Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
File:                     79XDTJ_TJEnLwIirENkbWkq1Nho.mft (raw, json)
Hash identifier:          Jm6rL3nQC+x6l2k4EG0qnb3vDS1VmCmXW28V2OXRO6w=
Subject key identifier:   56:7E:43:B2:03:53:DF:0B:17:D8:BE:B3:DC:FA:C1:C2:C8:DD:A5:5F
Authority key identifier: EF:D5:C3:4C:9F:D3:24:49:CB:C0:88:AB:10:D9:1B:5A:4A:B5:36:1A
Certificate issuer:       /CN=efd5c34c9fd32449cbc088ab10d91b5a4ab5361a
Certificate serial:       019D28165C83D98DC56C7BD5C5863A7E26C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
Manifest number:          085E
Signing time:             Thu 26 Mar 2026 03:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:47 +0000
Files and hashes:         1: 79XDTJ_TJEnLwIirENkbWkq1Nho.crl (hash: U3pDtcXKn+WDvLr98o6SAsOOymgRPFjoQdc/SEsxkgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:5c:83:d9:8d:c5:6c:7b:d5:c5:86:3a:7e:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd5c34c9fd32449cbc088ab10d91b5a4ab5361a
        Validity
            Not Before: Mar 26 03:00:47 2026 GMT
            Not After : Mar 27 03:00:47 2026 GMT
        Subject: CN=567e43b20353df0b17d8beb3dcfac1c2c8dda55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:43:ce:4c:e6:e3:b1:27:03:ba:a2:49:b2:cf:
                    b6:23:4f:00:a8:b1:c9:9b:e0:ac:b6:94:6f:0c:15:
                    01:c0:73:b4:95:f9:72:db:ee:f0:3f:37:88:aa:8f:
                    54:24:0f:8f:ab:29:f8:27:3e:b2:e9:33:59:a1:f1:
                    f1:d1:3b:78:c0:0f:38:58:24:9d:5e:75:e2:da:dd:
                    8f:5a:61:5e:ee:81:87:1f:17:66:c3:b7:6a:3e:aa:
                    c4:e8:e1:62:1f:15:6b:6b:32:57:90:47:2d:8a:c6:
                    0d:d5:76:d1:a3:9f:e0:9d:31:c9:b6:b5:1e:a5:0d:
                    85:f1:cb:4c:75:4a:88:a1:cb:25:39:b6:25:f8:fd:
                    5b:79:7d:3a:f5:be:c0:04:58:88:26:ee:9d:01:d6:
                    a3:c6:f0:56:b4:43:31:e2:ed:2d:8f:a7:5a:d7:95:
                    c3:09:77:1d:da:87:cf:a7:7d:90:e1:59:c1:f6:c5:
                    62:a2:0e:e5:e8:36:04:fc:7d:09:14:df:a0:77:21:
                    34:ed:00:30:72:6d:06:e2:40:69:50:22:2e:95:ab:
                    1f:9a:09:3e:5f:64:24:3b:6d:72:d9:65:81:f9:3a:
                    a4:29:4f:ce:aa:db:f1:58:ad:1c:17:ae:f1:e8:59:
                    1d:f1:36:14:16:49:53:51:6b:88:7e:9b:b2:2d:19:
                    76:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7E:43:B2:03:53:DF:0B:17:D8:BE:B3:DC:FA:C1:C2:C8:DD:A5:5F
            X509v3 Authority Key Identifier:
                keyid:EF:D5:C3:4C:9F:D3:24:49:CB:C0:88:AB:10:D9:1B:5A:4A:B5:36:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79XDTJ_TJEnLwIirENkbWkq1Nho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/15a057-4427-4b9d-ab75-5b7aba0f258c/1/79XDTJ_TJEnLwIirENkbWkq1Nho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:4f:ee:69:37:b3:ad:6f:0a:2a:5f:50:1c:8a:b1:a6:89:3e:
         d6:4f:f1:d5:8e:33:49:f7:04:26:a9:5b:96:71:1c:47:f3:f0:
         80:6d:35:46:ec:46:55:b5:9d:9e:5d:56:ed:b7:2d:40:0c:88:
         c4:db:1f:f9:16:01:fc:8b:ad:6a:96:fb:ba:7f:f6:34:57:08:
         75:73:34:4d:1c:93:fd:01:8f:08:59:f7:10:56:9a:11:e1:b3:
         d6:51:70:0c:d7:91:0c:09:70:08:e4:50:2c:e4:1e:af:b0:e6:
         e0:c7:22:51:f9:24:41:19:e0:9c:65:34:d8:fc:8f:64:cc:0c:
         a9:4f:c0:11:72:a9:e9:f1:75:2f:c9:7e:ae:17:f1:36:67:66:
         5d:34:a9:67:11:d5:5a:c1:e2:59:a3:79:d4:9d:2e:3d:c5:c6:
         9d:be:9f:46:27:34:1f:f2:f3:15:dc:e3:9b:ab:c1:c3:d8:37:
         58:2a:af:d5:5e:63:33:c0:53:8f:6a:ad:ee:cc:1b:9c:c7:f1:
         03:60:ab:b3:2b:c4:53:bb:00:cd:10:71:42:3a:81:52:a7:f3:
         7a:3c:9a:b4:9c:9c:cb:4e:6d:cd:98:35:67:90:a6:f7:a1:a6:
         42:08:32:15:5a:e2:55:dd:2a:06:bb:e6:55:2d:ea:4c:43:fe:
         da:bf:3f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:15 2026 by rpki-client