Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
File:                     79kZGXhjH8lVrA9RBi1c6YROrgM.mft (raw, json)
Hash identifier:          6c+t73X53koyiYNZBDUE6rg/NGrGRFZqKQFwj8yhxPE=
Subject key identifier:   71:06:75:49:71:93:17:3C:2D:08:44:6A:18:E3:82:F3:75:28:66:86
Authority key identifier: EF:D9:19:19:78:63:1F:C9:55:AC:0F:51:06:2D:5C:E9:84:4E:AE:03
Certificate issuer:       /CN=efd9191978631fc955ac0f51062d5ce9844eae03
Certificate serial:       019D2627ECECFBE82495E82C2C7D9BDB4E63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
Manifest number:          1884
Signing time:             Wed 25 Mar 2026 18:00:43 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:43 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:43 +0000
Files and hashes:         1: 79kZGXhjH8lVrA9RBi1c6YROrgM.crl (hash: AUNXcE01K85Qox08IhA9OXbnhjUaZG0CY22J8/A4+P0=)
                          2: AFAhK4RjN_tCaCuKPQ6S294APKY.roa (hash: Bh304+c1jskIegs4ufHvSWn2atzw/YKrzOn26bB1JF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 18:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:27:ec:ec:fb:e8:24:95:e8:2c:2c:7d:9b:db:4e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd9191978631fc955ac0f51062d5ce9844eae03
        Validity
            Not Before: Mar 25 18:00:43 2026 GMT
            Not After : Mar 26 18:00:43 2026 GMT
        Subject: CN=710675497193173c2d08446a18e382f375286686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:89:b4:a2:28:a6:d5:04:7e:a0:5b:0e:e8:d7:
                    da:65:15:89:f1:53:42:8a:df:82:a3:49:06:e2:68:
                    47:4c:ad:dc:49:9d:47:a9:2d:aa:e2:61:92:01:13:
                    2d:7b:64:54:90:c7:be:97:e7:7c:53:25:7a:a2:d1:
                    a5:17:07:ef:0c:68:9c:59:be:9a:05:b3:9c:79:6f:
                    b5:72:55:3a:96:e7:bf:5d:b8:09:fe:ae:58:9d:4d:
                    81:c8:6c:0c:6c:31:13:b4:0b:87:73:38:54:34:bb:
                    42:40:12:01:90:a7:5e:4d:ae:26:4d:b7:0e:5f:a8:
                    f7:e1:f8:63:b7:38:65:9e:75:76:4b:46:8a:04:e9:
                    7a:4a:f4:48:d3:36:af:bf:a4:64:1f:6c:25:86:58:
                    81:eb:c8:33:b5:6c:9e:10:37:3a:64:db:3f:1f:fe:
                    9f:e7:bb:36:d2:9c:02:b6:38:e0:df:4e:c1:56:fa:
                    c9:27:41:18:df:6d:20:13:e2:7e:b1:37:92:b8:eb:
                    bd:c2:82:7a:57:82:cb:64:94:cb:91:11:94:92:d9:
                    d2:23:1f:74:b3:7d:e9:70:09:eb:dd:f5:34:b8:0a:
                    26:9b:08:06:22:84:9f:9b:45:f3:19:ae:43:cd:6f:
                    6d:81:0e:82:a5:1b:9e:3a:77:99:0a:9c:4b:eb:1a:
                    9d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:06:75:49:71:93:17:3C:2D:08:44:6A:18:E3:82:F3:75:28:66:86
            X509v3 Authority Key Identifier:
                keyid:EF:D9:19:19:78:63:1F:C9:55:AC:0F:51:06:2D:5C:E9:84:4E:AE:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:80:c0:12:c3:35:7c:89:d1:26:14:38:ca:d4:b8:6e:a2:45:
         52:db:a0:e0:c0:5d:55:23:81:8b:ab:d6:9e:f4:cc:6a:e6:2e:
         46:94:7b:55:a8:21:9d:13:9c:1a:48:79:3d:47:e6:5c:17:9e:
         5a:b4:81:ba:22:71:0e:af:3b:c9:70:e8:3f:be:c2:a5:71:2c:
         2a:75:05:0e:13:0a:a5:1f:1e:b0:8b:3e:b4:5d:d7:1e:ad:9b:
         96:79:60:ec:e5:15:01:c3:53:ae:ce:43:33:df:66:21:5d:a9:
         09:75:63:5f:cf:2c:28:95:72:c1:aa:5b:e8:67:02:e1:ce:62:
         ee:85:f1:e3:2f:50:c0:31:0b:29:cb:b1:76:e4:70:cf:f3:ad:
         bb:13:eb:fe:33:09:7c:a0:3b:b5:8d:a3:6b:fb:31:6b:6b:94:
         05:bc:06:f3:7e:e1:06:1d:91:ac:09:04:63:d4:fa:74:c5:22:
         ea:35:0c:b5:4c:e1:ac:d1:8b:52:7d:ab:ba:fd:0e:60:30:26:
         c7:cf:0e:20:ca:91:aa:9e:1d:f2:ae:f0:b7:f8:0e:20:7e:f8:
         5a:fa:88:a7:01:65:56:0d:8c:32:2d:12:f0:7f:fd:2b:9e:b8:
         8e:99:d5:13:7d:0f:8a:9b:79:bd:fc:7b:2d:e9:f8:4f:2a:12:
         a3:98:be:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:58 2026 by rpki-client