Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
File:                     79XDTJ_TJEnLwIirENkbWkq1Nho.mft (raw, json)
Hash identifier:          eyE4lMY3Je26OU8Ar4ml+g82SZWYE0C79Va1HYuoMdo=
Subject key identifier:   4B:9D:4B:0F:71:D6:39:B5:78:4A:D7:2E:81:C8:F3:ED:2E:14:D4:1D
Authority key identifier: EF:D5:C3:4C:9F:D3:24:49:CB:C0:88:AB:10:D9:1B:5A:4A:B5:36:1A
Certificate issuer:       /CN=efd5c34c9fd32449cbc088ab10d91b5a4ab5361a
Certificate serial:       01A00213C7F8A72997C04EB9F22F6FD61DA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
Manifest number:          09D8
Signing time:             Fri 14 Aug 2026 21:00:45 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:45 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:45 +0000
Files and hashes:         1: 79XDTJ_TJEnLwIirENkbWkq1Nho.crl (hash: aBtbLyei2HbRXRDuxYSY+3PjNhBPyI8Vq9UpArGtUZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:c7:f8:a7:29:97:c0:4e:b9:f2:2f:6f:d6:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd5c34c9fd32449cbc088ab10d91b5a4ab5361a
        Validity
            Not Before: Aug 14 21:00:45 2026 GMT
            Not After : Aug 15 21:00:45 2026 GMT
        Subject: CN=4b9d4b0f71d639b5784ad72e81c8f3ed2e14d41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:91:60:2c:ab:06:a4:ef:54:04:de:7f:f9:13:
                    03:eb:0a:a7:d9:69:4a:73:2a:55:53:26:56:7c:c9:
                    c8:a1:91:35:c0:1a:86:06:e4:45:aa:5c:7b:1d:b4:
                    dd:08:a6:03:20:79:9d:a8:db:00:fc:5d:9e:94:fb:
                    7d:d7:8d:13:fa:5d:af:8d:65:c1:95:6b:04:92:4a:
                    b0:28:50:2d:79:43:a2:e0:a7:40:3c:24:18:19:0d:
                    48:ee:95:57:23:c7:1f:92:3e:d1:b1:39:2b:c0:e6:
                    00:20:c7:9e:be:54:af:79:88:d0:53:8d:70:c4:b8:
                    12:30:1a:16:96:dc:7b:31:fc:a9:1a:90:95:a5:cd:
                    27:a0:55:92:e4:6e:38:85:2a:fc:c6:48:92:08:5b:
                    25:59:2d:c8:93:a7:b9:55:6b:c3:de:a1:f2:c1:43:
                    e7:aa:ad:81:cf:9f:54:e7:86:4d:de:95:e2:31:6a:
                    26:ac:c0:c3:e7:a1:c8:34:80:fc:97:58:59:ca:77:
                    ac:60:e7:3d:ea:48:2d:b7:27:4a:2e:c2:e3:11:c6:
                    21:41:e9:08:b8:e4:61:df:56:b3:fe:25:37:b1:df:
                    99:50:f2:ed:6c:ff:e7:23:ec:a3:d1:4f:7d:da:fd:
                    9c:44:91:4b:47:e3:69:e1:18:39:27:b4:b4:cc:1e:
                    5c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9D:4B:0F:71:D6:39:B5:78:4A:D7:2E:81:C8:F3:ED:2E:14:D4:1D
            X509v3 Authority Key Identifier:
                keyid:EF:D5:C3:4C:9F:D3:24:49:CB:C0:88:AB:10:D9:1B:5A:4A:B5:36:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:c0:90:43:1e:6d:e1:80:ed:e9:b8:c8:25:a4:91:97:d9:d7:
         7d:ca:2a:31:f8:c5:8a:36:72:84:8b:f0:85:46:57:fc:66:82:
         df:a3:b2:47:37:de:e9:82:1a:cd:83:71:bd:f8:98:43:e0:8d:
         c7:36:b6:57:5a:67:7a:92:39:7e:96:3a:86:9d:9c:5f:d0:15:
         ec:ca:0b:fe:d1:f2:9d:f4:c8:d0:03:ef:8f:0f:47:93:f1:8b:
         3d:2f:6d:fc:da:32:53:69:31:e1:72:84:23:dd:4d:33:46:9a:
         18:37:7d:86:23:cf:ce:29:35:a3:c8:d1:99:e6:27:bc:bc:43:
         27:61:30:06:34:57:a3:16:19:9d:c3:d3:a3:df:f8:8e:5b:bd:
         71:6e:f2:bb:ef:d2:d8:46:8e:fe:b8:63:cd:b5:90:ed:0a:87:
         cf:08:c8:d3:e4:47:bd:07:5a:a2:a2:75:a6:18:50:1d:b1:ad:
         be:10:0d:2d:b9:3c:93:00:fc:ac:9b:94:80:9c:ad:2d:33:10:
         79:66:e8:70:f9:ea:bc:6f:78:96:a9:8e:27:6a:79:22:18:b5:
         97:74:85:56:c8:db:4e:27:db:47:2b:10:bf:8f:0a:2d:b1:30:
         09:e7:9b:15:98:0b:b7:fb:ad:79:5a:3e:7e:40:4a:3d:85:50:
         84:84:2d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:30:48 2026 by rpki-client