Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
File:                     8j79S9kntM6jMSCiG09zFNy-oXk.mft (raw, json)
Hash identifier:          l2KRlZ2o7ZrUar+NbHAymlvR0MMbEAB0tkvIHTtNpNc=
Subject key identifier:   79:30:10:DD:0B:3F:C5:98:5A:45:C6:4F:3D:93:38:A5:37:6A:71:E3
Authority key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Certificate issuer:       /CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Certificate serial:       019D27DFFD8CB39DC9B3E517294EA1373115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
Manifest number:          102B
Signing time:             Thu 26 Mar 2026 02:01:23 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:23 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:23 +0000
Files and hashes:         1: 8j79S9kntM6jMSCiG09zFNy-oXk.crl (hash: 2+NlDrKoziT0tjJ/4cLqeIwmXLVbvfKIUECJhIeGpmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:fd:8c:b3:9d:c9:b3:e5:17:29:4e:a1:37:31:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
        Validity
            Not Before: Mar 26 02:01:23 2026 GMT
            Not After : Mar 27 02:01:23 2026 GMT
        Subject: CN=793010dd0b3fc5985a45c64f3d9338a5376a71e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:15:58:df:ac:e0:57:9b:50:69:6c:bf:05:
                    25:2e:14:e4:4d:ed:cd:9e:b8:e8:11:c4:52:b4:c3:
                    f9:53:3e:63:31:83:51:b9:1f:5f:b4:f2:71:e4:69:
                    61:f3:15:51:ea:51:50:87:e2:a6:62:c3:50:38:9a:
                    7f:3b:b3:fd:62:0e:2a:43:90:3c:33:fa:7c:5c:a9:
                    07:cd:53:2a:52:bb:b7:9f:05:87:e8:b2:0b:24:9b:
                    19:35:40:02:b9:e9:39:e8:26:90:f7:65:e9:3e:24:
                    7e:85:69:e4:9b:7a:af:39:a1:76:ce:31:fa:01:df:
                    d1:89:db:47:56:25:df:57:a0:8c:79:80:83:48:f9:
                    15:27:83:da:f6:51:cd:1d:66:f3:0b:6b:3c:e3:72:
                    51:2b:a9:a5:77:d1:f3:71:69:2d:5d:bd:0e:5a:24:
                    e9:a6:53:d3:36:9d:e2:33:21:b8:1d:6e:cc:e2:ea:
                    5b:bd:62:a7:1b:0d:1a:25:f1:92:f1:45:37:c0:d6:
                    cf:c1:d9:68:eb:0f:e9:77:b3:ce:fc:99:2e:f5:4a:
                    11:a7:c5:80:39:e3:e3:5d:db:6a:72:9b:9d:0d:e5:
                    a5:02:f9:7c:e6:9d:94:a1:b9:f3:a5:74:0e:6e:1b:
                    67:42:57:83:ae:dd:28:88:63:bd:c2:36:4a:6c:92:
                    6b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:30:10:DD:0B:3F:C5:98:5A:45:C6:4F:3D:93:38:A5:37:6A:71:E3
            X509v3 Authority Key Identifier:
                keyid:F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e4:72:ab:ca:c8:77:a8:13:34:50:66:a7:d1:09:70:45:75:
         57:27:bb:0d:47:a6:ce:88:04:f7:94:9b:fc:fe:e0:d7:0a:58:
         43:ce:42:99:9b:35:7d:b7:fd:d7:dd:87:69:2c:ba:8f:7a:b4:
         ab:66:34:77:3d:cc:5d:a1:80:87:ca:61:f8:6c:2b:89:ff:41:
         c6:bf:6f:08:cb:03:78:2f:fd:83:d5:4b:b5:43:28:3e:88:7a:
         d2:c9:ca:4f:ec:c0:73:20:e3:37:75:fb:22:8f:e8:55:6a:16:
         6a:cf:28:3b:a0:ce:5e:31:f8:d7:de:22:1e:23:a5:95:0e:c9:
         e0:77:37:19:d5:4b:0c:91:0b:8f:2b:f1:2a:19:b3:4c:06:3e:
         3f:86:15:bf:b6:74:ed:a5:8d:ad:ac:dc:d4:93:84:5d:32:fe:
         ae:5d:1a:97:07:2e:60:d4:9d:fd:3c:70:96:b3:14:ea:8e:94:
         f4:2f:ff:5a:6d:25:e9:4d:0b:ec:1a:16:48:87:b0:da:b1:f1:
         98:55:94:64:60:0b:84:e4:78:fe:e8:bd:06:ee:4e:62:46:9d:
         bb:0e:16:29:b9:44:d7:6f:f6:cb:5f:cf:fb:42:29:12:c7:32:
         f4:2d:a3:5a:8d:7d:fb:4c:11:57:a3:a1:ed:00:11:34:5d:d6:
         43:71:e9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:23 2026 by rpki-client