Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
File:                     79kZGXhjH8lVrA9RBi1c6YROrgM.mft (raw, json)
Hash identifier:          zyWpo4EPnyx7MXGrfvpcOxcQZZ4JRaTiVQBGmrNCows=
Subject key identifier:   DA:35:A9:3B:08:A6:B1:56:10:A4:27:0E:1B:CD:A8:17:EA:35:1F:21
Authority key identifier: EF:D9:19:19:78:63:1F:C9:55:AC:0F:51:06:2D:5C:E9:84:4E:AE:03
Certificate issuer:       /CN=efd9191978631fc955ac0f51062d5ce9844eae03
Certificate serial:       019F92119F1CE341C6D0FEDD53C765F02F6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
Manifest number:          19C5
Signing time:             Fri 24 Jul 2026 03:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:55 +0000
Files and hashes:         1: 79kZGXhjH8lVrA9RBi1c6YROrgM.crl (hash: E6UI5xuBZmW1EXrhaTc47AIbKuw1Pt2s5liYSTCC2pM=)
                          2: AFAhK4RjN_tCaCuKPQ6S294APKY.roa (hash: Bh304+c1jskIegs4ufHvSWn2atzw/YKrzOn26bB1JF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:9f:1c:e3:41:c6:d0:fe:dd:53:c7:65:f0:2f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd9191978631fc955ac0f51062d5ce9844eae03
        Validity
            Not Before: Jul 24 03:00:55 2026 GMT
            Not After : Jul 25 03:00:55 2026 GMT
        Subject: CN=da35a93b08a6b15610a4270e1bcda817ea351f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:1e:ba:8e:b0:60:ab:97:f6:7e:e5:09:d6:
                    fa:98:95:6b:92:9f:da:22:2e:90:ce:14:27:25:3c:
                    0d:b5:e7:97:49:24:42:41:f5:d9:6e:5e:6c:2f:20:
                    b8:d0:9e:8d:78:f5:b0:90:50:7f:58:1e:e7:5c:89:
                    66:94:58:c7:9e:ef:ba:7a:33:57:09:a4:fc:50:73:
                    cf:79:96:7d:9b:03:04:58:ee:f6:21:b7:b4:98:fd:
                    c8:11:78:ef:c4:a4:f0:52:c0:23:f9:a8:b8:7d:40:
                    79:75:c7:eb:b0:f0:71:60:a8:26:85:56:e4:4f:2d:
                    fa:15:f2:52:52:4f:a3:99:38:7b:f7:8d:c5:0f:1d:
                    3f:af:d5:b7:09:87:5d:06:7e:23:bb:ff:53:d2:13:
                    94:64:15:36:34:29:56:c7:01:75:93:8d:3b:87:c5:
                    5f:e3:9e:02:5e:40:49:9c:fd:25:bb:e1:73:d1:51:
                    c4:aa:81:50:20:b5:bf:fd:b7:0b:6c:7b:2f:60:01:
                    fc:7d:74:74:7f:be:15:c8:9f:d0:88:33:aa:89:34:
                    c1:55:47:c7:02:c9:c1:30:a4:9a:69:35:cc:26:a3:
                    cf:86:8e:c8:fc:1b:f1:bf:a9:5a:ff:c4:db:ff:37:
                    aa:7b:04:6c:3f:5d:6f:f4:4e:fd:f7:ff:c4:86:55:
                    ea:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:35:A9:3B:08:A6:B1:56:10:A4:27:0E:1B:CD:A8:17:EA:35:1F:21
            X509v3 Authority Key Identifier:
                keyid:EF:D9:19:19:78:63:1F:C9:55:AC:0F:51:06:2D:5C:E9:84:4E:AE:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ac:ab:70:0e:8b:fb:c9:44:cd:57:96:f2:e8:45:e7:fc:61:
         70:60:87:bb:f8:7e:1a:55:12:4e:3d:df:25:50:90:2a:e9:7d:
         ab:a8:6d:4e:49:36:63:98:fc:d5:fa:da:63:f3:08:91:86:41:
         38:ca:a0:5a:86:4b:44:f6:53:d7:2d:63:e1:1c:a8:a4:a3:da:
         e6:53:eb:6d:b5:56:51:c5:93:60:e8:df:e9:fe:04:e4:88:58:
         0c:aa:a1:45:9f:27:cf:d7:1b:cf:27:b3:1b:9e:7c:4d:6b:d2:
         d6:de:bf:c5:00:35:f4:b5:45:7b:c6:17:c4:e7:ce:0b:20:05:
         9e:5d:94:09:bb:ce:28:80:f3:c8:82:ed:09:bf:2d:8c:86:3b:
         c9:f9:5d:50:7f:41:d4:98:d4:af:d9:26:ce:fe:a1:ce:e8:2c:
         91:87:2a:1e:b3:20:c5:11:61:83:77:c0:76:b3:0a:5a:bd:7c:
         de:7e:7a:75:6f:91:ca:ae:ec:e3:89:eb:5f:9c:20:12:d2:2b:
         9b:5c:49:fe:77:fd:c0:a6:c7:e2:b8:18:28:24:ae:b5:ee:b2:
         e9:46:ea:5e:47:b6:3c:33:ff:dc:02:eb:74:86:ac:9a:91:bc:
         2b:93:27:05:ee:bc:ea:1e:e5:b2:26:07:b8:cb:ae:b6:00:c5:
         60:70:94:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:06:22 2026 by rpki-client