Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft
File:                     79pPUsK3lM5LX38h4ySxubEGXRw.mft (raw, json)
Hash identifier:          phfkfTRptvBe2tCRque/Bhf2yiBivHLitUbHuw8pko4=
Subject key identifier:   DC:F5:40:47:27:C8:23:E7:8E:96:2D:53:41:A0:07:F4:52:2A:23:41
Authority key identifier: EF:DA:4F:52:C2:B7:94:CE:4B:5F:7F:21:E3:24:B1:B9:B1:06:5D:1C
Certificate issuer:       /CN=efda4f52c2b794ce4b5f7f21e324b1b9b1065d1c
Certificate serial:       019E601539A9F9B64B244FBA874E497AC7B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79pPUsK3lM5LX38h4ySxubEGXRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft
Manifest number:          0140
Signing time:             Mon 25 May 2026 17:01:04 +0000
Manifest this update:     Mon 25 May 2026 17:01:04 +0000
Manifest next update:     Tue 26 May 2026 17:01:04 +0000
Files and hashes:         1: 79pPUsK3lM5LX38h4ySxubEGXRw.crl (hash: HwzE/f/+DJlLYHoNG28q9o9mqF9Owbj/sk8Y4OH4g4o=)
                          2: swO-HTW4j5qDDjQOOjuNXgqW8xU.roa (hash: XU3HpZ66wu/qbtiav87O6TEaXO9w/HkLcs/bSmMTwpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79pPUsK3lM5LX38h4ySxubEGXRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 May 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:60:15:39:a9:f9:b6:4b:24:4f:ba:87:4e:49:7a:c7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efda4f52c2b794ce4b5f7f21e324b1b9b1065d1c
        Validity
            Not Before: May 25 17:01:04 2026 GMT
            Not After : May 26 17:01:04 2026 GMT
        Subject: CN=dcf5404727c823e78e962d5341a007f4522a2341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b5:1d:55:57:85:a7:62:d8:8e:e8:b5:18:06:
                    4a:13:a8:42:52:c6:8c:ac:e5:fb:84:eb:db:7c:25:
                    65:9a:39:68:85:0e:fe:c3:6d:0d:cb:62:96:8c:e9:
                    5b:fe:83:c7:d5:bb:66:0f:60:d9:d9:75:e9:51:02:
                    fa:8f:77:4c:05:82:85:ce:49:01:c5:31:56:ed:4a:
                    cf:03:d7:61:a0:2d:8a:6f:98:3c:0c:4d:f2:20:67:
                    b0:56:96:3c:cc:75:02:a6:77:eb:30:f8:20:bd:42:
                    b9:ef:e2:0d:e9:25:f2:76:f3:94:df:a3:06:e3:21:
                    a8:a1:7d:f2:71:53:fa:7a:23:1b:f1:2c:75:35:63:
                    b2:3f:2a:62:7f:cd:94:67:9b:8c:9c:1b:f6:b5:69:
                    95:c1:9b:40:f4:ac:2b:4a:c8:5d:fa:51:44:7c:56:
                    d5:d9:a7:20:ec:cd:31:9c:f8:83:f7:9b:3d:17:66:
                    90:96:da:cb:05:21:11:8c:34:39:fd:10:1e:02:77:
                    e1:17:ba:1a:80:52:e5:12:ab:e0:a5:8c:98:b7:9b:
                    a2:a5:c5:64:6b:56:c5:60:4b:3d:f3:26:6d:a9:fb:
                    2e:db:fc:d5:59:6f:44:9f:2a:2b:f5:ac:f8:91:26:
                    19:64:95:08:63:1c:82:4f:6e:be:1f:0d:94:71:6c:
                    d8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F5:40:47:27:C8:23:E7:8E:96:2D:53:41:A0:07:F4:52:2A:23:41
            X509v3 Authority Key Identifier:
                keyid:EF:DA:4F:52:C2:B7:94:CE:4B:5F:7F:21:E3:24:B1:B9:B1:06:5D:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79pPUsK3lM5LX38h4ySxubEGXRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:b5:ab:c2:15:d5:9a:2e:c5:e9:dd:58:1b:dd:5f:0e:9f:c7:
         47:5f:66:d4:d8:ea:e2:9c:46:94:00:ce:98:75:f0:ea:98:39:
         2f:12:51:b2:36:b1:34:a3:de:75:c4:9b:18:9b:a2:04:e1:6f:
         74:c2:d3:31:0f:41:a8:20:e2:ba:df:bb:a9:c1:e0:90:54:bd:
         0d:b7:36:ad:7b:87:a6:91:cc:74:ac:09:7a:9f:72:e3:9c:ca:
         f9:d8:c4:92:53:b3:a9:1d:8c:ef:af:14:af:44:eb:f3:25:ab:
         83:bd:d0:85:e4:d7:4a:2e:04:49:d2:c0:91:c2:ac:85:ac:16:
         77:02:a8:68:2e:e5:aa:1f:38:ba:29:82:fb:28:71:89:de:cb:
         82:ce:cd:1b:a7:98:d3:ba:4f:2c:d5:48:63:2c:2d:2d:d0:af:
         20:b1:ca:cb:68:67:b6:82:54:e9:db:86:30:e6:bf:ae:fc:24:
         8e:77:63:f6:fb:47:b2:ca:0c:8c:c2:bc:1b:6d:37:25:b3:c6:
         9b:b7:e4:b9:61:b3:48:c2:97:b4:a4:25:82:55:c3:89:82:71:
         9c:c1:d9:ed:c8:53:99:5a:e0:86:c1:7a:57:fd:bf:07:21:b6:
         9e:a1:d7:09:20:1c:b2:f3:e0:01:51:ad:df:76:ad:06:be:c1:
         a7:7d:18:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 03:41:01 2026 by rpki-client