Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
File:                     79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft (raw, json)
Hash identifier:          8W0h5h755EFG2T6dKtMXnH/NhHzveRt4Ieo90ME9kec=
Subject key identifier:   07:EB:78:BA:C9:A5:89:EF:31:42:D9:7A:60:1B:20:D6:F3:0F:4D:38
Authority key identifier: EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63
Certificate issuer:       /CN=efd30d69329d33f44212bf86b69ff20881051063
Certificate serial:       0199FC584A026FEFBD07F51F9A49E807350E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
Manifest number:          16DE
Signing time:             Sun 19 Oct 2025 12:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:08 +0000
Files and hashes:         1: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl (hash: w0arFcvgfK/xHG+MdbCoIMD1ZGrnGSqrWuFdxct+wRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:4a:02:6f:ef:bd:07:f5:1f:9a:49:e8:07:35:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd30d69329d33f44212bf86b69ff20881051063
        Validity
            Not Before: Oct 19 12:01:08 2025 GMT
            Not After : Oct 20 12:01:08 2025 GMT
        Subject: CN=07eb78bac9a589ef3142d97a601b20d6f30f4d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:19:72:9f:e2:0f:05:0f:e4:fe:26:1f:09:80:
                    06:98:90:cf:fb:4f:86:36:34:f5:c8:d4:43:49:d0:
                    d6:71:25:92:ad:eb:7b:99:85:ed:41:dc:be:6b:0c:
                    e4:c7:5b:63:b4:9c:ec:82:db:a3:45:0a:a3:50:1d:
                    39:bd:58:96:3b:66:db:bd:34:14:bf:50:ea:c1:78:
                    19:62:4a:67:b3:c1:f9:29:c5:1b:0a:7a:c9:41:fb:
                    ae:89:ab:23:46:00:64:de:f9:8d:ab:8a:48:26:ec:
                    96:89:52:7c:3e:fa:51:e8:ff:7d:d1:ab:00:5b:47:
                    60:de:af:f6:d6:08:6b:02:e2:05:5c:89:5f:77:f3:
                    ee:95:a7:a9:39:cf:9d:aa:4a:d8:f2:e0:e1:b4:c3:
                    32:b7:da:5f:e2:be:5f:7b:c9:0d:5c:50:f8:0b:be:
                    32:64:18:04:26:33:4e:0e:d4:4b:1b:2f:6b:4b:77:
                    a4:41:c1:91:22:f9:50:88:d5:91:79:ed:ac:a8:9b:
                    4e:3e:73:97:3e:9a:ae:18:c6:da:8f:7b:f8:90:04:
                    ec:33:5e:a9:a7:81:68:05:7b:1d:2c:52:72:c7:94:
                    f8:92:ea:f8:9c:3b:bf:c6:58:60:c8:27:30:df:b4:
                    5e:43:bd:30:81:45:c5:92:ee:f5:9f:55:d6:ed:4d:
                    8d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EB:78:BA:C9:A5:89:EF:31:42:D9:7A:60:1B:20:D6:F3:0F:4D:38
            X509v3 Authority Key Identifier:
                keyid:EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:cd:98:00:b0:96:64:71:fc:69:e7:9d:51:ca:81:75:63:cc:
         53:d7:83:c7:11:ae:ee:6c:38:ba:5b:87:c0:92:92:dc:e5:21:
         ff:be:4f:2f:3c:b4:5c:fd:44:c0:d8:17:45:23:88:ba:a6:d3:
         21:ca:55:7d:5c:54:94:43:70:ae:af:95:40:63:d3:be:07:3a:
         76:ab:d6:cd:09:63:86:36:05:a5:94:d3:18:90:29:ec:06:d6:
         33:6d:da:be:00:75:14:18:1d:b1:18:76:e4:79:ce:1f:c6:e9:
         7f:bb:70:ab:f8:54:42:97:10:b6:1d:da:83:2a:6b:56:fc:c1:
         9a:8f:75:07:b7:0f:20:33:d4:94:4f:ba:c0:2c:84:83:18:a2:
         73:9d:c4:5e:47:2f:7b:8f:da:c9:5a:36:b4:5e:3e:e8:00:de:
         2c:1f:5c:0b:76:17:ac:b8:e2:33:6e:b2:79:74:6f:1c:39:9b:
         15:00:6f:b8:05:93:b4:57:fa:7d:58:a9:49:08:ea:81:a7:35:
         48:21:2e:5b:cc:74:f5:a3:c5:e4:79:27:d1:7a:d4:40:ae:c4:
         33:26:8a:79:1b:a7:9a:a9:0f:e4:c8:a7:fd:b8:cf:e1:5d:fe:
         17:9a:be:57:db:90:0d:58:16:af:bc:bf:60:01:92:88:5a:24:
         9e:48:f2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:10 2025 by rpki-client