Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
File:                     79XDTJ_TJEnLwIirENkbWkq1Nho.mft (raw, json)
Hash identifier:          GeBX/QVku1YH3WKF1tanQMVpZIlBevXsMK8t1Mixnsc=
Subject key identifier:   4B:AB:A2:51:72:10:E5:06:CF:83:BC:3D:A6:BD:C8:37:3E:AB:57:7D
Authority key identifier: EF:D5:C3:4C:9F:D3:24:49:CB:C0:88:AB:10:D9:1B:5A:4A:B5:36:1A
Certificate issuer:       /CN=efd5c34c9fd32449cbc088ab10d91b5a4ab5361a
Certificate serial:       019E30A99092CD90228773E1D171763509BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
Manifest number:          08E7
Signing time:             Sat 16 May 2026 12:01:19 +0000
Manifest this update:     Sat 16 May 2026 12:01:19 +0000
Manifest next update:     Sun 17 May 2026 12:01:19 +0000
Files and hashes:         1: 79XDTJ_TJEnLwIirENkbWkq1Nho.crl (hash: XlYXbd+VQJWtUbD1fT3rHiFra7ACheJUE2dD/gLTYYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:a9:90:92:cd:90:22:87:73:e1:d1:71:76:35:09:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd5c34c9fd32449cbc088ab10d91b5a4ab5361a
        Validity
            Not Before: May 16 12:01:19 2026 GMT
            Not After : May 17 12:01:19 2026 GMT
        Subject: CN=4baba2517210e506cf83bc3da6bdc8373eab577d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:22:5a:06:8d:a4:57:fe:40:58:54:26:dc:c3:
                    08:b0:24:c5:21:27:a3:af:f2:a3:79:c6:8d:c1:10:
                    11:69:dd:dc:69:63:db:c1:f2:06:3f:d3:f3:0e:5a:
                    1b:e8:c2:7c:6d:60:d1:67:bb:f6:80:35:d8:0b:0a:
                    59:cc:98:04:bb:76:cd:c0:92:79:9a:2d:06:07:86:
                    16:1f:15:47:14:0d:46:66:98:6c:47:02:43:a1:df:
                    33:03:14:eb:67:5a:c9:57:02:33:a5:5e:44:21:07:
                    31:a7:83:12:4d:52:82:fe:b2:37:d8:d7:59:ae:c1:
                    d0:f3:39:d3:11:c6:10:8b:8b:91:25:20:c7:8b:c8:
                    ee:96:8b:85:bd:06:e8:64:e2:dd:00:99:73:d4:2c:
                    98:aa:ba:48:2a:fa:8b:fe:b2:3b:37:e1:e2:cf:53:
                    11:37:81:6c:74:35:f7:a7:4a:b5:8f:a1:50:71:7f:
                    ea:fb:e7:82:85:31:ba:49:31:d8:b8:a4:15:60:9e:
                    93:0d:dc:b3:c8:c2:21:89:16:57:c2:d9:83:2e:03:
                    b9:e5:7e:8b:6a:6b:47:de:3d:2a:29:c9:44:e9:3a:
                    8f:24:8a:e4:88:4d:83:c4:c7:2c:bd:ba:90:b3:3e:
                    8c:b8:13:a3:69:a2:06:9c:d9:8e:67:d6:27:52:be:
                    2a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AB:A2:51:72:10:E5:06:CF:83:BC:3D:A6:BD:C8:37:3E:AB:57:7D
            X509v3 Authority Key Identifier:
                keyid:EF:D5:C3:4C:9F:D3:24:49:CB:C0:88:AB:10:D9:1B:5A:4A:B5:36:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b9:1d:aa:7a:8d:a4:ae:30:b6:aa:73:88:c7:25:a2:b2:f5:
         70:f6:25:22:64:51:4b:39:10:b3:47:1a:0a:b7:cd:7a:2e:45:
         d0:1b:ab:67:b2:c7:00:d7:5a:d4:17:e7:3a:cd:b5:4f:ee:78:
         04:71:73:e8:1e:77:f3:b2:29:81:c4:4a:92:85:07:ea:3a:51:
         5e:8a:5c:fd:72:9e:15:f1:3d:a7:c4:ba:e0:2c:b6:86:18:96:
         e6:90:1e:ea:51:fa:59:b3:f1:1c:3c:e8:b8:4c:87:f7:9b:04:
         a9:38:a5:c1:8d:29:db:a7:a3:f6:66:e8:db:51:91:d3:8c:77:
         bf:13:fd:11:bd:dc:75:79:e7:b3:33:6a:8d:52:7c:a3:d2:40:
         eb:29:db:f5:80:3d:67:b4:9e:92:25:5f:28:de:42:73:12:22:
         87:69:92:ad:e7:8d:2b:65:27:81:d6:50:dd:90:52:0e:b0:f5:
         8b:e5:cd:fd:6e:52:01:55:ef:8f:b6:d9:4d:1d:ad:b9:f7:0e:
         b3:7d:98:f0:04:81:0b:65:ce:3c:7f:e2:d1:67:f2:93:3f:50:
         39:a8:eb:8b:e0:fe:d5:78:0b:4a:96:ce:31:ec:6a:2f:62:4d:
         e9:73:a1:47:59:49:2a:d7:c4:c8:b2:fe:61:37:41:6b:0c:f0:
         44:cd:f7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:26:17 2026 by rpki-client