Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
File:                     79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft (raw, json)
Hash identifier:          TGYRYA/mw97WjtrhBvZo2PI6tYmfseEH0218BiuSflc=
Subject key identifier:   5E:B4:C8:B2:02:0A:A2:53:94:4C:D4:20:90:90:B2:57:99:0F:9D:1F
Authority key identifier: EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63
Certificate issuer:       /CN=efd30d69329d33f44212bf86b69ff20881051063
Certificate serial:       019F935BF4BE957EE2FACD94078C1C454835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
Manifest number:          19C3
Signing time:             Fri 24 Jul 2026 09:01:44 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:44 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:44 +0000
Files and hashes:         1: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl (hash: H3CfjU/Yh4uJvczxXqbw7XfhUEt/WU+FIaduXKcUVmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:f4:be:95:7e:e2:fa:cd:94:07:8c:1c:45:48:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd30d69329d33f44212bf86b69ff20881051063
        Validity
            Not Before: Jul 24 09:01:44 2026 GMT
            Not After : Jul 25 09:01:44 2026 GMT
        Subject: CN=5eb4c8b2020aa253944cd4209090b257990f9d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:64:cf:b3:fc:0e:39:f8:97:7c:68:9b:c4:e5:
                    f1:e9:f5:2c:8b:86:e8:bc:8d:2f:31:dc:1b:4b:69:
                    7c:2a:de:98:c8:da:a4:d0:b6:8c:97:09:ea:eb:13:
                    a6:de:7b:56:bd:c3:19:6e:39:ee:ec:ca:b9:85:0a:
                    36:d5:88:63:64:66:30:76:a3:7f:db:2b:b6:2a:55:
                    ce:c2:82:24:a8:4e:65:23:80:ad:2d:b0:e1:36:27:
                    b7:a5:4f:2f:35:5e:85:e5:5a:c7:f4:86:63:0a:56:
                    7e:08:e9:2a:55:75:4f:ba:3c:b3:b2:29:1c:dd:bc:
                    7e:ed:80:e3:d1:05:0a:05:e9:25:c9:4c:e1:e5:e0:
                    7d:f3:a8:5a:b5:89:54:3e:5d:3c:27:90:ec:08:5d:
                    d9:3e:2e:14:77:bc:55:a8:af:36:2c:75:67:49:76:
                    2d:1b:5a:44:7f:1d:39:3f:55:c9:1f:9e:18:2f:35:
                    3d:49:dc:8a:7c:c0:f4:10:15:45:a7:2a:12:13:f4:
                    7d:47:36:ca:55:b6:51:19:2b:40:68:37:45:47:09:
                    08:86:8a:b5:d8:98:8b:c5:8e:3a:fe:a6:89:37:01:
                    25:af:d2:9f:27:27:59:af:d6:9a:1d:33:63:c9:c4:
                    0d:9b:7e:24:4e:30:d3:a2:0b:3c:05:8b:eb:69:3b:
                    67:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B4:C8:B2:02:0A:A2:53:94:4C:D4:20:90:90:B2:57:99:0F:9D:1F
            X509v3 Authority Key Identifier:
                keyid:EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5a:04:e9:e2:3e:8a:d0:38:29:4c:42:73:da:6d:71:30:d4:
         6b:e1:f2:b1:09:0e:7e:56:89:4d:54:4e:16:61:fb:6c:3d:bd:
         4b:49:d0:01:1e:e6:fe:95:86:9a:6d:e1:46:34:99:7f:52:15:
         a0:f3:9b:29:c2:ce:44:ab:a2:a8:de:0d:e7:b4:2d:a3:08:7e:
         a6:04:5a:22:c8:b0:0e:37:4b:a6:7a:26:25:81:65:a6:80:29:
         1c:ee:2a:a6:2e:71:fd:01:6c:38:7e:25:c5:41:63:8c:b7:b9:
         c9:99:a1:ed:8c:a5:a4:7a:50:cd:46:98:cf:99:6b:82:0d:3a:
         71:a2:09:07:07:d7:7d:a7:c7:95:dd:ba:ff:2c:e6:71:2c:06:
         d6:45:d6:7c:2d:ad:de:ff:45:c4:27:c9:14:3f:1a:3a:e8:40:
         1d:6d:4e:57:0a:67:6b:db:99:d1:a7:cb:88:88:d0:1e:0f:e0:
         5f:4a:4b:09:f7:8c:a7:bd:70:9c:c6:1e:94:fb:8d:bd:61:55:
         be:49:6f:76:1d:0e:c4:03:8f:34:ac:d1:c3:11:9a:72:ab:72:
         e0:c6:b9:f0:0f:fe:fb:5e:35:ed:d6:a2:bc:24:4d:bc:52:38:
         e2:97:76:e8:14:b4:a1:b6:18:76:b2:bd:6c:8b:a9:77:80:a6:
         64:ba:66:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:40:50 2026 by rpki-client