Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
File:                     79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft (raw, json)
Hash identifier:          gG9EBNv7PgXkU95n0o0QAhp7cD6Uz64t22CvlpVirmI=
Subject key identifier:   22:B9:02:7F:C1:9E:D3:46:EA:DE:4F:B9:52:D8:9B:7A:6A:90:D5:F1
Authority key identifier: 79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD
Certificate issuer:       /CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
Certificate serial:       704101F499505858358871FA2FED0FA6F00F54D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
Manifest number:          01E9
Signing time:             Sun 07 Sep 2025 07:33:49 +0000
Manifest this update:     Sun 07 Sep 2025 07:28:49 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:49 +0000
Files and hashes:         1: 79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl (hash: MM9KgdiUBG6UTmY7tRpPdqY7J0c2AjeVJLVbdTcTDRE=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:41:01:f4:99:50:58:58:35:88:71:fa:2f:ed:0f:a6:f0:0f:54:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
        Validity
            Not Before: Sep  7 07:28:49 2025 GMT
            Not After : Sep  8 10:00:49 2025 GMT
        Subject: CN=22B9027FC19ED346EADE4FB952D89B7A6A90D5F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:52:2c:a8:f9:36:af:7e:4b:39:f4:b4:c1:58:
                    d6:db:32:6d:8e:31:5d:1d:c3:fb:c6:0a:09:21:24:
                    eb:c2:f7:a1:1c:54:2c:99:47:4d:53:41:16:28:31:
                    0e:04:21:e8:9a:51:c6:4d:f6:eb:6b:c2:7a:a8:63:
                    e0:46:3e:91:ee:07:c9:ad:d4:7e:81:1a:d2:b2:a9:
                    3d:1c:61:9c:af:7d:47:9f:3b:c6:b4:4e:85:b2:be:
                    a8:8d:ac:d1:6c:ba:76:72:25:63:4f:e2:68:af:9c:
                    a3:c5:03:0e:46:f9:02:7f:45:cf:f4:0d:62:0b:75:
                    e7:af:fa:c0:f0:8c:fb:fa:f9:e9:d7:a4:9c:1b:66:
                    6a:a9:9b:bb:b9:bc:c0:5e:93:ad:42:69:a5:5f:f3:
                    57:61:cd:65:c6:13:ae:85:c1:11:25:9f:7d:21:e8:
                    84:34:76:bc:43:1e:bc:fc:24:17:b2:bb:92:19:9c:
                    81:5c:18:40:9b:07:78:9c:82:90:99:c6:7f:9b:db:
                    9b:78:c5:06:14:6c:19:60:3a:d3:58:e3:7a:30:e1:
                    ec:41:c1:4e:cb:12:e5:a1:48:4e:e6:11:93:ae:c8:
                    07:02:77:f5:f5:35:cc:1b:9e:49:23:81:a8:a7:fa:
                    b9:d9:27:41:30:e8:3e:18:f2:ce:5e:a7:6d:8b:2e:
                    d9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B9:02:7F:C1:9E:D3:46:EA:DE:4F:B9:52:D8:9B:7A:6A:90:D5:F1
            X509v3 Authority Key Identifier:
                keyid:79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:61:6d:13:0a:4a:bf:52:2b:94:bb:97:7d:ed:c1:d0:f8:55:
         5f:d2:61:f0:98:ad:3b:d1:1b:2f:7c:04:c3:46:ed:a7:78:b0:
         f9:51:de:ce:e5:49:9b:58:0e:6a:41:c7:74:21:e9:02:db:4f:
         8f:86:4d:7e:b6:92:29:e0:33:fd:a2:da:ed:d1:e0:aa:7f:e4:
         34:f8:a1:a5:18:a9:45:9b:1b:25:7b:90:e0:db:a4:3e:8c:f0:
         17:b1:f7:5a:cf:71:1b:6f:38:75:aa:70:0c:7e:d6:eb:b6:b2:
         82:28:be:3d:ad:72:4a:b7:e1:89:09:0f:9d:52:c7:8f:c2:e3:
         f7:61:26:9b:77:7b:86:b6:97:48:8f:c4:3f:1b:09:80:95:f5:
         bc:77:9a:10:e7:93:f1:83:4a:4f:d3:c6:4a:ce:bf:83:1a:81:
         2d:d9:e5:11:b5:5e:80:de:2f:ef:0b:78:45:ff:36:00:bd:a7:
         34:6f:22:ca:a9:c8:8c:a1:43:6c:42:d3:d5:98:95:b9:9f:59:
         15:34:a1:fb:4d:37:13:28:d9:4e:29:dd:40:51:58:1f:a4:ec:
         2f:95:d1:1f:77:a5:03:86:67:4b:09:12:10:6f:bd:de:50:95:
         99:ad:2c:cb:e5:ed:21:75:14:b8:12:68:68:11:8b:3d:45:2e:
         e5:03:ad:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:19:22 2025 by rpki-client