Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
File:                     79rqxvigN0g5cw_IVnlXCeGO2RY.mft (raw, json)
Hash identifier:          A2nqaW2CL17CKjJtvd/E3fh03qxK5q6T5uSMOTRbq+o=
Subject key identifier:   A5:84:94:9B:A4:05:AE:BE:F8:C9:3A:A1:74:12:25:D4:72:AC:EE:91
Authority key identifier: EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
Certificate issuer:       /CN=efdaeac6f8a0374839730fc856795709e18ed916
Certificate serial:       01A0D1C9901FB1FD5957B1BDBE81E88CFDC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
Manifest number:          19FD
Signing time:             Thu 24 Sep 2026 05:00:42 +0000
Manifest this update:     Thu 24 Sep 2026 05:00:42 +0000
Manifest next update:     Fri 25 Sep 2026 05:00:42 +0000
Files and hashes:         1: 79rqxvigN0g5cw_IVnlXCeGO2RY.crl (hash: k4rNbLH8L7kW6tey4opImUA6FW/d8wGiDV2cXmkNyL4=)
                          2: oXioQd61dHXxrQktudDX7mhO5jM.roa (hash: WotYCxCvc5bTkZKJ4SaRQI3ZLywSWPDXJlcekc+/TXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:c9:90:1f:b1:fd:59:57:b1:bd:be:81:e8:8c:fd:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efdaeac6f8a0374839730fc856795709e18ed916
        Validity
            Not Before: Sep 24 05:00:42 2026 GMT
            Not After : Sep 25 05:00:42 2026 GMT
        Subject: CN=a584949ba405aebef8c93aa1741225d472acee91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:32:df:04:7f:25:78:31:0e:a1:85:38:5c:
                    9f:4a:37:f8:c2:b8:60:0c:e7:f8:f5:c5:f2:47:43:
                    67:fe:87:9f:17:17:c4:55:10:49:55:54:c6:02:3e:
                    25:fc:93:64:60:59:1d:c4:c3:59:5d:c7:e6:20:c5:
                    ea:17:72:f0:7e:44:aa:09:59:8d:8b:85:d2:ab:3d:
                    57:30:dd:f8:df:42:c6:34:16:3b:51:cc:77:1a:0f:
                    d7:5f:70:78:d2:b2:53:d5:35:e1:36:ba:49:37:8f:
                    95:bc:ad:da:a7:c2:ce:b8:a5:bb:00:f6:a8:78:1e:
                    42:96:e7:ba:84:ff:aa:a0:93:69:f6:52:d4:84:65:
                    36:08:23:d7:7a:04:38:5a:79:ac:e3:80:dd:6f:f9:
                    27:f8:d2:ea:48:a6:72:19:a3:ae:b0:75:47:a6:49:
                    ea:96:33:ef:e2:d2:3d:c1:b2:f5:28:f3:a0:bb:20:
                    01:8d:4a:59:2d:d5:8d:bf:ac:85:a8:bc:84:df:3c:
                    67:63:62:66:2e:5a:3d:38:c6:db:df:b1:75:45:4b:
                    87:c9:b6:20:35:94:21:e1:35:f0:b4:69:e0:a9:cb:
                    15:e9:88:d5:a3:1c:d4:bd:a4:fb:33:b8:b2:7d:73:
                    5b:57:ec:95:05:15:9c:26:7c:b0:3f:2f:72:02:19:
                    27:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:84:94:9B:A4:05:AE:BE:F8:C9:3A:A1:74:12:25:D4:72:AC:EE:91
            X509v3 Authority Key Identifier:
                keyid:EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:90:f1:54:99:e6:4c:30:a7:56:23:47:f4:9d:bf:04:8f:63:
         e5:15:9d:b1:13:1c:85:c3:8a:fe:2b:09:8d:c2:09:3b:0e:dd:
         fb:95:5a:ac:91:69:9e:4d:09:40:4a:f6:22:9e:e8:bc:0b:57:
         a7:be:89:1a:6d:08:e4:42:e0:d7:f4:2f:3d:e9:38:f3:49:f3:
         87:fe:4b:78:1a:d4:5a:31:8e:b2:8e:a3:64:9a:04:f4:0d:f6:
         25:c7:a1:3f:c4:6f:98:cc:30:57:23:38:a9:9e:25:65:71:c4:
         31:3f:92:ac:97:e4:cb:dc:8b:9c:e5:31:d0:5a:42:da:02:a4:
         8e:db:4a:7d:f4:c7:54:38:99:32:87:44:cf:a0:ad:9a:82:17:
         fd:06:22:ba:cf:de:7f:ef:a3:15:d3:86:e4:8b:ce:ce:c1:cc:
         7b:b8:dd:db:35:a0:15:53:70:43:b4:c2:69:50:c7:ec:c7:de:
         49:01:04:f7:90:a3:b5:0f:6c:17:40:e2:c8:ae:63:ec:80:3b:
         4a:ed:e8:4c:61:1e:0e:e8:b4:e2:60:c2:db:62:d7:84:99:66:
         fd:21:b3:f5:f8:41:a8:6a:80:c0:82:0e:48:62:d9:6c:ed:fc:
         5f:b5:e6:ff:7a:04:59:b3:a2:df:ca:3e:62:13:5c:4d:8b:a2:
         dd:64:a1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:59:26 2026 by rpki-client