Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
File:                     79rqxvigN0g5cw_IVnlXCeGO2RY.mft (raw, json)
Hash identifier:          vfpK9PeWXjEbQONjy0RHcfAuonQ9L/jv+xi4J+/68VM=
Subject key identifier:   29:A9:71:56:4F:C4:8C:BC:A2:CD:7C:55:F4:E2:BB:9F:BA:96:12:72
Authority key identifier: EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
Certificate issuer:       /CN=efdaeac6f8a0374839730fc856795709e18ed916
Certificate serial:       019EB8EAC8164B409FF9310A3DB517548CC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
Manifest number:          18E7
Signing time:             Thu 11 Jun 2026 23:00:54 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:54 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:54 +0000
Files and hashes:         1: 79rqxvigN0g5cw_IVnlXCeGO2RY.crl (hash: qTjFtofsUzr3L5RsGvYY/oT97RBU3kPAuCavpYYeqnw=)
                          2: oXioQd61dHXxrQktudDX7mhO5jM.roa (hash: WotYCxCvc5bTkZKJ4SaRQI3ZLywSWPDXJlcekc+/TXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:c8:16:4b:40:9f:f9:31:0a:3d:b5:17:54:8c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efdaeac6f8a0374839730fc856795709e18ed916
        Validity
            Not Before: Jun 11 23:00:54 2026 GMT
            Not After : Jun 12 23:00:54 2026 GMT
        Subject: CN=29a971564fc48cbca2cd7c55f4e2bb9fba961272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:14:ef:ef:78:2d:f2:e3:64:8a:9a:43:ba:
                    1a:7f:eb:f5:79:25:b8:54:0f:9a:8b:6d:b2:b0:f9:
                    1c:00:42:78:43:bc:37:f0:5f:d9:04:03:3e:f2:d3:
                    be:8d:f7:44:c8:93:56:4c:8e:5b:db:68:e9:a0:f6:
                    c9:50:ae:dc:81:21:7f:a4:a0:06:48:ea:32:6a:fc:
                    b7:19:49:0b:9c:66:a2:b9:17:3c:04:50:c3:7b:f2:
                    3c:f0:57:23:ff:e8:72:47:92:73:51:8c:03:5f:c8:
                    de:2b:5d:ac:b1:29:c6:18:3b:a2:40:ed:bb:d8:c8:
                    f5:82:56:8f:31:6a:3d:80:8a:68:11:5d:82:c3:a8:
                    fa:7c:81:8d:6e:66:5d:70:78:f7:5c:7b:8d:fa:28:
                    4a:02:b8:fc:41:ef:9a:93:10:de:d9:3b:24:74:d5:
                    d3:46:98:8e:60:35:f6:9a:81:b8:2b:bb:ba:96:84:
                    f5:83:59:49:80:89:8a:ee:79:ba:86:fa:ac:0c:42:
                    3c:5c:65:d8:8d:51:34:60:ad:2f:be:51:69:7d:f4:
                    20:db:4e:c0:6a:dd:f8:07:17:b6:5f:f3:38:7b:f6:
                    06:8a:53:1a:dc:59:57:75:45:e1:b6:d1:97:aa:b1:
                    4b:48:ee:60:d4:03:26:50:34:18:75:d8:18:60:c9:
                    54:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A9:71:56:4F:C4:8C:BC:A2:CD:7C:55:F4:E2:BB:9F:BA:96:12:72
            X509v3 Authority Key Identifier:
                keyid:EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d0:01:25:49:17:6f:2d:6f:89:79:cf:36:40:8f:b3:25:54:
         07:80:1b:ec:ec:4c:a8:b5:58:99:60:24:aa:2a:28:f9:a3:f2:
         04:2a:5a:ac:ed:f3:fa:34:3c:ef:a1:a3:57:1c:84:c8:a6:6d:
         7e:96:e8:0e:be:ee:be:a9:38:a2:00:b0:0c:fd:33:64:60:f4:
         fc:6e:8a:8f:df:6a:ff:11:75:b8:63:d9:93:d2:92:d9:65:2e:
         b2:65:18:a2:c2:dd:5a:a7:88:df:5a:5b:1e:15:f0:6d:5b:99:
         7b:81:b2:6f:5a:b0:cd:da:34:72:81:ab:b7:14:35:02:dc:bf:
         ba:4e:da:d5:87:b6:68:28:9a:75:bf:e0:4f:55:40:fa:fc:58:
         00:4c:be:ef:8f:33:14:05:8b:63:66:f2:94:f5:95:ca:91:33:
         c5:c8:98:7d:d0:f3:47:97:a0:78:8f:48:20:b5:04:bb:e1:1b:
         3f:02:67:40:8b:16:4a:03:b2:5f:dc:e1:0c:b6:b5:65:c7:da:
         cd:ba:c8:70:f8:a2:4d:5a:34:8a:bd:a3:6e:98:27:b4:ac:e2:
         01:7b:7c:b3:5e:6c:71:c2:29:db:3b:80:78:fb:6b:e6:b6:9e:
         68:79:69:58:bb:fb:3e:67:cc:c3:3a:a9:b6:34:e7:34:c0:3e:
         03:c5:d7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:04:21 2026 by rpki-client