Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
File:                     79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft (raw, json)
Hash identifier:          G6Cp37RhokMNbRa68ud50vNhtIYNaExx4OkMgRQK/GE=
Subject key identifier:   C1:A7:16:0A:E7:1B:99:55:61:20:DA:F0:F8:9A:C1:9C:0C:9C:FE:0E
Authority key identifier: EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63
Certificate issuer:       /CN=efd30d69329d33f44212bf86b69ff20881051063
Certificate serial:       01A0E73FBA2CFB1A90C8D29A3F1B32655331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
Manifest number:          1A73
Signing time:             Mon 28 Sep 2026 09:01:48 +0000
Manifest this update:     Mon 28 Sep 2026 09:01:48 +0000
Manifest next update:     Tue 29 Sep 2026 09:01:48 +0000
Files and hashes:         1: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl (hash: qu8myfa53s5AnRNYzctWzwoQd/p8ceYzTVnxeBr6lmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 09:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:3f:ba:2c:fb:1a:90:c8:d2:9a:3f:1b:32:65:53:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd30d69329d33f44212bf86b69ff20881051063
        Validity
            Not Before: Sep 28 09:01:48 2026 GMT
            Not After : Sep 29 09:01:48 2026 GMT
        Subject: CN=c1a7160ae71b99556120daf0f89ac19c0c9cfe0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:ae:f3:b2:39:74:3e:98:59:ad:90:12:b5:
                    18:ec:4e:a2:8e:ee:14:d6:dd:7f:09:fd:23:7a:97:
                    25:c8:3b:08:fe:b0:fe:c0:14:5c:4c:bc:27:d0:6b:
                    54:8f:d5:7b:c6:55:ee:f8:44:25:a8:3e:91:25:53:
                    1c:77:ef:7d:1c:7d:1b:16:67:b2:95:4a:eb:20:b9:
                    9b:3e:44:56:3f:a4:41:67:31:b1:68:30:ed:93:d9:
                    26:fa:af:59:d9:b0:94:84:81:0c:9e:cd:5f:e3:be:
                    e1:37:6f:09:bf:89:c5:74:50:e1:66:c1:d7:a3:f6:
                    54:e9:00:ce:4b:43:dd:44:60:d8:8e:21:67:4b:8e:
                    66:fb:c8:ce:e5:20:39:12:1d:64:40:30:3e:82:e4:
                    0b:2e:b9:4a:2e:3c:e6:f8:1f:d5:97:0d:50:17:26:
                    a4:7e:1e:9f:3f:27:38:99:f5:45:cb:3a:15:8f:68:
                    46:66:db:f7:ec:19:14:2b:8e:06:1b:f8:b1:d3:e9:
                    38:4d:dd:8d:49:83:96:d3:f7:e9:e2:0c:5a:cd:47:
                    55:3e:b7:8c:37:fe:e5:a4:63:77:95:88:1e:86:57:
                    df:f2:af:e1:02:f7:86:f7:19:10:2a:c5:eb:2e:29:
                    23:67:2c:d6:55:d6:bb:ef:da:b3:2c:5f:74:25:0a:
                    b7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A7:16:0A:E7:1B:99:55:61:20:DA:F0:F8:9A:C1:9C:0C:9C:FE:0E
            X509v3 Authority Key Identifier:
                keyid:EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:55:39:e0:6c:56:e7:c0:9b:d6:e7:bc:d3:a4:35:68:cc:21:
         8c:1f:13:1d:07:05:14:32:5f:d1:d0:4a:e2:cd:88:de:42:4c:
         35:81:b3:61:1d:7d:c6:d6:24:d6:a4:24:40:b9:b1:36:ab:e1:
         ae:06:c2:6c:fc:9c:c4:e1:66:07:23:5c:02:6d:f7:0b:e9:e4:
         93:98:79:a6:88:04:03:4e:17:1c:60:bf:79:9a:c5:79:db:34:
         ea:89:5d:50:e2:c6:3d:b5:20:25:86:22:98:43:04:b0:34:a6:
         91:6b:cc:75:19:7c:0c:dc:bd:dd:f6:48:9d:05:e3:b4:54:1a:
         b9:a1:2d:86:3e:2a:50:06:b8:ae:22:1d:30:52:b1:53:5a:dc:
         ad:98:36:1b:77:5f:b5:f2:ec:97:47:2e:cd:89:63:69:a8:ef:
         d7:ce:e8:28:c7:8b:08:a1:14:cf:79:4f:cf:01:95:9b:55:c5:
         3d:4d:84:f5:5d:8e:17:41:03:0a:0a:9f:ea:99:b2:31:3e:8b:
         40:f1:12:5b:91:44:eb:e1:4e:98:f3:de:1b:27:62:b1:fb:dc:
         ce:5d:bc:65:b6:88:0e:1d:1a:b5:a3:d5:a1:8c:72:ae:23:87:
         49:6b:f0:eb:04:de:c4:bc:cd:e1:26:ef:86:bb:83:93:91:01:
         b5:8d:ec:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----