Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
File:                     79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft (raw, json)
Hash identifier:          Q3BQB+DIV9NfBwubaer94tFsUiUc0/nkPvdN1sdQvFo=
Subject key identifier:   C6:BF:2C:FD:62:84:6E:A0:E9:B9:5F:7E:E5:09:3F:EB:A2:3E:9E:B7
Authority key identifier: 79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD
Certificate issuer:       /CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
Certificate serial:       0454AA43F6345A3F659B9C93A666253948474B95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
Manifest number:          02F7
Signing time:             Sun 29 Mar 2026 05:35:19 +0000
Manifest this update:     Sun 29 Mar 2026 05:30:19 +0000
Manifest next update:     Mon 30 Mar 2026 06:24:19 +0000
Files and hashes:         1: 79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl (hash: D/wfMRT9ECA20BP3RRyIF5/dNoQyIPjZXVICaP0FncQ=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:54:aa:43:f6:34:5a:3f:65:9b:9c:93:a6:66:25:39:48:47:4b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
        Validity
            Not Before: Mar 29 05:30:19 2026 GMT
            Not After : Mar 30 06:24:19 2026 GMT
        Subject: CN=C6BF2CFD62846EA0E9B95F7EE5093FEBA23E9EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2c:cc:fe:61:a3:ea:68:0f:f9:87:b3:15:28:
                    59:a7:ca:51:9a:a8:7c:14:ff:6d:62:67:a5:f1:dd:
                    11:43:5d:b9:23:43:6f:29:78:57:50:92:fd:c1:b7:
                    27:96:60:05:3f:4f:0f:9d:95:e0:40:84:8a:06:c4:
                    4f:2c:b8:b0:f7:ce:6a:a4:bf:f1:9b:d9:94:81:c8:
                    c9:d9:04:af:11:15:8b:ed:7d:32:f9:21:1a:f0:01:
                    ad:cd:44:b5:0f:86:58:34:5e:9f:39:c1:e4:55:c3:
                    cb:2d:9b:ad:51:83:f7:bd:fe:4e:c7:93:0a:31:c1:
                    97:59:6f:70:0c:24:c0:74:96:cf:70:37:74:f5:40:
                    5a:79:e8:58:2d:fa:b1:3b:01:ec:bc:7d:b6:6f:91:
                    f0:06:68:94:60:a5:b8:6f:ea:ca:0d:3a:92:b3:77:
                    ec:91:ec:f8:e4:1b:64:19:ad:94:07:8d:b9:cc:38:
                    80:4d:b5:75:b0:71:ef:44:f5:5f:f1:8a:88:e0:51:
                    a7:be:6b:88:7c:99:e2:31:e7:65:2e:bb:7a:69:66:
                    7d:ed:64:41:e4:68:c7:f0:d9:c1:97:45:4c:06:6e:
                    49:a4:95:6d:6a:21:01:10:61:90:66:ce:63:aa:b7:
                    25:eb:e8:d0:02:14:25:d3:df:4d:11:52:23:0c:17:
                    35:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BF:2C:FD:62:84:6E:A0:E9:B9:5F:7E:E5:09:3F:EB:A2:3E:9E:B7
            X509v3 Authority Key Identifier:
                keyid:79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:a0:c3:ac:99:9a:98:a0:ce:6e:0e:23:7c:71:87:21:98:14:
         10:6b:e1:a2:72:08:3f:4a:23:9b:4d:d7:c5:20:7b:bc:ae:74:
         0f:c4:c8:9c:e6:56:95:4f:48:b2:52:95:98:32:ed:2f:5e:18:
         6d:1e:8f:21:ea:0c:fa:4d:17:62:ef:ff:08:62:6a:f6:c6:52:
         5e:44:c5:03:62:04:48:ef:74:e4:91:dd:5b:2e:f5:e5:e8:66:
         e9:e7:0b:94:62:43:bf:a3:40:1a:d5:1e:a6:d0:e8:13:45:2f:
         de:59:57:63:f4:99:a3:01:29:b9:b5:08:07:c2:b2:ce:8a:f0:
         4a:4b:98:96:d0:10:9b:30:87:0e:ab:0b:1d:1a:79:f7:62:c3:
         64:bb:ff:26:86:2a:fb:8e:29:51:00:0a:9a:f6:47:27:77:38:
         33:87:dd:ab:37:4f:6d:d4:66:f8:7b:d3:57:e0:f4:04:74:c1:
         98:01:3d:ac:a7:25:65:a3:b8:cb:3a:f0:16:88:f5:6e:fd:89:
         a3:2f:08:c6:4b:8e:45:7b:2b:fb:a9:e0:cf:95:9a:c5:8d:00:
         bf:ed:e0:5a:61:ca:af:28:fb:3e:10:bd:04:b5:75:56:e7:4a:
         aa:66:5f:91:7b:62:a2:ca:ff:b0:17:8d:e4:8e:15:8e:dc:79:
         e3:04:bb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:54 2026 by rpki-client