgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+9c2iT/7cAu/wQWbOK/TxVhcY4MB8GA1UdIwQY
MBaAFO+0XMkjl4waJL3ulsx7OvNzhtKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzdSY3lTT1hqQm9rdmU2V3pIczY4M09HMHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYWMwMTAtNWVmMC00ODQ0LWIyMzMt
NDQ1N2ViZWE1YTQ1LzEvNzdSY3lTT1hqQm9rdmU2V3pIczY4M09HMHFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hYWMwMTAtNWVmMC00ODQ0LWIyMzMtNDQ1N2ViZWE1YTQ1
LzEvNzdSY3lTT1hqQm9rdmU2V3pIczY4M09HMHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9KqM/Ov
jMrZgKUG+GVcKvyNANl/emD1JdAHx32R10bhmEBrRsYUN7tfvGe7sk4Molbiu+1W
bC3aamEouxVtSEw9HpnP4sifPCy9uPDyzZUFOwgTKq17OcA1WJv7E9i53Szjb5I2
ZZ19VN3ZWBzo7eKD1aK/fGh0O2MbECJ47urqzRXSHal1qsfWfmb8DklBGvMBKUut
5lSk9/Vtt5xqsGzYzZepKO6bIlOLvVS/gmTpp6y5ogdvnzTNeEgVfwSHRzbTZgeD
hHmYgRTUKK99eKQ6/L3rFlhKZOORBQeVyvIX4gnYM/zbmNlVrgViP/wS4Of5bDI+
JA2aixbARSYfoA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:44:27 2026 by rpki-client