Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
File:                     79XDTJ_TJEnLwIirENkbWkq1Nho.mft (raw, json)
Hash identifier:          hnIwaz5RMXkdKk5zh/2wX7nbxECVpdPvtVD0D26oiGc=
Subject key identifier:   BE:11:32:E6:C3:FB:16:69:53:48:A9:EF:82:74:9D:9A:25:30:34:1E
Authority key identifier: EF:D5:C3:4C:9F:D3:24:49:CB:C0:88:AB:10:D9:1B:5A:4A:B5:36:1A
Certificate issuer:       /CN=efd5c34c9fd32449cbc088ab10d91b5a4ab5361a
Certificate serial:       019E1F47A43A6C684E7A13E6E05819365969
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
Manifest number:          08DE
Signing time:             Wed 13 May 2026 03:00:49 +0000
Manifest this update:     Wed 13 May 2026 03:00:49 +0000
Manifest next update:     Thu 14 May 2026 03:00:49 +0000
Files and hashes:         1: 79XDTJ_TJEnLwIirENkbWkq1Nho.crl (hash: 1nLh/QG42tpysKsqZBYPeAOV9a5Q8T64WWL3nDuzF0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:a4:3a:6c:68:4e:7a:13:e6:e0:58:19:36:59:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd5c34c9fd32449cbc088ab10d91b5a4ab5361a
        Validity
            Not Before: May 13 03:00:49 2026 GMT
            Not After : May 14 03:00:49 2026 GMT
        Subject: CN=be1132e6c3fb16695348a9ef82749d9a2530341e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3e:4b:e0:32:eb:f3:2c:e6:58:83:75:b0:d7:
                    a5:d3:94:5b:09:97:b4:3f:03:f9:2f:58:48:4c:4a:
                    32:09:6e:de:53:34:97:3c:4e:0c:50:98:57:db:bf:
                    3c:a4:5e:a4:74:f1:2b:84:1d:64:6b:0a:d0:40:9e:
                    1b:c2:cc:31:7a:ad:a5:fa:cc:48:d4:40:36:03:0d:
                    53:65:2d:c4:41:c9:87:50:cf:24:a2:c6:7c:70:c2:
                    83:0e:0e:e7:6f:ac:37:d6:b3:79:f0:8f:01:69:5d:
                    bb:bf:7c:87:a0:f4:db:5e:42:3e:ed:07:86:26:0b:
                    89:1d:dd:42:5f:37:92:73:b7:02:6f:0a:c0:9f:29:
                    6e:63:91:66:1e:11:c0:da:99:b7:03:86:ce:a4:cc:
                    31:f6:1d:f2:d3:45:4b:11:26:fc:fd:65:3b:62:1a:
                    04:70:90:30:40:00:05:86:ba:1e:cc:de:d7:80:4c:
                    8c:c9:e2:64:10:04:11:79:f2:f7:4e:d2:d4:ad:c5:
                    5d:2e:32:01:cc:34:9f:6b:d3:78:3b:5e:53:e5:7a:
                    c6:e3:53:54:28:a9:89:11:d4:74:bb:23:98:cf:e8:
                    12:87:19:25:78:03:ac:c5:d1:70:30:b8:44:c4:ce:
                    f6:c6:66:b9:bd:16:a6:27:0b:f8:72:16:a3:66:18:
                    ac:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:11:32:E6:C3:FB:16:69:53:48:A9:EF:82:74:9D:9A:25:30:34:1E
            X509v3 Authority Key Identifier:
                keyid:EF:D5:C3:4C:9F:D3:24:49:CB:C0:88:AB:10:D9:1B:5A:4A:B5:36:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f6:a8:b5:b0:34:25:4f:70:c6:92:89:49:70:9d:65:80:9f:
         0f:3d:7f:5a:a7:44:ae:cb:e2:0e:ba:10:76:fc:d7:20:10:c2:
         0e:25:a8:9b:b6:d4:98:b9:20:69:3a:6b:51:96:38:55:14:15:
         b7:09:df:c3:f7:24:a0:0a:23:3b:4e:4e:bd:07:f1:f1:10:7a:
         79:8f:ff:3e:d4:76:f6:4b:b1:6a:1f:41:7b:63:ae:3d:f8:48:
         d4:0b:84:2a:eb:00:c0:f6:87:a8:6d:06:56:b7:66:95:56:d7:
         5e:58:70:6d:46:de:e9:96:5f:1f:80:03:42:c7:35:d9:63:46:
         d9:16:0c:d7:8b:11:68:72:ed:ca:77:cf:00:47:25:48:41:49:
         c2:f0:5c:d8:bd:3d:74:7a:5a:be:82:cc:2a:ac:5a:4e:a9:8d:
         19:22:09:6a:69:05:b0:44:4c:5a:3d:bd:50:f2:cc:d2:57:f3:
         28:ed:75:57:4a:20:a2:e5:71:75:75:9e:8f:ad:e3:db:8b:de:
         cd:b9:51:4b:fa:94:e4:fb:72:54:52:dc:17:ae:11:b0:f7:40:
         35:2b:d8:2e:41:61:c8:cb:b7:98:6e:d3:a0:fe:26:c2:b3:f1:
         3d:9c:42:ad:77:03:a7:5d:54:50:8f:df:17:d0:7a:d5:e9:ff:
         c9:bb:6a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:35:53 2026 by rpki-client